Privacy Policy

1. Introduction

Welcome to Tic Tac Toe Online ("we," "our," or "us"). We are committed to protecting your privacy and ensuring you have a positive experience on our platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web and mobile application.

By using our service, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our service.

2. Information We Collect

3. How We Use Your Information

• Service Provision: To provide, maintain, and improve our gaming platform and services.
• User Authentication: To authenticate your identity and manage your account.
• Game Functionality: To enable multiplayer games, matchmaking, and game room management.
• Statistics Tracking: To track and display your game statistics, including wins, losses, and total games played.
• Notifications: To send you game-related notifications, reminders, and updates (with your consent).
• Communication: To facilitate in-game chat and communication between players.
• Security: To detect, prevent, and address technical issues, fraud, and security threats.
• Analytics: To analyze usage patterns and improve our service's performance and user experience.
• Legal Compliance: To comply with legal obligations and enforce our terms of service.

4. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• Service Providers: We may share information with third-party service providers who perform services on our behalf, including:
  • Firebase (Google): For authentication and user management
  • Supabase: For database storage and backend services
  • Hosting Providers: For application hosting and infrastructure
• Game Participants: Your nickname, avatar, and game statistics may be visible to other players in game rooms.
• Legal Requirements: We may disclose information if required by law, court order, or government regulation.
• Safety and Security: We may share information to protect the rights, property, or safety of our users or others.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

5. Notifications

Our application may request permission to send you push notifications and local notifications. These notifications are used to:

• Notify you when it's your turn in a game
• Send game reminders and updates
• Alert you about new messages in game rooms
• Provide daily gaming reminders (if enabled)

You can manage notification preferences through your device settings. We respect your choice to opt-out of notifications at any time.

6. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using HTTPS/TLS protocols
• Secure authentication through Firebase and Google OAuth
• Access controls and authentication requirements
• Regular security assessments and updates
• Secure database storage through Supabase

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

7. Data Retention

We retain your personal information for as long as necessary to provide our services and fulfill the purposes described in this policy. Specifically:

• Account Data: Retained while your account is active and for a reasonable period after account deletion to comply with legal obligations.
• Game Statistics: Retained to maintain your gaming history and statistics.
• Chat Messages: Stored temporarily during active game sessions and may be deleted after game completion.
• Logs and Analytics: Retained for a limited period for security and analytics purposes.

You may request deletion of your account and associated data at any time by contacting us.

8. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information:

• Access: Request access to the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete information.
• Deletion: Request deletion of your personal information and account.
• Data Portability: Request a copy of your data in a portable format.
• Opt-Out: Opt-out of certain data collection and processing activities.
• Notification Preferences: Manage your notification settings through device or application settings.

To exercise these rights, please contact us using the information provided in the "Contact Us" section below.

9. Children's Privacy (COPPA Compliance)

Our service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. In compliance with the Children's Online Privacy Protection Act (COPPA):

• We do not knowingly collect personal information from children under 13 years of age
• If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately
• If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information promptly
• We require users to be at least 13 years old to create an account and use our service
• Users between 13 and 18 years old should have parental consent to use our service

If you are a parent or guardian and wish to review, delete, or refuse further collection of your child's information, please contact us using the information provided in the "Contact Us" section.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country. By using our service, you consent to the transfer of your information to these countries. We take appropriate safeguards to ensure your information receives adequate protection.

11. Third-Party Services

Our service integrates with third-party services that have their own privacy policies:

• Google (Firebase): For authentication services. See Google's Privacy Policy
• Supabase: For database and backend services. See Supabase's Privacy Policy

We encourage you to review the privacy policies of these third-party services to understand how they handle your information.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last Updated" date at the top of this policy
• Sending you an email notification (if you have provided an email address)
• Displaying a prominent notice in our application

Your continued use of our service after any changes constitutes your acceptance of the updated Privacy Policy.

13. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You have the right to request information about the categories and specific pieces of personal information we collect, use, disclose, and sell.
• Right to Delete: You have the right to request deletion of your personal information, subject to certain exceptions.
• Right to Opt-Out: You have the right to opt-out of the sale of your personal information. We do not sell your personal information.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

To exercise your CCPA rights, please contact us using the information provided in the "Contact Us" section below.

14. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have certain rights under the General Data Protection Regulation (GDPR):

• Right of Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You can request correction of inaccurate or incomplete data.
• Right to Erasure: You can request deletion of your personal data under certain circumstances.
• Right to Restrict Processing: You can request that we limit how we use your personal data.
• Right to Data Portability: You can request a copy of your data in a structured, machine-readable format.
• Right to Object: You can object to processing of your personal data for certain purposes.
• Right to Withdraw Consent: Where processing is based on consent, you can withdraw it at any time.

To exercise your GDPR rights, please contact us using the information provided in the "Contact Us" section below. We will respond within one month of receiving your request.

15. Data Deletion and Account Removal

You may request deletion of your account and associated data at any time. When you request account deletion:

• We will delete your user profile, including nickname, avatar, and email address
• We will delete your game statistics (wins, losses, total games)
• We will remove your association with any active game rooms
• Chat messages and game history associated with your account will be anonymized or deleted
• Some data may be retained for a limited period to comply with legal obligations or resolve disputes

To request account deletion, please contact us using the information provided in the "Contact Us" section below. We will process your request within 30 days.

16. Data Breach Notification

In the event of a data breach that compromises your personal information, we will:

• Investigate the breach immediately and take steps to contain it
• Notify affected users within 72 hours of becoming aware of the breach (where required by law)
• Report the breach to relevant data protection authorities as required by applicable law
• Provide information about the nature of the breach and steps taken to address it
• Recommend actions you can take to protect yourself

17. Cookies and Tracking Technologies

Our application may use cookies and similar tracking technologies to enhance your experience:

• Authentication Cookies: Used to maintain your login session and authenticate your identity
• Preference Cookies: Used to remember your settings and preferences (e.g., theme, sound settings)
• Analytics Cookies: Used to understand how users interact with our service (if applicable)
• Local Storage: Used to store game state and preferences locally on your device

You can control cookies through your browser settings. However, disabling certain cookies may affect the functionality of our service.

18. Mobile Application Permissions

Our mobile application may request the following permissions:

• Notifications: To send you game-related notifications, turn reminders, and match updates. You can disable this in your device settings.
• Network Access: Required to connect to our servers and enable multiplayer gameplay.
• Storage: Used to cache game data and improve performance.

All permissions are requested for specific functionality and can be revoked through your device settings at any time.

19. Do Not Track Signals

Some browsers include a "Do Not Track" (DNT) feature that signals websites you visit that you do not want to have your online activity tracked. Currently, there is no standard for how DNT signals should be interpreted. Our service does not currently respond to DNT browser signals or mechanisms.

20. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: