Privacy Policy

Effective Date: October 12, 2025

At Playboards, we believe in minimal data collection and maximum privacy. This policy explains what information we collect and how we use it.

Information We Collect

Account Information

When you sign up, we collect:

• Email address (from Google OAuth or direct registration)
• Display name (chosen by you)
• Google profile information (if using Google sign-in: name, email, profile picture URL)

Game Session Data

During gameplay, we temporarily store:

• Game moves and state (kept in memory, automatically deleted after 2 hours)
• In-game chat messages (temporary, deleted when session expires)
• Player lists (who is in each game)

Important: We do NOT permanently store your game history, chat messages, or gameplay data beyond the active session.

Technical Information

Like most websites, we automatically collect:

• IP address (for security and basic functionality)
• Browser type and version (for compatibility)
• Session cookies (for keeping you logged in)

What We Don’t Collect

We explicitly do NOT collect:

• ❌ Browsing history or tracking data
• ❌ Advertising cookies or third-party tracking
• ❌ Analytics about your behavior
• ❌ Location data beyond IP address
• ❌ Payment information (service is free)
• ❌ Permanent chat logs or game history

How We Use Your Information

We use your information only to:

• Provide the game service and maintain your account
• Send essential emails (account verification, password resets)
• Authenticate you with Google OAuth (if you choose that option)
• Display your chosen display name to other players
• Enable real-time multiplayer gameplay

Data Storage and Security

• Account data (email, display name) is stored securely in our database
• Game sessions are stored temporarily in memory (ETS) with 2-hour automatic expiration
• Passwords (if using email/password) are hashed using bcrypt and never stored in plain text
• Database is encrypted and access-controlled

Cookies

We use cookies only for essential functionality:

• Session cookie (keeps you logged in during your visit)
• Remember me cookie (optional, keeps you logged in for 60 days if selected)

We do NOT use advertising, analytics, or tracking cookies.

Third-Party Services

We use minimal third-party services:

Google OAuth (Optional)

If you sign in with Google, we receive your Google profile information (name, email). This is handled by Google’s secure OAuth system. Review Google’s privacy policy at: https://policies.google.com/privacy

Email Service (Resend)

We use Resend to send transactional emails (verification, password resets). We do not send marketing emails unless you explicitly subscribe to our newsletter.

WebRTC Services (Future)

Voice chat functionality uses standard WebRTC technology. When enabled in the future, voice data is transmitted peer-to-peer (not stored on our servers). TURN servers may be used for connection reliability.

Data Retention

• Account information: Kept until you delete your account
• Game sessions: Automatically deleted after 2 hours of inactivity
• Chat messages: Deleted when game session expires (2 hours maximum)
• Deleted accounts: Permanently removed within 30 days

Your Rights

You have the right to:

• Access your account information (view in profile settings)
• Update your display name and preferences
• Delete your account at any time (removes all your data)
• Export your data (email us for a copy)
• Opt out of newsletter emails (if subscribed)

Children’s Privacy

Our service is intended for users aged 13 and older. We do not knowingly collect information from children under 13. If you believe a child under 13 has created an account, please contact us and we will promptly delete the account.

International Users

Your information is stored on servers. By using our service, you consent to the transfer and storage of your information as necessary to provide the service.

Changes to This Policy

We may update this privacy policy occasionally. We will notify you of significant changes by email or prominent notice on our website. Continued use after changes means you accept the updated policy.

Contact Us

If you have questions about this privacy policy or want to exercise your rights, please contact us:

Email: [email protected] Response Time: We typically respond within 7 business days

Data Protection Rights

Regardless of your location, we respect your data rights:

• Right to access your data
• Right to correct inaccurate data
• Right to delete your account and data
• Right to restrict how we use your data
• Right to export your data
• Right to object to data processing

To exercise these rights, contact us at the email above.

Summary: We collect only what’s necessary to run the game service. We don’t track you, sell your data, or store your gameplay beyond active sessions. Your privacy matters to us.

Last updated: October 12, 2025