Privacy Policy

Last updated: 2026-08-23 · Effective: 2026-07-10 · Version 0.8-draft

This Privacy Policy explains how [LEGAL ENTITY NAME] (“Company”, “we”, “us”) collects, uses, and shares personal data when you use the narde.games mobile application, its public website, and related services (the “Service”). It is written to meet the EU/UK GDPR, the California CCPA/CPRA, and the requirements of the Apple App Store and Google Play. The English version prevails over translations.

1. Who We Are (Controller) & Contacts

The data controller is [LEGAL ENTITY NAME], [REGISTERED ADDRESS].

Privacy contact: support@narde.games
UK Representative (UK GDPR): [UK REP NAME & ADDRESS]

2. Data We Collect

Account & identity: e-mail address, username, password (stored only as a salted hash), passkey credential identifiers, account ID and status.
Profile & social: nickname, public ID, avatar (image and color), language preference, following/followers, mute list, online-presence status. We also keep previous avatar images and previous nicknames for a limited period — see §6.
Gameplay: ELO rating and history, games played/won/lost and outcome types, match history, leaderboard standing.
User content & communications: chat and private (whisper) messages, profile fields, reports you submit (which may include information about another user), and support correspondence.
Settings: in-app preferences (sounds, hints, animations, board theme, matchmaking, messaging-privacy choices, etc.).
Device & technical: IP address, device fingerprint, device model and operating system, app version, language, and diagnostic/crash logs (crash logs when added).
Moderation: restriction and enforcement records, moderation events, IP/device-fingerprint signals used to enforce safety rules and prevent ban evasion, and — attached to a report — a snapshot of the reported player’s nickname and avatar as they appeared when the report was filed, together with the surrounding chat messages.
Purchases (when subscriptions/IAP go live): subscription/plan status and transaction identifiers. Payment-card details are handled by Apple/Google, not by us.
Push notifications (when added): device push token.
Website audience measurement (Google Analytics 4): on the public website only. Where your consent is required — see §10 for where that is and how we tell — the tool is not loaded until you give it, so until then nothing about your visit reaches Google, not even your IP address. Where consent is not required, it is loaded from the start and you can switch it off at any time. Once you consent we receive, in aggregated reports: the pages you view, the page that referred you, an approximate location derived from your IP address (country and region, not a precise location), device and browser type, and language. We also record three things about how you read a page, so that we can tell which articles answer a question and which do not: which FAQ questions you open (the question text, which is our own wording, not anything you type), how far down a page you scroll (recorded at 25/50/75/100%), and clicks on the Play button that opens the game. None of the three carries anything you have typed or any identifier we create for you. Google receives your IP address in order to derive that location, and stores a randomly generated identifier in your browser so that your repeat visits count as one visitor. How the choice is asked, changed, and withdrawn is in §10.
Analytics & advertising identifiers in the app (when added): usage events and, only with your consent, analytics/attribution and advertising identifiers (e.g., IDFA/GAID).
Third-party sign-in (Google, Apple): when you choose to sign in with a provider, we receive a signed identity token and keep from it the provider’s stable identifier for you and, when the provider supplies one, your e-mail address. With Apple that address is often a private-relay alias (…@privaterelay.appleid.com), which we store as given; Apple sends the address only on your first authorization, and never sends your name. We match your account by the provider identifier, not by the address. We never receive your provider password.
Consent records: your privacy choices and timestamps.

The mobile app contains no third-party analytics, advertising, or crash-reporting SDK; this policy will be updated before any such feature is enabled in it. The public website uses Google Analytics 4, as described above and in §10; it is the only third-party script the website can load. The web version of the app loads Apple’s sign-in script from appleid.cdn-apple.com on every page view (the script initializes itself and cannot be loaded on demand), which discloses your IP address and user agent to Apple whether or not you use the button. Third-party sign-in is optional in both directions: an account can be created and used with an e-mail address and a password (or a passkey) and never touch a provider, and a provider-created account can add a password later.

3. How and Why We Use Data (Legal Bases)

Purpose	Legal basis (GDPR Art. 6)
Create and operate your account; authenticate you	Contract
Run matches, calculate ELO, leaderboards, presence, following	Contract
Transactional/service notifications (your turn, invites)	Contract / legitimate interests
Subscriptions and in-app purchases	Contract
Safety, moderation, anti-cheat, fraud prevention, handling reports	Legitimate interests (and legal obligation where required)
Security, debugging, service improvement	Legitimate interests
Marketing notifications	Consent
Measuring the audience of the public website (Google Analytics)	Consent where local law requires it; legitimate interests elsewhere
Analytics and advertising SDK identifiers in the app (when added)	Consent
Complying with legal obligations and responding to authorities	Legal obligation

We use IP addresses and device fingerprints to detect and prevent abuse, cheating, and ban evasion, and to keep the Service secure. We have assessed that this is necessary for our legitimate interest in protecting users and the integrity of the Service.

