Privacy Policy

1. Who We Are

Playfair Rivals is a free-to-play online multiplayer game available at playfairrivals.surriworks.com. For anything related to your personal data, contact playfair.rivals@gmail.com.

2. Data We Collect

• Account data — your username (taken from your Play Games gamertag when the account is made) and, for accounts created before September 2026, an email address and a password stored as a cryptographic hash (we never see or store an actual password).
• Google Play Games sign-in — the only way to sign in. When you press "Continue with Play Games", Google gives us your Play Games player identifier and gamertag, which we store so we can recognise you next time. We do not receive your Google password or email address through Play Games, and we ask for no access to any other Google service — no contacts, no Drive, no calendar. Google separately knows that you signed in to this game.
• Security data — IP address at signup and login, login timestamps.
• Gameplay data — characters, items, progress, fight history, and other in-game activity.
• Communications — chat messages and in-game mail you send. Public chat and direct messages are kept for 30 days so that reports can be investigated, then deleted automatically.

We do not collect payment data (the Game has no purchases), precise location, contacts, or advertising identifiers, and we do not use third-party analytics or advertising SDKs.

3. Why We Use It

• to operate your account and the Game itself (contract);
• to secure the Game — preventing cheating, multi-account abuse, and unauthorized access (legitimate interest);
• to sign you in with Google Play Games (contract);
• for accounts created before September 2026, to recover the account by email on request (contract).

We do not sell your data and we do not send marketing emails.

4. Where It Lives and Who Sees It

Data is stored on our game server hosted in the European Union. Other players see your username, title, avatar, public character profile, and the messages you write in public chat — never your email or IP address.

We use three outside services, and no others:

• Google Play Games Services signs you in. Google tells us your Play Games player identifier and gamertag; Google separately knows that you signed in to this game.
• Brevo (Sendinblue) sends our account emails to accounts that have an email address on file. They receive that address for that purpose only.
• Google Fonts serves one typeface used by the game's interface. Loading it means your device makes a request to Google, which reveals your IP address to them. No account data is sent, and we set no cookies through it.

5. How Long We Keep It, and What Survives Deletion

We keep your data for as long as your account exists. You can delete your account at any time — in-game via Settings → Help & support → Delete account and data, or, if you can no longer sign in, by emailing us. Full instructions are on our account deletion page.

Deleting your account also removes the link to your Google Play Games profile. It does not delete anything at Google; to remove this game from your Play Games profile, use the Play Games app or your Google account's Security → Your connections to third-party apps page.

Deleted immediately when you delete your account: your username, email address, password hash, characters, items, equipment, collections, currency, world progress, fight history, mail, trades and clan membership. None of it is recoverable.

Retained after deletion:

• Moderation records — reports made about your account, and any mute or ban applied to it — for up to 12 months. We keep these on the basis of our legitimate interest in keeping the game safe: without them, a banned account could be cleared simply by deleting it and registering again.
• Chat and direct messages — for 30 days, so a report about a message can still be checked after it has scrolled away. They are then deleted automatically. Only staff investigating a report can read them.
• Server logs, including the IP address recorded at signup and login, for up to 90 days, for security and abuse investigation. They are then deleted automatically.
• Chat messages you sent to others keep their text but lose your name. We cannot reach into other players' devices to remove what they already received.

6. Your Rights (GDPR)

You can ask us to access, correct, export, or erase your personal data, or object to processing, by emailing playfair.rivals@gmail.com. Erasure is also self-service via in-game account deletion. You may lodge a complaint with your data-protection authority (in Poland: UODO).

7. Cookies & Local Storage

We use one session cookie and the browser's local storage to keep you logged in. No tracking or advertising cookies are used.

8. Children

The Game is not directed at children under 13, and we do not knowingly collect their data. If you believe a child under 13 has an account, contact us and we will delete it.

9. Changes

If this policy changes in a meaningful way, we will announce it in the Game or by email before the change takes effect.

← Back to Playfair Rivals