Privacy Policy – GoDraughts

Last updated: 2026-11-08

What Data We Collect

• Email address, and a password stored only as a hash if you sign up with email
• Username / display name and avatar
• Game history and statistics
• Glicko-2 ratings, including your puzzle rating
• Learning progress: lessons, puzzles, streaks, weekly league results and Crowns
• Positions from your games where the app found a mistake, kept so you can review them in My mistakes
• Your friends list, the players you block, your Club membership, and who invited you, if you joined through an invite link
• Reports you make about other players
• Settings stored with your account, such as notification choices and quiet hours
• Session tokens that keep you signed in
• If you allow notifications: a push token for your device, with its platform, time zone and app language
• Club chat messages: the current app has no Club chat, but older versions can still post messages. We delete them after 30 days.

What Other Players See

Other players can see your username, avatar, ratings and the games you play online. You appear in the rankings and the weekly league unless you turn this off under Settings → Privacy & safety.

Sign in with Apple

If you choose to sign in with your Apple ID, we receive the following from Apple:

• A unique, app-scoped user identifier (Apple does not share your actual Apple ID)
• Email address (you may choose to hide it; Apple provides a private relay address)
• Full name (only on first sign-in, if you provide it)

We use this data solely to create and authenticate your account. We do not access your iCloud data, contacts, or any other Apple services.

Apple Sign in with Apple: https://support.apple.com/en-us/HT210318

Google Sign-In

If you choose to sign in with your Google account, we receive the following from Google:

• A unique Google user identifier
• Email address
• Display name

We use this data solely to create and authenticate your account. We do not access your Google Drive, Gmail, contacts, or any other Google services.

Google Privacy Policy: https://policies.google.com/privacy

Crash Reporting & Diagnostics (Sentry)

We use Sentry to detect and fix app crashes, monitor performance, and improve app stability.

What we collect

• Crash logs (stack traces) and runtime error details
• Device model, OS version, app version
• Performance data (app launch time, screen load times, AI computation duration)
• User interaction breadcrumbs (taps, navigation events — no content captured)

What we do NOT collect

• Email, username, user ID, or any personally identifiable information
• Gameplay data, request/response bodies, or message content
• Screenshots, view hierarchy snapshots, session replay, or text entered in input fields

Your control

You can disable crash reporting and diagnostics at any time in the app under Settings → Privacy & safety. When disabled, no data is sent to Sentry. Crash reporting is enabled by default to help us improve the app, but you can opt out at any time.

Data handling

• Storage region: EU data residency (Frankfurt, Germany)
• Data retention: 90 days for error events, 60 days for performance data
• PII scrubbing: enabled by default (sendDefaultPii: false); IP addresses are stripped before storage via beforeSend callback
• Sentry Privacy Policy: https://sentry.io/privacy/

Fair-Play Checks

To keep ratings and rankings fair, we check rated online games for engine use and for rating being passed between accounts.

What we process

• Your moves in rated online games. After a game, our server compares them with what a draughts engine would play. We store the result for each game: how often you chose the engine's best move, how much you lost against it, and for each move its rank and the time you took.
• Leaving the app during a rated game. The app tells our server when it left the foreground on your turn, and we store the number of turns this happened per game. It is not sent from a device set up for a child (see Children) or by older versions of the app.
• Engine requests during a rated game. The server refuses them and stores how many there were per game.
• Reports. When another player reports you, we store the report and the game it names. When you appeal a decision, we store what you write.

These results are visible to our reviewers, not to other players. They are not part of the public record of a game.

How decisions are made

A computer may flag an account for a person to look at. Being flagged changes nothing for you, and you are not told. Only a person can decide on a consequence. That can be a warning, a restriction on online play, or annulling games, which corrects ratings and results. A restricted account can still sign in, play offline and be deleted.

If a decision affects you, the app tells you what it means, what it rests on and how long it lasts. You can appeal once in the app, and a person reads your appeal. These checks can be wrong: a very strong player can look like an engine, which is why a person always decides.

Data handling

We process this on the basis of our legitimate interest in fair competition for all players. You can object by contacting support. We keep the results with your gameplay data until the account is deleted, and we erase the text of an appeal when the account is deleted.

How We Collect It

We collect data through account registration, gameplay activity, and in-app settings usage.

Why We Collect It

Data is used for account management, session authentication, progress tracking, leaderboards, fair matchmaking, fair-play checks, and sending the emails and notifications you asked for.

How Long We Keep It

We keep account and gameplay data until the account is deleted, with these exceptions:

• Club chat messages are deleted after 30 days.
• In-app notifications are deleted after 30 days.
• A push token is deleted if your device has not refreshed it for 90 days.

When you delete your account, we remove your email address, username, password and sign-in links, and erase the text of any appeal. The games you played, ratings and other gameplay records stay, attached to an anonymous deleted account, so that other players' game histories and rankings stay correct.

Who We Share It With

We do not sell or share your personal data with third parties for marketing purposes. We use the following service providers as data processors:

• Sentry (Functional Software, Inc.) — Crash reporting and performance monitoring on EU servers. Only anonymized diagnostic data is shared; no personally identifiable information is transmitted. You can opt out via Settings → Privacy & safety.
• Microsoft Azure — Hosts our servers and database in the Germany West Central region.
• Cloudflare — Delivers network traffic to our servers.
• Resend — Sends account emails, such as email verification, password resets and account deletion confirmations. It receives your email address and the email text.
• Google Firebase Cloud Messaging — Delivers push notifications to your device, if you allow them. It receives the push token and the notification text.
• Apple — Authentication via Sign in with Apple (if you choose this method). Apple's privacy policy applies to data Apple processes.
• Google — Authentication via Google Sign-In (if you choose this method). Google's privacy policy applies to data Google processes.

Your Rights (GDPR)

You can request access, correction, deletion, or withdrawal of consent for your personal data.

Children

A device counts as set up for a child when a parent chose the child age group in Parental controls, or set a parental PIN. The app asks nobody their age. It stores only the chosen age group on the device and does not send it to us.

The fair-play checks on moves apply to every rated online game, because they protect the other players in the same ranking. A person decides on any consequence, and the app does not report leaving the foreground from a device set up for a child.

How To Delete Your Account

Use the in-app delete account feature in Settings. If needed, contact support by email as a fallback.

Contact

For privacy requests, contact DevDad Support via email.

Governing Law

This policy is governed by the laws of the Netherlands (Dutch law).