When you sign in with Google or Telegram we receive your display name, the address of your profile picture, a technical identifier from the chosen service and your preferred language. We do not receive or keep your e-mail address, phone number or contacts.
We also record what the games need to work: games played, results, Elo rating, statistics and your preferences (theme, sounds, card appearance).
Your session token is stored in hashed form. IP addresses are used only to limit abuse (for example too many sign-in attempts) and are not linked to your profile. Server logs contain no game content.
We use no cookies and no advertising or tracking tools. Preferences and your session are kept in your device's local storage, which you can clear at any time.
For sign-in we use Google (Sign in with Google) and Telegram (Telegram Login and Mini App). Those services process data under their own policies. Your profile picture is loaded straight from their servers. Inside Telegram the page loads the official Mini App script from telegram.org.
We use data only to provide the service (performance of the contract) and for security (legitimate interest). We do not sell or share it. We keep it until you delete your account; guest profiles inactive for 30 days are removed.
You can see your data in Profile, change it and delete your account at any time (Profile → Delete my account): your profile, statistics and sessions are removed and past games are anonymised. You also have the right of access, rectification, restriction and objection, and to lodge a complaint with your data protection authority.
The service is not directed at children under 13 (or the minimum age set in your country).
If we change this policy we will update the date at the top.