Policy

Privacy Notice

This notice explains what account, gameplay, and device information the platform uses to run matches, protect fair play, and support player-facing features.

Updated June 13, 2026

Information we store

We store the information needed to create and secure your account, including your username, display name, email address, password hash, wallet balance, ELO rating, and match history.

When you play, the platform also stores match state, action logs, reconnect state, chat history, fraud signals, and notification preferences so multiplayer sessions can stay authoritative and recover safely after disconnects.

  • Account profile data such as username, display name, avatar URL, and email address
  • Security and session records such as refresh-token rotation identifiers, request correlation IDs, and audit trails
  • Gameplay records such as moves, dice rolls, trades, loans, chat messages, leaderboard snapshots, and tournament participation

How the data is used

Player data is used to authenticate users, restore sessions, run ranked matchmaking, calculate rewards, enforce platform rules, and display in-game or public profile information.

Operational telemetry and fraud indicators are used to diagnose outages, detect abuse, and investigate moderation or support issues without exposing raw secrets to clients.

  • Run the live game economy, matchmaking, leaderboards, and tournaments
  • Send gameplay notifications and security-sensitive account recovery messages
  • Detect fraud, cheating, replay attempts, rate-limit abuse, and other harmful behavior

Sharing and retention

Public profile and leaderboard views may expose your display name, username, ELO, wallet milestones, and match record to other players. Private security logs, refresh sessions, and administrative audit trails are not exposed publicly.

Records are retained only as long as they remain operationally useful for account security, dispute resolution, analytics, or legal compliance. Sensitive tokens are rotated or revoked as part of normal platform security controls.

  • Public: profile, leaderboard, tournament, and match-summary information
  • Private: authentication secrets, admin-only telemetry, fraud evidence, and moderation notes
  • Revocable: refresh sessions, push subscriptions, and device-level notification preferences