Privacy Policy

This Privacy Policy explains how Devian Labs ("we", "us") collects, uses and protects personal data when you use OFF PLAY (the "Service"). We are the data controller for the Service.

1. Data we collect

Data you give us

• Account data from Google sign-in: name, email address, profile picture and a Google account identifier. We never receive your Google password.
• User content: chat messages, guesses, drawings, team and tournament names.
• Support messages you send to support@devianlabs.com.

Data created when you play

• Rooms you create or join, moves, game results, scores, match history, leaderboard positions, teams and tournament participation.
• Daily activity: the days you were active and when you were last seen.

Technical and usage data

• IP address, browser and device type, pages visited, referring site and approximate location, collected by our hosting provider and by Google Analytics.
• Preferences stored in your browser, such as sound settings, consent choice and saved solo games.

Chess engine analysis (Stockfish) runs locally in your browser. Positions you analyse are not sent to us unless the game is saved to your history.

2. How we use data

• To provide the Service: run games in real time, show your name and avatar to other players, save history, and run teams and tournaments. (Legal basis: performance of our contract with you.)
• To show leaderboards: your display name, picture and scores may be visible publicly. (Legitimate interests.)
• To improve and secure the Service: aggregated analytics, debugging, preventing cheating, fraud and abuse. (Legitimate interests.)
• To show ads that keep the Service free, which may be personalised where you consent. (Consent where required.)
• To communicate with you about support requests or important changes. (Contract and legitimate interests.)
• To comply with law and enforce our Terms. (Legal obligation.)

3. Cookies and advertising

We use essential cookies for sign-in and security, and, with your consent where required, cookies for Google Analytics and Google AdSense. Google may use advertising cookies to show ads based on your visits to this and other sites. You can opt out of personalised advertising at adssettings.google.com. See how Google uses data at policies.google.com/technologies/partner-sites. Full details are in our Cookie Policy.

4. Who we share data with

• Other players: your display name, picture, chat messages, moves and results within rooms, teams and tournaments you join.
• Service providers acting on our behalf: Google (authentication, Analytics, AdSense), MongoDB Atlas (database hosting) and Vercel (hosting).
• Authorities where required by law or to protect rights, safety and property.
• A successor if Devian Labs is involved in a merger, acquisition or sale of assets.

We do not sell your personal data.

5. International transfers

Our providers may process data in countries other than yours. Where required, we rely on appropriate safeguards such as standard contractual clauses.

6. Retention

• Game rooms and their chat are deleted automatically 7 days after their last activity.
• Account data and match history are kept while your account is active, and deleted or anonymised within 30 days of an account deletion request, except where we must keep records by law.
• Analytics data is kept according to our Google Analytics retention settings.

7. Your rights

Depending on where you live (for example under India's Digital Personal Data Protection Act 2023, the GDPR or the CCPA), you may have the right to access, correct, delete or port your data, withdraw consent, object to or restrict processing, and complain to a supervisory authority. To exercise any right, email support@devianlabs.com from the email address on your account. We will respond within the time required by law.

8. Security

We use encrypted connections (HTTPS), encrypted session cookies, access controls and reputable infrastructure providers. No system is completely secure, so please use a strong, protected Google account.

9. Children

The Service is not directed at children under 13, and we do not knowingly collect their personal data. If you believe a child has created an account, contact us and we will delete it.

10. Changes

We may update this policy. We will post changes here with a new "Last updated" date and notify you of material changes where appropriate.

Contact

OFF PLAY is a product of Devian Labs (devianlabs.com). Questions about this document? Email support@devianlabs.com.