CBoard — Cultural Board Games ("CBoard", "we", "us", or "our") is dedicated to protecting your privacy and personal data. This Privacy Policy details how we collect, use, store, and safeguard your information when you use our mobile application (featuring Ô Ăn Quan and other traditional board games).

1. Information We Collect

We adhere to the principle of data minimization, collecting only what is strictly necessary to operate multiplayer board games and deliver an authentic experience:

1.1. Guest Mode

• Anonymous Device Identifier: A cryptographically random UUID v4 generated locally and stored securely in the device’s secure storage.

• No Hardware Tracking: We do not collect persistent hardware identifiers such as IMEI, MAC address, Android ID, or Advertising IDs (IDFA/GAID). Clearing app data or uninstalling the app resets this identifier.

1.2. Registered Accounts (Email/Password)

• Account Details: Email address, username/display name.

• Credentials: Passwords are cryptographically hashed and verified server-side on Nakama; plaintext passwords are never stored.

1.3. Gameplay & Match Statistics

• Game Records: Ranked Points (RP), match history (timestamp, opponent, duration, result, captured pieces).

• Leaderboards: Public display name and leaderboard standings for seasonal and casual rankings.

1.4. Technical Diagnostics & Crash Reporting

• Diagnostic metadata (device model, OS version, app version, crash traces via monitoring services such as Sentry).

• Sensitive authentication tokens and private credentials are automatically scrubbed and redacted prior to log persistence.

2. How We Use Your Information

• To orchestrate server-authoritative matchmaking, private rooms, and real-time turn synchronization.

• To compute accurate seasonal rankings, player statistics, and leaderboards.

• To ensure game integrity, fairness, and cheat prevention.

• To diagnose performance issues, fix bugs, and optimize app responsiveness.

3. Data Storage & Security

• Secure Local Storage: Authentication tokens (JWT access & refresh tokens) and device identifiers are persisted exclusively via platform-backed secure enclaves (FlutterSecureStorage — iOS Keychain and Android Keystore).

• Transport Layer Security: All client-server communications use TLS (HTTPS & WSS).

• No Data Selling: We do not sell, rent, or trade your personal data to third parties for marketing or advertising purposes.

4. Data Sharing & Third-Party Services

Information is shared only under specific, necessary circumstances:

• Infrastructure & Monitoring: Trusted backend and crash telemetry providers bound by confidentiality and data processing agreements.

• Legal Compliance: When mandated by applicable law or legitimate government inquiries.

5. Your Rights & Account Deletion

Under applicable regulations (including GDPR, CCPA, and Vietnamese Decree 13/2023/ND-CP):

• Access & Correction: You may view and adjust your display profile inside the app.

• Account Deletion: You have the right to permanently delete your account and all associated game history. You can initiate this from app settings or by contacting support@cboard.game.

• Session Revocation: Logging out wipes all cached tokens and session state from your local device immediately.

6. Children's Privacy

CBoard is designed as a family-friendly cultural game. We do not knowingly collect personal information from children under 13 without verifiable parental consent. If such data is discovered, it will be deleted promptly.

7. Updates to This Policy

We may update this Privacy Policy periodically. Significant updates will be highlighted within the app or noted with a revised effective date.

8. Contact Us

For questions, feedback, or privacy rights requests:

• CBoard Development Team

• Email: support@cboard.game