Privacy Policy

1. Introduction

Chonk Poker (“we”, “us”, or “our”) respects your privacy. This Privacy Policy explains how we collect, use, and protect your personal information when you use our planning-poker service at chonk-poker.chiubaca.com.

2. Information We Collect

• Account Information: When you sign in via Google OAuth, we receive your name, email address, and profile picture URL.
• Session Data: We issue essential session cookies to keep you logged in. Our authentication system may also record your IP address and browser user-agent string for security and anti-abuse purposes.
• Room & Game Data: We store your room memberships in our database (D1) and process real-time game state—including votes, player presence, and game actions—via WebSockets and Cloudflare Durable Objects.

3. How We Use Your Information

• To authenticate you and maintain your session.
• To enable room creation, joining, and real-time gameplay.
• To secure the Service and investigate abuse.
• To improve performance and fix bugs.

4. Cookies & Tracking

We use only essential cookies for authentication. These cookies are marked Secure, SameSite=None, and Partitioned so the Service can function inside embedded contexts (for example, Google Meet add-ons). We do not use advertising or analytics tracking cookies.

5. Third-Party Services

We use Google OAuth for sign-in. Your use of Google sign-in is subject to Google’s Privacy Policy.

We do not share your personal data with any other third parties except our infrastructure provider, Cloudflare, which hosts the Service and processes data on our behalf.

6. Data Retention

We retain your account data as long as your account remains active. Room membership records and game-state data may be retained for operational purposes and cleaned up periodically. Real-time game votes are ephemeral and exist only while a room is active.

7. Data Security

We implement reasonable technical and organisational measures to protect your data. However, no internet transmission or electronic storage is completely secure, and we cannot guarantee absolute security.

8. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, or delete your personal data. To request deletion of your account and associated data, please contact us (see below).

9. Children’s Privacy

The Service is not directed to children under 13. We do not knowingly collect personal data from children under 13.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. Continued use of the Service after changes constitutes acceptance.

11. Contact Us

For privacy questions or data-deletion requests, please open an issue on the project repository or contact the operator through the channels associated with chonk-poker.chiubaca.com.