Privacy policy

1. What we keep

• Account: your username, your password as a salted scrypt hash (never the password itself) and the time you registered. We do not ask for an email address or a real name.
• Guests: a random name such as Guest-1234 and a random id, kept only for the visit.
• Games: every game that starts is recorded with its table, rules, clock settings, the names of the players and bots in each seat, every turn, and the result. Registered players see their latest games on the start screen.
• Chat: messages written at a table, with the name, the time and the table. They are deleted automatically after 30 days.
• Sign-in session: a record on the server behind the sign-in cookie, valid for 7 days after your last visit (see the cookie policy).
• Technical data: your IP address is used while you are connected and is counted in the server’s memory to slow down abuse. We do not save it in the game database. The server host and the web proxy in front of it can keep ordinary technical logs, which may contain IP addresses.

We do not collect your location, contacts, device identifiers or any data for advertising.

2. Why we use it

• To let you sign in, sit at tables, play and chat with other people.
• To show your game history and to keep game records.
• To protect the service from abuse, such as automated sign-ups or flooding.

We do not sell your data, and we do not use it for advertising or profiling.

3. Who sees it

• Everyone at your table sees your name, your seat, your moves and your table chat. Public tables are listed with their host’s name.
• The company that hosts our server processes the data for us, and Caddy obtains our HTTPS certificates through Let’s Encrypt, which only sees our domain name.
• We disclose data if the law requires it, or to protect the safety of people or of the service.

The game loads no third-party scripts, analytics, advertising or tracking services. If that ever changes, this policy and the cookie policy will be updated first.

4. How long we keep it

• Your account, until you delete it.
• Chat messages for 30 days; sign-in sessions until they expire or you sign out.
• Game records until we remove them. When you delete your account, your name in them and in chat is replaced by “deleted” and your history is unlinked from you.

5. Your choices and rights

• Delete your account: on the start screen, open “Delete my account” under your recent games and enter your password. Guests have nothing to delete: signing out ends their session.
• Access, correction, export, objection: email us and we will answer within 30 days. We hold so little that the answer is usually your username, your registration time and your games.
• Forgotten password: because we hold no email address we cannot reset a password. Create a new account instead.

You may also complain to your local data protection authority.

6. Children

Team Gammon is not aimed at children under 13 and we do not knowingly collect their data. Table chat connects you with other people, so please do not share personal details there. If you think a child has given us personal data, tell us and we will delete it.

7. Security

Connections use HTTPS, passwords are hashed, sign-in cookies are protected from scripts, and the server limits how fast anyone can try to sign in or send messages. No service is perfectly secure, so use a password you do not use anywhere else.

8. Changes and contact

We may update this policy and will change the date above when we do. Questions, requests and deletion help: dimitrispapadim@gmail.com.