Privacy Policy

Last updated: 10 July 2026

This Privacy Policy explains how BoardVerse ("we", "us") collects, uses, and protects your information when you use the Service.

1. Information we collect

• Account information — the username and email address you provide, and a securely hashed version of your password (we never store your password in plain text).
• Gameplay data — your rating, wins/losses/draws, match history, and the moves you make while playing.
• Technical data — basic log information such as your IP address and browser type, used to keep the Service secure and working.

2. How we use your information

• To create and maintain your account and let you play.
• To calculate ratings, leaderboards, and match history.
• To operate online multiplayer (storing game state so both players stay in sync).
• To secure the Service and prevent abuse or cheating.
• To provide premium features and process subscriptions where applicable.

3. Cookies

We use a single essential session cookie to keep you logged in. It contains no personal data beyond a session identifier and is required for the Service to function. We do not use third-party advertising or tracking cookies.

4. Third parties

We host the Service with our hosting provider and load some front-end libraries (such as Bootstrap) from a content delivery network; these providers may process your IP address as a normal part of serving requests. AI opponents run entirely in your browser — your moves are not sent to any third-party AI service. If you subscribe to premium features, payment is handled by a payment processor subject to its own privacy policy.

5. Data retention & deletion

We keep your account data while your account is active. Guest accounts are temporary and may be removed automatically. You can request deletion of your account and associated data at any time by contacting us; deleting your account also deletes your match history.

6. Security

We protect your data with industry-standard measures including password hashing, prepared database statements, CSRF protection, and (when enabled on the domain) encrypted HTTPS connections. No method of transmission or storage is completely secure, however.

7. Children's privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us information, please contact us and we will remove it.

8. Your rights

Depending on your location, you may have the right to access, correct, export, or delete your personal data. To exercise these rights, contact us using the details below.

9. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

10. Contact

For any privacy questions or requests, email support@boardverse.example.

This document is a general template and not legal advice. Please review it against the privacy laws that apply to you before launch.