Privacy policy

1. The offline game

The offline game collects no data. Nothing you do in it is sent to us or to anyone else, and it does not contact our servers.

It keeps a little information on your device only, so it can remember you: the player name shown in the game, your colour, your settings and your campaign progress. We cannot see it.

The offline game uses no analytics, advertising, crash reporting, location, contacts, camera, microphone or photos.

2. Online features

• An account, made with an email address and a password. You must open the activation link we email you before the account works. Sign in with Apple or Google is offered where available.
• Challenging a friend with a link or QR code. Your friend can play as a guest, with no account.
• Play rooms: a shared map where up to four players and the computer play in timed days. Other people may watch a room.
• Your record of wins, losses and draws.

3. What we store for an account

• Display name: the name your opponent sees.
• Birth month and year. We ask for your full birth date to check your age, but we store only the month and the year, never the full birth date.
• Sex, optional: female, male, other, prefer not to say, or empty.
• Email address: to sign in, to send the activation email and password-reset emails, and for nothing else. No marketing email.
• Language you chose, so the game and our emails use it.
• Password hash: never the password itself, only a salted PBKDF2-SHA256 hash that cannot be reversed.

4. Sign in with Apple or Google

Offered only when available. If you use it, the provider gives us its opaque user id for you and your verified email address (for Apple, possibly a private-relay address). We may use the name it gives as your display name, and then ask for your birthday and optional sex once. We never receive your Apple or Google password, contacts or other profile data.

5. What we store when you play online

• An opaque device key: a random identifier made on your device the first time you play online. It is not a hardware serial number or advertising identifier.
• The moves of each online game, with the clock, the time of each move and the result.
• The display names of the two players, which both see.
• Timestamps: when a game was created, joined and finished.
• In a play room, your display name, the faction you chose and your commands are visible to the other members of the room, and the room can be watched by people without an account. Inside a room we use a per-room alias instead of your account id. Do not put personal information in your display name.

6. What we do not collect

• No tracking analytics. We count visits to our web pages in aggregate, by day, page, country, region, device type, language and the site that sent you (its host name only), without IP address, cookie or identifier, so we cannot tell who a visitor is or link two visits.
• No advertising identifiers and no advertising networks.
• No location. The country you are in is read once, from your connection, to choose the minimum age. It is never stored. We do not collect GPS or other location.
• No contacts, photos, camera, microphone or health data.
• No IP address in our database. Our hosting provider processes IP addresses to deliver the service and limit requests. The one exception is a hash of your IP address and the current date, keyed by a secret held on our server, used to limit how many accounts can be created from one connection in a day. With that secret only we could reverse it, and we do not. It is deleted within 25 hours.
• No crash reports are sent from the game.

7. Age and children

Online play needs an account, and an account needs your birthday. We ask for your birthday only to check the minimum age for online play in your country. We keep just the month and year, never the day. The age is checked only when an account is created, never when you create or accept an invitation. A guest accepting an invitation needs no account and gives no age; for a guest we keep only an opaque random id for 24 hours.

• Romania: 16
• Cyprus: 14
• United States: 13
• Other EU countries: 16
• Everywhere else: 13

Below the minimum age you cannot create an account or play online, and nothing about your birth date is stored. The offline game stays open to you. We do not knowingly collect personal information from children. If you believe a child under the minimum age has an account, write to us and we will delete it.

8. Who processes data for us

• Cloudflare, Inc. hosts the website, the online database (D1, in the EU region) and the game rooms (Workers). It is our processor and also handles IP addresses to deliver the service.
• Resend sends the activation and password-reset emails from [email protected]. It receives your email address and the text of that email.
• Apple and Google verify your sign-in, only when offered and only when you use them.

We do not sell your data and we do not share it with anyone for their own purposes.

9. How long we keep it

• Sessions: 30 days, extended each time you use the account. Signing out removes the session at once.
• Finished online games (moves, clock, timestamps, player names): deleted 30 days after the game ends.
• Play rooms: erased 30 days after the room ends. A lobby nobody starts is erased after 1 hour.
• Invitations not yet accepted: deleted after 24 hours. A game nobody has started within 2 minutes of joining is cancelled and deleted.
• Visit counts: 400 days. They identify nobody.
• Your account: kept until you delete it.

10. Deleting your data

• In the game: MULTIPLAYER, then BADGE, then DELETE ACCOUNT, and confirm.
• On the web: open play.knightsofmobius.ro/#delete-account, sign in if asked, and confirm with your password.

Deleting your account erases your account fields, sessions, room membership and your win, loss and draw counts. What remains: finished games and rooms you played keep only an opaque id that no longer points to any account (the opponent sees "deleted"), and their moves are removed when the 30-day period ends. Copies in our hosting provider's backups disappear when those backups expire. Deleting the game from your device does not delete your online account, so use one of the routes above first.

11. Your rights

Under the GDPR you may ask us for access to your data, to correct it, to delete it, to restrict or object to its use, and to receive it in a portable form. The routes above cover deletion. For anything else write to us; we answer within one month. You may complain to the supervisory authority: in Romania, ANSPDCP (dataprotection.ro); in another EU country, the authority there.

12. Legal basis

We process account and online game data because it is necessary to provide the online service you ask for (GDPR Art. 6(1)(b), contract). Aggregate visit counts and the IP-address hash rest on our legitimate interest in knowing how the site is used and preventing abuse (Art. 6(1)(f)); they identify nobody. We use no cookie banners or profiling and take no automated decisions about you. We are a small developer and have no Data Protection Officer, because none is required.

13. Security and changes

Passwords are stored as hashes. A sign-in session is an opaque random token: we keep only a keyed hash of it, and your device keeps the token so you stay signed in. Data travels over HTTPS or secure WebSocket connections.

If we change what we collect, we update this policy before that version is released and say what changed.