1. Global Privacy Commitment & International Scope
At WeDraught, we place utmost importance on player privacy, data sovereignty, and transparent algorithmic governance. This Global Privacy Policy details how we collect, process, secure, and safeguard your personal information when you access our 10Γ10 International Draughts gaming ecosystem.
Our data processing practices are architected in compliance with worldwide statutory data protection frameworks, including the European Union General Data Protection Regulation (EU GDPR), the UK Data Protection Act, the California Consumer Privacy Act as amended by CPRA, Brazil's LGPD, and international OECD privacy guidelines.
2. Information We Collect
We collect information strictly necessary to provide fair, latency-minimized draughts matchmaking and profile integrity:
A. Account & Profile InformationEmail address, chosen username, display name, nationality flag, avatar styling preferences, biographical text, and verified federation title (e.g. GMI/MI).
B. Gameplay & Anti-Cheat TelemetryMove sequences (PDN notation), move timestamps, clock usage intervals, multi-jump coordinates, game outcomes, and statistical calculation variance for fair-play validation.
C. Technical & Diagnostic LogsInternet Protocol (IP) address, browser client user-agent, websocket latency/ping indicators, language preference (wedraught_locale cookie), and crash diagnostics.
3. Legal Bases for Data Processing (GDPR Art. 6)
Under international law, we process your personal data under the following legitimate grounds:
- Contractual Performance: Processing necessary to host live multiplayer matches, compute Glicko-2 ratings, and maintain your player profile.
- Legitimate Interests: Operating anti-cheat fraud detection, securing server infrastructure, and preventing unauthorized smurfing/bot attacks.
- Explicit Consent: Where you opt-in to non-essential notifications, community newsletters, or public bio indexing.
- Legal Compliance: Retaining records required by international taxation, digital accounting, and regulatory statutes.
4. How We Use Your Information
Your data powers core gaming experiences:
- Matchmaking algorithms that pair players with equal-skill opponents in Rapid, Classical, and Blitz modes.
- Calculating and updating global leaderboards and performance win streaks.
- Running real-time anti-cheat analysis to preserve competitive sportsmanship.
- Enabling interactive in-match communications, emoji reactions, and draw offer negotiations.
β We never sell, monetize, or rent player personal data or gameplay telemetry to third-party data brokers or advertising networks.
5. Third-Party Service Providers & OAuth Integrations
We collaborate exclusively with trusted cloud and authentication infrastructure providers operating under strict Data Processing Addenda (DPAs):
- OAuth Sign-In Providers (Google, Facebook): Authenticating identity without storing plaintext credentials on our servers.
- Hosting & Realtime WebSockets: Edge server clusters delivering ultra-low ping across global geographic nodes.
- Security & DDoS Mitigation: Cloudflare-grade transport security guarding against denial-of-service disruptions.
6. International Cross-Border Data Transfers
Because WeDraught serves players across all continents, your information may be processed in secure facilities located outside your home country. For transfers originating from the European Economic Area (EEA), UK, or Switzerland, we execute Standard Contractual Clauses (SCCs) adopted by the European Commission to ensure equivalent safeguards across all destinations.
7. Your Worldwide Privacy Rights (GDPR & CCPA)
Regardless of your jurisdiction, WeDraught extends universal privacy rights to every user:
Right of Access: Request a complete machine-readable copy of your personal data and match history.
Right of Rectification: Edit or correct your username, bio, country, or email directly in your Profile.
Right to Erasure: Request permanent anonymization or deletion ("Right to be Forgotten").
Right to Opt-Out: Restrict non-essential telemetry or revoke previously granted consent at any time.
To exercise any of these rights, visit your Profile Settings or submit a request directly to [email protected].
8. Cookies & Advertising Technology Disclosures
WeDraught uses essential cookies for platform functionality, alongside third-party advertising cookies from Google AdSense to keep gameplay 100% free for all players. We and our partners use cookies as follows:
- Google AdSense & Third-Party Advertising: Third-party vendors, including Google, use cookies to serve ads based on your prior visits to our website or other websites on the Internet. Google's use of advertising cookies enables it and its partners to serve personalized and contextual ads to you. You may opt out of personalized advertising by visiting Google Ads Settings (https://www.google.com/settings/ads) or www.aboutads.info.
- Authentication & Security: Maintaining persistent authenticated logins (wedraught_auth_user token).
- Interface & Preferences: Preserving your selected interface language across visits (wedraught_locale cookie) and remembering board orientation, sound effect toggles, and UI color preferences.
- Match State Continuity: Preserving active online match connection state across momentary network reconnects.
- First-Party Performance Telemetry: Anonymized page performance and session diagnostic metrics to ensure engine responsiveness.
9. Security Safeguards & Data Retention
We employ bank-grade TLS 1.3 encryption in transit and AES-256 encryption at rest. All network traffic between your client and our matchmaking cluster is cryptographically sealed.
Retention Periods: Active account data is retained for the duration of your account life. Public match notations (PDN files) remain archived as part of historical sporting tournament records. Inactive accounts may be deleted following 24 months of total dormancy following prior email notice.
