Draft. This page has not been reviewed by a lawyer yet. Items in highlighted brackets still need filling in.
Privacy notice
This notice explains what [company legal name] ("Gambit Club", "we") collects when you use Gambit Club, why, and the choices you have. We don't sell your personal information.
What we collect
- Account details: your email address and username.
- Games and activity: your moves, the time each move took, results, ratings, coin balance, friends, challenges and settings.
- Fair-play signals: during your games, your browser reports how long you thought on each move and how often the game tab lost focus. We use these only to look into cheating.
- Technical data: your IP address and basic browser information, which our servers handle to deliver the site, limit abuse and keep it secure.
- Data stored on your device: a sign-in token, your settings and a random device identifier, kept in your browser's storage so you stay signed in. We keep a scrambled (hashed) form of the device identifier and of the network addresses you sign in from, so we can tell when accounts are played from the same device or network. We use this only to prevent cheating and abuse of the Rewards program. We don't use advertising cookies or trackers.
How we use it
- To run Gambit Club: sign you in, pair you with opponents, keep ratings and show your games.
- To send sign-in emails and important messages about your account or the service.
- To detect cheating, multiple accounts and abuse, and to keep the service secure.
- To understand how the beta is used and improve it, using aggregated numbers where we can.
Who can see it
- Other players and the public: your username, ratings and finished games (moves, times, results). Anyone with a link to a finished game can view it. Your email is never shown.
- Service providers who run parts of Gambit Club for us under contract: hosting and database ([hosting provider]) and email delivery ([email provider]).
- Authorities, when the law requires it or to protect players and the service.
- A buyer or successor, if Gambit Club is sold or merged, under this notice.
How long we keep it
We keep account details while your account is open. Game records are kept to maintain ratings and game history, and fair-play records as long as we need them to deal with cheating. When you delete your account, we delete or anonymize your personal information within [30] days, except where we must keep it longer by law.
Your choices and rights
You can ask us to show you, correct or delete your personal information by emailing [privacy email]. Depending on where you live, you may have more rights under your state's privacy law; we'll honor them. We won't treat you differently for using them.
Age
Gambit Club is for people 18 and older. We don't knowingly collect information from anyone younger. If you believe a minor has an account, tell us and we'll close it.
Security
We use encryption in transit, signed sign-in tokens and access controls, and we don't store passwords. No system is perfectly secure, so please keep access to your email account safe.
Changes
We'll post updates here and, for significant changes, tell you on the site or by email.
Contact
[Company legal name, mailing address] · [privacy email]