Privacy Policy – Hansa Teutonica Online

1. Overview

Hansa Teutonica Online ("the Service") can be played without an account. If you choose to sign in with Google in order to play online, we collect and store limited personal information as described below. This policy explains what data is collected, why, and how it is handled.

2. Data We Collect

Anonymous session identifier: A randomly generated ID is created for your browser session and stored in local storage. This is used to associate you with your games when you are not signed in. It contains no personal information.

When you sign in with Google, we additionally collect and store:

Display name — your first name and last initial as provided by Google (e.g. "Leo B."), which you can edit at any time.
Email address — stored for future use in optional turn notifications. We do not currently send emails.
Google account identifier — an opaque unique ID from Google used to recognise your account on future sign-ins.

Game state: The state of any games you participate in is stored on our server, including your player name and in-game actions.

Purchase and entitlement data: If you purchase Premium, our payment processor (RevenueCat, and the underlying app store or Stripe) shares limited purchase information with us — which product was purchased, its status (active, expired, in a billing grace period), and its expiry date — so we can unlock the corresponding features on your account. We do not receive or store your payment card number or other financial account details; those are handled entirely by Apple, Google, or Stripe.

3. How We Use Your Data

Session identifier and game state: used exclusively to run the game service — to let you resume games and play with others.

Display name: shown to other players in shared games.

Email address: stored for future use in optional turn notifications (e.g. "it's your turn"). You will be able to opt out when this feature is introduced. We will never share your email with third parties or use it for marketing.

Google account identifier: used solely to authenticate you when you return to the Service.

Purchase and entitlement data: used solely to determine which paid features (expansion boards, game modules, stats, ELO ranking, custom UI layout) your account is entitled to.

Optional analytics helps us understand which pages lead to playing a game and where players encounter problems. It includes page paths, referring domains, campaign tags, game events and a pseudonymous identifier. We do not send invitation links, authentication parameters or full referring URLs in website acquisition events. Website analytics runs only after acceptance; choosing Decline leaves the game available. When analytics is enabled, our game server also sends Amplitude an online first-move event with a pseudonymous analytics device identifier and, when signed in, an account identifier, plus the game identifier, game mode, board, player count and platform. This helps connect a website visit with starting to play. Native app analytics is described in the app store privacy disclosures.

We do not use this data for advertising.

4. Third-Party Services

The Service uses the following third-party providers, each with their own privacy policies:

Google Sign-In — used for authentication (policies.google.com/privacy)
Cloudflare Pages — serves the client application (cloudflare.com/privacypolicy)
Amplitude — optional website and gameplay analytics, enabled after you accept analytics on the website (amplitude.com/privacy)
Render — hosts the game server and PostgreSQL database (render.com/privacy)
RevenueCat — processes and manages purchases and subscriptions across the App Store, Google Play, and Stripe (revenuecat.com/privacy)
Apple App Store / Google Play — process payment for purchases made on iOS and Android
Stripe — processes payment for purchases made on the web (stripe.com/privacy)

These providers may collect standard server log data (IP addresses, request timestamps) as part of normal infrastructure operation.

5. Cookies & Local Storage

We use cookies and browser storage for sign-in, game identity and your consent preference. If you accept analytics, Amplitude also stores an analytics identifier to connect website visits with gameplay.

Browser local storage includes:

A randomly generated anonymous session identifier
A signed authentication token (JWT) when you are signed in
Your consent preference and, if you accept analytics, analytics identifiers and pending first-move events; short-lived attribution and pending website events also use tab session storage

You can clear local storage at any time through your browser settings, which will sign you out and end your anonymous session.

6. Data Retention

Anonymous session data and game states are retained on our servers to allow you to resume games. Sessions inactive for an extended period may be deleted.

Account data (name, email, Google identifier) is retained until you delete your account. You can delete your account at any time from the profile menu in the top navigation bar.

Purchase and entitlement records are retained for as long as your account exists, and as required by law for financial record-keeping, even if the underlying purchase or subscription has since expired.

7. Your Rights (GDPR)

If you are located in the European Economic Area, you have the following rights regarding your personal data:

Right of access — you can request a copy of the data we hold about you.
Right to rectification — you can update your display name at any time from the profile menu.
Right to erasure — you can delete your account and associated personal data at any time from the profile menu, or by contacting us (see Section 10). Note that game records are anonymised rather than deleted, as they may be part of other players' game histories.
Right to object — you can stop using the Service and delete your account at any time.

To exercise any of these rights, use the in-app account deletion option or contact us by email.

8. Children

The Service is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal data, please contact us and we will delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The "last updated" date at the top of this page will reflect any changes. Where changes are material, we will take reasonable steps to notify you. Continued use of the Service after an update constitutes acceptance of the revised policy.

10. Contact

For privacy-related questions, data access requests, or deletion requests, please email: [email protected]