Privacy Policy

Last updated: November 18, 2025

Effective date: November 18, 2025

1. Introduction

Welcome to Chiss, a mobile chess variant game. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and related services (collectively, the "Service").

By using Chiss, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our Service.

2. Information We Collect

2.1 Personal Information You Provide

When you create an account, we collect:

• Username: A unique identifier you choose (3-30 characters)
• Email Address: Used for account authentication and communication
• Password: Securely stored using industry-standard bcrypt hashing (we never store passwords in plain text)

2.2 Game and Usage Data

To provide gameplay features and statistics, we automatically collect:

• Game Statistics: Your rating, games played, wins, losses, and draws
• Game History: Records of your completed games, including moves, timestamps, and results
• Performance Data: Statistics broken down by game mode (AI offline, AI online, multiplayer)

2.3 Technical Information

We collect minimal technical data necessary for the Service to function:

• IP Address: Collected by our server for connection and security purposes
• Connection Data: WebSocket connections for real-time multiplayer gameplay
• Session Tokens: JWT tokens for secure authentication

2.4 Information We Do NOT Collect

We respect your privacy and do not collect:

• Location data or GPS coordinates
• Device identifiers (IMEI, Android ID, advertising IDs)
• Contact lists or address books
• Camera, microphone, or photo library access
• Browsing history or activity outside the app
• Any data from third-party analytics or advertising services

3. How We Use Your Information

We use the collected information for the following purposes:

• Account Management: To create and manage your user account
• Gameplay: To enable online multiplayer, matchmaking, and game state synchronization
• Statistics and Leaderboard: To track your performance and display rankings
• Communication: To respond to your inquiries and send important service updates
• Security: To protect against unauthorized access and ensure fair gameplay
• Service Improvement: To understand usage patterns and improve the game experience

4. Data Sharing and Disclosure

4.1 Public Information

The following information is publicly visible to other users:

• Your username
• Your rating and rank
• Your win/loss/draw statistics
• Games you've played (visible to your opponents)

4.2 Private Information

We keep the following information private and never share it:

• Your email address
• Your password (stored as an encrypted hash)
• Your IP address

4.3 Third-Party Sharing

We do not sell, rent, or share your personal information with third parties for marketing purposes.

We may disclose your information only in the following limited circumstances:

• Legal Requirements: If required by law, court order, or government regulation
• Safety and Security: To protect the rights, property, or safety of Chiss, our users, or the public
• Business Transfers: In connection with a merger, acquisition, or sale of assets (users will be notified)

5. Data Security

We implement industry-standard security measures to protect your information:

• Encryption: All data transmitted between your device and our servers is encrypted using HTTPS/TLS
• Password Security: Passwords are hashed using bcrypt with salt before storage
• Authentication: Secure JWT token-based authentication system
• Access Controls: Strict access controls limit who can access user data
• Regular Updates: We keep our systems updated with the latest security patches

While we strive to protect your personal information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

6. Data Retention

• Active Accounts: We retain your data as long as your account is active
• Deleted Accounts: When you delete your account, all personal data is permanently removed from our systems within 30 days
• Backups: Some data may persist in backups for a short period before being completely purged

7. Your Privacy Rights

7.1 Access and Update

You can access and update your account information at any time through the app's settings.

7.2 Account Deletion

You have the right to delete your account and all associated data. See our Account Deletion page for instructions.

7.3 Data Portability

You may request a copy of your data by contacting us at [email protected].

7.4 Additional Rights (GDPR, CCPA)

If you are located in the European Union or California, you may have additional rights:

• Right to know what personal data we have about you
• Right to correct inaccurate data
• Right to object to processing of your data
• Right to restrict processing
• Right to data portability

To exercise these rights, contact us at [email protected].

8. Children's Privacy

Chiss is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at [email protected], and we will delete such information.

9. International Data Transfers

Your information may be transferred to and maintained on servers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ. By using our Service, you consent to this transfer.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

• Updating the "Last updated" date at the top of this policy
• Posting a notice in the app (for material changes)
• Sending an email notification (for significant changes)

Your continued use of the Service after changes become effective constitutes acceptance of the revised policy.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: [email protected]
• Response Time: We aim to respond within 48 hours

12. Consent

By using Chiss, you consent to our Privacy Policy and agree to its terms.