Privacy Policy
Last updated: 13 May 2026
1. Who we are
Taškeñtas is an independent multiplayer board game project. If you have questions about this policy, contact us at [email protected].
2. What we collect and why
- Email/password sign-up: We collect your email address and password (stored as a secure hash). Legal basis: contract performance (Art. 6(1)(b) GDPR).
- Google sign-in: We receive your name, email address, and Google account ID from Google. Legal basis: contract performance (Art. 6(1)(b) GDPR).
- When you play: A generated username visible to other players, and game records including moves, timestamps, scores, and outcome. Legal basis: contract performance (Art. 6(1)(b) GDPR).
- Technical data: Session cookies required for authentication. Legal basis: legitimate interests — service security (Art. 6(1)(f) GDPR).
3. Third parties
We use the following sub-processors to operate the service:
| Provider | Purpose | Location |
|---|---|---|
| Supabase Inc. | Authentication and database | EU / Ireland |
| Google LLC | OAuth sign-in | USA / SCCs |
We do not sell, rent, or share your data with any other parties. We use no analytics or advertising trackers.
4. Data retention
Active accounts: data retained while your account exists. Deleted accounts: personal data is anonymized immediately upon deletion. Anonymized game records are retained to preserve match history. Anonymized data cannot be linked back to you.
5. Cookies
We use strictly necessary session cookies only, set by Supabase authentication to keep you logged in. We use no analytics, advertising, or tracking cookies. No cookie consent banner is required.
6. Your rights (GDPR)
Under the GDPR you have the following rights:
- Access your personal data (Art. 15).
- Rectify your username in profile settings (Art. 16).
- Erase your data via account deletion in profile settings (Art. 17).
- Data portability — contact us to request a copy (Art. 20).
- Object to processing — contact us (Art. 21).
- Lodge a complaint with your national data protection authority.
Contact [email protected]. We respond within 30 days.
7. Changes
The "Last updated" date at the top of this page reflects any changes. Continued use of the service after changes constitutes acceptance of the updated policy.