What we collect

• Account data. Your email address, a password hash (we never see the password), your display name, and when the account was made and last used. Used to run the account and to email you the things you asked for: verification, password resets, nothing else.
• Games. Every move you make, with its time, and the seed the cards were dealt from. A finished game's log and seed are public, so anybody can replay it and check the deal was fair. An unfinished game is visible only to its two players.
• Ratings. Your rating per game, your record, and the before-and-after of every rated game. Public, under your display name.
• Guest play. If you play the bot without an account, a random id in a session cookie ties your games to your browser. Creating an account later adopts them; clearing the cookie orphans them.
• Server logs. IP address, user agent, path and time, kept 30 days for security and debugging, then deleted.
• Telemetry. Timings and counts about requests and games (how long a move took, how many games started), and a record of what happened (you signed in, a move was refused, a game ended) identified by your account number and the game's, never by your address or your name. It goes to a monitoring system on our own server, kept 14 days, and is never shared with anyone.
• Your consent choice. Whether you accepted or rejected advertising cookies, and when, so we can show it was asked.
• Notifications. If you turn them on, the push subscription your browser gives us, used only to say it is your move.

Advertising

The site is paid for by advertising. Advertising cookies and the ad network's script are loaded only after you choose Accept on the cookie sheet; choose Reject and no ad script loads at all. When they are loaded, the ad partner (Google AdSense) may collect the data described in Google's partner-sites policy, under its own certified consent message. You can change your choice at any time from "Cookie settings" in the footer. Ads are never a condition of playing: with ads off, everything works the same.

The footer of every page also carries an affiliate link, marked as one. It is a link and nothing more: following it is the only thing that tells anybody you saw it, we are paid if you then sign up with that company, and what they do with your visit is covered by their own privacy policy and not by this one. It sets no cookie here and loads nothing, which is why it is not part of the cookie choice above.

Why we are allowed to

• Contract, for the account, the games and the ratings: they are the service you asked for.
• Consent, for advertising cookies and for notifications: both are off until you turn them on.
• Legitimate interest, for server logs and telemetry: keeping the site up and secure, with the shortest retention that does the job.

How long

Account data for as long as the account exists. Finished games and rating history indefinitely, because the leaderboard and the fair-play check depend on them; deleting your account replaces your display name on them with "deleted player". Server logs 30 days, telemetry 14 days, the consent record 12 months.

Your rights

You can ask for access to, correction of, export of, or deletion of your personal data: email ops@peer2peergames.com and we answer within a month. Deleting your account from the account page does the same without the email. If you think we have handled your data badly you can complain to the ICO, though we would appreciate the chance to fix it first.

Children

The site is for people 13 or older, and says so at registration. We do not collect a date of birth. If you believe a younger child has an account, email us and we will remove it.

Who else sees anything

Our hosting provider (the server), our email provider (verification and reset mail only), and, only after you accept advertising cookies, Google AdSense. Nobody buys data from us; there is nothing for sale.