We share personal data only with categories of recipients that help us run the Service: cloud hosting and infrastructure providers; the app stores (Apple, Google) for purchases; the identity provider you choose to sign in with (Apple, Google) — using that option necessarily tells that provider you use the Service, and we receive your identifier and e-mail in return; push providers (when added); Google (Google Ireland Limited, and Google LLC in the United States) as the analytics provider of our public website, and only if audience measurement was running for you — see §10; analytics/attribution providers for the app (when added, and subject to your consent); customer-support and moderation tools; and professional advisers, authorities, or other parties where required by law or to protect rights and safety. We may also transfer data as part of a merger, acquisition, or sale of assets. We do not sell your personal data, and we do not “sell” or “share” it for cross-context behavioral advertising as those terms are defined under U.S. state laws.

5. International Transfers

We may process data in countries outside your own, including outside the EEA/UK. Where we transfer personal data of EEA/UK individuals to such countries, we rely on an adequacy decision (including the EU-US Data Privacy Framework where applicable) or on the European Commission’s Standard Contractual Clauses (and the UK IDTA/Addendum for UK data), together with appropriate supplementary measures. Website analytics data — where it exists at all — is processed by Google in the United States: that transfer relies on the EU-US Data Privacy Framework, in which Google LLC participates, with the Standard Contractual Clauses as a fallback. You may request a copy of the relevant safeguard at support@narde.games.

6. Retention

We keep personal data only as long as necessary for the purposes above:

Account and profile data: while your account is active. When you ask us to delete your account, it is closed at once and your personal data is erased 30 days later. During those 30 days the account cannot be used and your profile is not visible to other players — the data is kept only so you can change your mind, and signing in cancels the deletion. Backups are purged on their normal rotation afterwards. If you want your data erased sooner, tell us at support@narde.games and we will act without waiting out the 30 days.
Unverified, never-used accounts: if you register but never confirm your e-mail address and never start a game, we may delete the account and its associated data after a period of inactivity (data minimization, GDPR Art. 5(1)(e)). We post an in-app notice in advance; confirming your e-mail or playing a game cancels the deletion.
Match history and ELO: while active; anonymized on deletion.
Avatar images and nicknames: your current avatar and nickname for as long as your account is active. An avatar image you replace or delete, and a nickname you change, are kept for a limited period after they stop being current — long enough that a report about them can still be reviewed and a breach of our Terms evidenced, and no longer: a picture must not become unreviewable the moment it is reported. We keep only a limited number of the most recent versions. During that period they are not shown to other players: only our moderation and support staff can see them. They are deleted at the end of that period, or when your account is deleted, whichever comes first (subject to the exceptions in this section and §8). Legal basis: our legitimate interest in a safe service (GDPR Art. 6(1)(f)). You can ask us for the period currently in force at support@narde.games.
Moderation, ban, and report records: kept as long as necessary to enforce safety measures, prevent ban evasion, and establish or defend legal claims. A report keeps its own snapshot of the reported nickname and avatar for the life of that record, so that a decision remains reviewable and appealable.
Push tokens: until you unsubscribe, uninstall, or the token expires.
Website analytics: Google retains the event data of our property for no longer than 14 months, after which it is deleted; the aggregated reports built from it may be kept longer. App analytics/diagnostics (when added): a short, defined window, then aggregated or deleted.
Purchase/financial records: as required by tax and accounting law.
Consent records: for as long as needed to demonstrate consent plus the applicable limitation period.

7. Security

We implement appropriate technical and organizational measures, including encryption in transit (TLS) and at rest, hashing/salting of credentials, least-privilege and role-based access controls, network segmentation, pseudonymization/anonymization where feasible, secure development and dependency/SDK review, logging and monitoring, vendor due diligence and data-processing agreements, backups, and an incident-response and breach-notification process. No method of transmission or storage is completely secure.

8. Your Rights

EEA/UK (GDPR): access, rectification, erasure, restriction, data portability, objection, the right to withdraw consent at any time, and the right to lodge a complaint with your supervisory authority (e.g., the UK ICO or your local Data Protection Authority). We respond within one month (extendable by two months for complex requests).

California (CCPA/CPRA): the right to know/access, delete, and correct your personal information; to opt out of sale/sharing; to limit the use of sensitive personal information; and not to be discriminated against for exercising your rights. Because we do not sell or share personal information, no “Do Not Sell or Share” action is required, but you may still exercise your other rights. We honor recognized opt-out preference signals (such as Global Privacy Control).

Other regions: residents of other jurisdictions (e.g., Brazil, Canada, and various U.S. states) have comparable rights and may contact us to exercise them.

How to exercise: write to support@narde.games — access, portability, correction and erasure requests are handled by e-mail, and we verify your identity before acting on one. Some things you can do yourself in the app without asking us: edit your profile and change what other players can see (My Profile → Profile and My Profile → Privacy), and delete your account (My Profile → Security → Danger Zone → Delete account), which closes it now and erases your personal data after 30 days — see §11. Erasure is not absolute either: we may retain limited data where another legal basis requires it (e.g., enforcing bans, tax records, or defending legal claims).

