1. Introduction & Overview
This Privacy Policy governs the manner in which GameBoard ("we," "us," or "our") collects, uses, maintains, and discloses information collected from users (each, a "User") of the GameBoard mobile application and related services (collectively, the "Service").
We respect your privacy and are committed to protecting your personal data in compliance with applicable data protection frameworks, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA/CPRA). By accessing or using the Service, you acknowledge that you have read and understood this Privacy Policy.
2. Information We Collect
We collect only the minimum necessary information required to operate the Service and provide a secure, high-quality multiplayer gaming experience:
A. Information You Provide Directly
- Account Credentials: Username, email address (used for account verification and password recovery), and password (stored using industry-standard cryptographic hashing algorithms such as Argon2; passwords are never stored in plaintext).
- Profile Information: Optional bio and gender preference, which you may update or remove at any time in your profile settings.
- In-Game Chat & Audio: Text messages exchanged in game rooms. Live voice communication is facilitated via WebRTC / LiveKit protocols. Live voice communications are transmitted in real time and are never recorded or stored on our servers.
- Social & Game Data: Friend lists, blocked user lists, game statistics, skill ratings, and user-saved game states.
B. Automatically Collected Technical Data
- Network & Device Identifiers: IP address (processed temporarily for security, rate-limiting, and fraud prevention), device model, operating system version, app version, and session tokens.
- Push Notification Tokens: Firebase Cloud Messaging (FCM) registration tokens used to deliver game invitations and service notifications to your device.
C. Local Storage
- Preferences such as audio settings, interface language, and session state are saved locally on your device to enhance your user experience.
3. Application Permissions
The Service requests access to the following permissions solely to enable core features:
- Microphone: Required to enable real-time voice communication in game rooms during active gameplay. Microphone access is never active in the background without your awareness, and audio is never recorded.
- Bluetooth: Used to route voice audio to connected wireless headsets or audio devices.
- Notifications: Used to send room invitations, turn alerts, and critical account updates. You can manage or disable notifications at any time in your device settings.
- Internet Access: Required to connect to game and voice servers.
4. How We Use Information & Legal Bases for Processing
We process personal data based on the following legal grounds:
- Performance of a Contract: Creating and managing your account, facilitating live gameplay and voice communication, and saving game progress.
- Legitimate Interests: Maintaining network security, preventing fraud or cheating, enforcing community standards, and improving app performance.
- Consent: Where explicit consent is provided for optional device permissions (e.g., microphone, push notifications), which you may withdraw at any time via device settings.
- Legal Compliance: Fulfilling statutory obligations and responding to valid legal requests from public authorities.
5. Data Sharing & Service Providers
We do not sell, rent, or trade your personal data. We share limited technical data only with trusted infrastructure providers necessary to deliver the Service:
- Google Firebase Cloud Messaging: For dispatching push notifications.
- LiveKit / WebRTC Infrastructure: For establishing encrypted, real-time audio streams between room participants without server-side recording or retention.
6. Account Deletion & Data Retention
In-App Account Deletion
You may permanently delete your account directly inside the app at any time via: Menu → Profile → Delete Account.
Deletion Request via Email
Alternatively, you may submit a manual account deletion request by emailing muamal.aljanahi@gmail.com with the subject line "Account Deletion Request" and including your registered username and email address.
Effect of Deletion: Upon receiving a deletion request, your account credentials, profile data, friend lists, and saved games are permanently purged from our active databases within 30 days. Security and connection logs retained for fraud prevention are automatically deleted after 12 months.
7. User Rights
Depending on your jurisdiction, you possess specific data protection rights, including:
- Right to Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Request correction of inaccurate or incomplete data.
- Right to Erasure: Request permanent deletion of your personal data.
- Right to Restriction & Objection: Restrict or object to certain processing activities.
- Right to Data Portability: Receive your data in a structured, machine-readable format.
To exercise any of these rights, please contact us at muamal.aljanahi@gmail.com.
8. Children's Privacy
The Service is intended for users who are at least 13 years of age. We do not knowingly collect or solicit personal information from children under the age of 13. If we discover that we have inadvertently collected personal data from a child under 13, we will promptly delete that information. If you believe a child under 13 has provided personal data to us, please contact us immediately.
9. Data Security
We employ technical and organizational safeguards designed to protect your personal data against unauthorized access, loss, or alteration. These measures include cryptographic password hashing, TLS encryption for network communications, and DTLS-SRTP encryption for real-time audio streams.
10. Changes to This Privacy Policy
We reserve the right to update this Privacy Policy periodically. Updated versions will be published on this page with a revised Effective Date. We encourage users to review this page regularly to stay informed.
11. Contact Information
If you have any questions or legal inquiries regarding this Privacy Policy or our data practices, please contact us:
Developer: Muamal Aljanahi
Email: muamal.aljanahi@gmail.com