What we collect

• Account data. Your email address, a password hash (we never see the password), your display name, and when the account was made and last used. Used to run the account and to email you the things you asked for: verification, password resets, nothing else.
• Games. Every move you make, with its time, and the seed the cards were dealt from. A finished game's log and seed are public, so anybody can replay it and check the deal was fair. An unfinished game is visible only to its two players.
• Ratings. Your rating per game, your record, and the before-and-after of every rated game. Public, under your display name.
• Guest play. If you play the bot without an account, a random id in a session cookie ties your games to your browser. Creating an account later adopts them; clearing the cookie orphans them.
• Server logs. IP address, user agent, path and time, kept 30 days for security and debugging, then deleted.
• Telemetry. Timings and counts about requests and games (how long a move took, how many games started), and a record of what happened (you signed in, a move was refused, a game ended) identified by your account number and the game's, never by your address or your name. It goes to a monitoring system on our own server, kept 14 days, and is never shared with anyone.
• Your consent choice. Whether you accepted or rejected advertising cookies, and when, so we can show it was asked.
• Notifications. If you turn them on, the push subscription your browser gives us, used only to say it is your move.

Advertising

The site is paid for by advertising, and the advertising here is affiliate links: a picture we host ourselves, inside a link to Amazon. There is no advertising network. No script from anybody else runs on this site, nothing is fetched from another company when a page loads, and no advertising cookie is set at all. That is true whatever you answer on the cookie sheet, because there is nothing for an answer to switch off.

If you click one of those links you go to Amazon, and from that point Amazon's own cookies and privacy policy apply rather than ours. We are paid a commission if you buy something, which is what the "As an Amazon Associate" line beside each advert means. Nothing is passed to Amazon about you: the link carries which site sent you and nothing else.

Ads are never a condition of playing. No game, move or page depends on one.

The footer of every page also carries an affiliate link, marked as one. It is a link and nothing more: following it is the only thing that tells anybody you saw it, we are paid if you then sign up with that company, and what they do with your visit is covered by their own privacy policy and not by this one. It sets no cookie here and loads nothing, which is why it is not part of the cookie choice above.

Why we are allowed to

• Contract, for the account, the games and the ratings: they are the service you asked for.
• Consent, for advertising cookies and for notifications: both are off until you turn them on.
• Legitimate interest, for server logs and telemetry: keeping the site up and secure, with the shortest retention that does the job.

How long

Account data for as long as the account exists. Finished games and rating history indefinitely, because the leaderboard and the fair-play check depend on them; deleting your account replaces your display name on them with "deleted player". Server logs 30 days, telemetry 14 days, the consent record 12 months.

Your rights

You can ask for access to, correction of, export of, or deletion of your personal data: email ops@peer2peergames.com and we answer within a month. Deleting your account from the account page does the same without the email. If you think we have handled your data badly you can complain to the ICO, though we would appreciate the chance to fix it first.

Children

The site is for people 13 or older, and says so at registration. We do not collect a date of birth. If you believe a younger child has an account, email us and we will remove it.

Who else sees anything

Our hosting provider (the server) and our email provider (verification and reset mail only). That is the whole list. The advertising on this site fetches nothing from anybody, so no advertiser learns that you visited unless you click through to Amazon yourself. Nobody buys data from us; there is nothing for sale.