9. Children

The Service is not directed to children below the minimum age in our Terms (at least 16 in the EEA, at least 13 elsewhere, or higher where required). We do not knowingly collect personal data from children below that age. If you believe a child has provided us data, contact support@narde.games and we will delete it.

10. Cookies & SDK Identifiers

Neither the app nor the website uses advertising cookies, and we run no advertising or remarketing tags.

Where your consent is required, nothing is loaded without it. Consent is required — and the banner therefore appears — if you are in the EEA (the EU plus Iceland, Liechtenstein and Norway), the United Kingdom, Türkiye or Russia. Until you answer there is no request to Google at all: no cookie, no identifier, and not even your IP address, which a merely “cookieless” analytics setup would still disclose. What decides this is where you are, not the language you read the site in: a reader in the United States on the English pages is not in that group, and a reader in Germany on the Turkish pages is.

Elsewhere audience measurement starts without asking, on the basis of our legitimate interest in knowing which pages are read, because the law that applies to you does not require consent for it. You can switch it off at any time — see below — and we treat a Global Privacy Control signal from your browser as switching it off before it ever starts, wherever you are.

To tell the two apart we ask our own content-delivery provider, Cloudflare, which country your connection comes from — a request to this site’s own domain, answered from your IP address, which our hosting already handles in order to deliver the page at all. Nothing is disclosed to anyone new, the answer is not stored, and we ask only once: on your first visit, before you have an answer on file. If the answer does not arrive or the country cannot be determined, we ask you.

One banner, and only one, asks for your choice; it offers Accept all and Reject all side by side, as one click each, and Choose purposes for a decision per purpose:

Purpose	What it does	Default
Strictly necessary	Keeps your language choice and your answer to the banner in your browser’s local storage. No cookie, nothing sent anywhere, no consent required — so it cannot be switched off	On
Audience measurement	Google Analytics 4, loaded only on consent. Google then stores its `_ga` cookies in your browser for up to 2 years, so that repeat visits count as one visitor	Off

Nothing but the strictly necessary is switched on before you choose, and no other purpose is in use today: we run no advertising, remarketing, or profiling tags of any kind. Should that ever change, the same banner will ask you about the new purpose before it is enabled — you will not meet a second, separate prompt.

Rejecting is one click and costs you nothing: no feature of the site depends on your answer, and the choice is never assumed from a closed banner or an ignored one. Reject, or simply never answer, and the analytics script is never fetched — so Google learns nothing about your visit, and we learn nothing beyond what our hosting provider logs to serve the page and keep it secure.

To change your mind at any time, wherever you are, use Cookie settings in the site footer: it reopens the same banner with your current choices, which is also where a Reject all takes effect immediately. It is there for every visitor, including those who were never shown the banner. Withdrawal is as easy as consent: when you withdraw, the page reloads so that the already-loaded script does not linger for the rest of your visit, and it is not loaded again. If your browser sends a Global Privacy Control signal, we treat it as a rejection and do not ask again — the footer link is there if you want to change that.

Your answer is stored in your browser’s local storage under the key narde.consent, together with the date and the set of purposes it covers, and not on our servers — so it is per-browser and per-device, and clearing this site’s data clears it. If we ever add or change a purpose, that stored answer no longer covers what we are asking, and the banner asks again rather than inheriting an answer to a different question.

When we add analytics, attribution, or advertising SDKs to the app, those that are not strictly necessary will be enabled in the EEA/UK only after you give consent through our in-app consent prompt, and on iOS we will request permission through Apple’s App Tracking Transparency before any cross-app tracking or use of the advertising identifier. You can change your choices at any time in the in-app privacy settings.

11. Account & Data Deletion

Closing and deleting are two different things, and the app offers one of them.

In the app, at My Profile → Security → Danger Zone → Delete account. The account is closed at once — you are signed out everywhere and it can no longer be used — and your personal data is erased 30 days later.

Changed your mind? Sign in before that date and the deletion is cancelled; nothing is lost. If you cannot sign in, contact support@narde.games and we will cancel it for you.

Without the app, or if you want it done sooner: write to support@narde.games or use our Account Deletion page.

What survives the erasure, and why, is described in §6 and §8. Some things are not deleted because they are not only yours: a match you played stays in your opponent’s history, a message you sent stays in the conversation it was part of, and a tournament result stays in the standings — with your name replaced everywhere by “Deleted account”.

12. Push Notifications

If enabled, we send service and (with your consent) promotional notifications. You can disable them in your device settings or in the in-app notification settings.

13. Changes to This Policy

We may update this Policy. We will post the updated version with a new “Last updated” date and, for material changes, provide notice in the app or by e-mail.

14. Contact

[LEGAL ENTITY NAME], [REGISTERED ADDRESS] Privacy: support@narde.games UK Representative: [UK REP NAME & ADDRESS]