Privacy Policy

1. Data Controller

Worldboard LLC ("we," "us," or "our") operates Worldboard. We are the data controller responsible for your personal data. For privacy inquiries, contact us at privacy@worldboard.games.

2. Data We Collect

We collect the following categories of personal data:

• Account data: email address, display name, and hashed password when you register.
• Authentication provider data: if you sign in via Google or Facebook, we receive your name and email from the provider.
• Game session data: game configurations, in-game actions, scores, and session history.
• Technical data: browser type, device information, and IP address collected automatically when you use the service.

3. How We Use Your Data

• To create and manage your account.
• To provide, operate, and improve the Worldboard game experience.
• To enable real-time multiplayer gameplay via WebSocket.
• To communicate with you about your account, including password resets and verification emails.
• To enforce our Terms of Service and prevent abuse.

4. Legal Basis for Processing (EU/EEA Users)

We process your personal data under the following legal bases:

• Contract: processing necessary to provide the service you signed up for.
• Legitimate interest: service improvement, security, and fraud prevention.
• Consent: where you have given specific consent, such as for cookies.

5. Data Sharing

We do not sell your personal data. We may share data with the following categories of recipients:

• Infrastructure providers: hosting, database, and deployment services that process data on our behalf.
• Authentication providers: Google and Facebook for social login functionality.
• Legal obligations: when required by law, regulation, or legal process.

6. Data Retention

We retain your account data for as long as your account is active. Game session data is retained to provide game history and statistics. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law.

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: request a copy of your personal data.
• Rectification: correct inaccurate data.
• Erasure: request deletion of your data.
• Portability: receive your data in a machine-readable format.
• Objection: object to certain processing activities.
• Withdraw consent: withdraw consent at any time where processing is based on consent.

To exercise any of these rights, contact us at privacy@worldboard.games.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including encryption in transit (TLS), hashed passwords, and access controls. However, no method of transmission over the internet is 100% secure.

9. International Transfers

Your data may be processed in countries outside your jurisdiction, including the United States. Where we transfer data internationally, we ensure appropriate safeguards are in place in accordance with applicable data protection laws.

10. Children's Privacy

Worldboard is not intended for children under 13 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

11. Cookies

For details about the cookies we use and how to manage them, please see our Cookie Policy.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised "Last updated" date.