gammoned.com

Privacy Policy

Your privacy matters. This policy explains what data we collect, how we use it, and your rights regarding your information on gammoned.com.

Last updated: April 9, 2026

1. Overview

gammoned.com (the "Platform") is a free online backgammon service. We are committed to protecting your privacy and being transparent about the data we collect. This Privacy Policy explains our data practices in plain language.

The short version: we collect only what we need to run the service, we do not track you with analytics or advertising, and we do not sell your data to anyone.

2. What Data We Collect

We collect the following information when you use the Platform:

Account Information

  • Email address - Required for account creation and authentication via magic links. This is the only personally identifiable information we require.
  • Username - Chosen by you during account setup. Displayed publicly on your profile and in games.
  • Country - Detected automatically from Cloudflare headers (the cf-ipcountry header) at the time of account creation only. This is used to display a country flag on your profile. It is not updated on subsequent visits.
  • Avatar style preference - Your chosen avatar style for the DiceBear procedural avatar system. No actual image is uploaded or stored.

Game Data

  • Game history - Records of games you play, including moves, results, and duration.
  • skill rating - Your skill rating, calculated automatically from rated game results.
  • Win/loss/draw statistics - Aggregate counts derived from your game history.

Submitted Content

  • Bug reports - If you submit a bug report, we store the description text and associate it with your account if you are logged in.
  • Contact messages - If you use the contact form, we store the name, email, and message you provide.

3. What We Do NOT Collect

We want to be clear about what we do not do:

  • No analytics tracking - We do not use Google Analytics, Plausible, or any other analytics service.
  • No advertising - We do not display ads and do not use any ad tracking pixels or scripts.
  • No cookies - We use localStorage for session management, not cookies. No third-party cookies are set.
  • No fingerprinting - We do not use browser fingerprinting techniques.
  • No social media trackers - We do not embed social media widgets that track your activity.

4. How We Use Your Data

Your data is used exclusively to operate the Platform:

  • Authentication - Your email is used to send magic link sign-in emails. We do not send marketing emails, newsletters, or promotional content.
  • Matchmaking - Your skill rating is used to match you with opponents of similar skill level.
  • Leaderboards - Your username, rating, country flag, and game statistics are displayed publicly on the leaderboard and your player profile.
  • Game history - Move records allow you to review past games.
  • Bug fixes - Bug reports help us identify and fix issues with the Platform.

5. Data Storage and Security

All data is stored on Cloudflare D1 (a SQLite-based database) running on Cloudflare Workers infrastructure. Data is processed at Cloudflare edge locations worldwide.

Session tokens are stored in your browser's localStorage and transmitted via HTTPS. Sessions expire after 30 days of inactivity.

6. Email Communications

We use Resend as our email delivery provider. Resend is used solely to send magic link authentication emails when you request to sign in. We do not:

  • Send marketing or promotional emails
  • Send newsletters
  • Share your email with other users (your email is never displayed publicly)
  • Sell or share your email with third parties for marketing purposes

7. Avatars

Profile avatars are generated procedurally using the DiceBear API based on your user ID. No image files are uploaded or stored. The avatar is generated fresh each time it is displayed using a deterministic algorithm, so the same user ID always produces the same avatar.

8. Third-Party Services

The Platform uses the following third-party services:

  • Cloudflare - Hosting, CDN, Workers compute, D1 database, Durable Objects for real-time game rooms. Cloudflare may process connection metadata (IP addresses) as part of standard web hosting. See Cloudflare's Privacy Policy.
  • Resend - Email delivery for authentication magic links only. See Resend's Privacy Policy.
  • DiceBear - Procedural avatar generation (client-side API calls). No personal data is shared with DiceBear.
  • flagcdn.com - Country flag SVG images, loaded by country code only. No personal data is shared.

We do not sell, rent, or share your personal data with any third party for their own purposes.

9. Data Retention

  • Accounts - Your account persists until you request deletion.
  • Sessions - Login sessions expire and are automatically deleted after 30 days.
  • Magic links - Authentication links expire after 15 minutes and are automatically cleaned up.
  • Game records - Game history is retained indefinitely to support leaderboards and game replay features.
  • Bug reports and contact messages - Retained until resolved and then periodically cleaned up.

10. Your Rights

You have the right to:

  • Access your data - View your profile, game history, and statistics through the Platform interface.
  • Update your data - Change your username, avatar style, and country through settings.
  • Delete your account - Request complete account deletion by contacting us through the contact form. Upon deletion, your personal information (email, username) will be removed. Anonymized game records may be retained for leaderboard integrity.
  • Export your data - Contact us to request a copy of your data.

11. Children

The Platform is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us so we can take appropriate action.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

For significant changes that materially affect how we handle your data, we may provide additional notice through the Platform interface.

13. Contact

If you have questions about this Privacy Policy or wish to exercise any of your data rights, please reach out through our contact page.