Privacy Policy

Last updated: September 2, 2026

This Privacy Policy explains how Chkoba ("Chkoba", "we", "us", or "our") collects, uses, and shares information when you use the Chkoba website (chkoba.org) and the Chkoba card game (beta.chkoba.org), together the "Service". By using the Service, you agree to the collection and use of information as described in this policy.

1. Information We Collect

Account information

When you create an account, we collect:

• A username, email address, and password (stored in encrypted/hashed form — we never store your plain-text password).
• If you sign in with Google or Facebook instead, we receive your name, email address, and a unique account identifier from that provider. We never see or store your Google or Facebook password.

Gameplay data

To operate the game, we store data tied to your account, including:

• Your coin balance, games played, games won, and experience level.
• Your saved preferences, such as sound-effect settings and language.
• Match history and in-game statistics.

Payment information

If you purchase coins, payment is processed by Stripe, our third-party payment processor. We do not collect or store your card number or other payment card details — those are handled entirely by Stripe. We retain only the record of the transaction itself (amount, currency, coins purchased, and status) to credit your account and provide support.

Technical and security information

For account security and fraud prevention, we log information such as your IP address, browser/ device (user agent), and timestamps of sign-ins, sign-outs, and password-reset requests.

Cookies and local storage

The chkoba.org website stores your language choice in your browser's local storage so the site remembers it on your next visit. The website also displays ads through Google AdSense, which may set cookies or use device identifiers to serve and measure ads — see Google's advertising and cookie policy for details on how Google uses this data.

2. How We Use Your Information

• To create and maintain your account and let you sign in.
• To operate core gameplay: matchmaking, scoring, coin balances, and statistics.
• To process coin purchases and keep a record of transactions.
• To keep the Service secure — detecting and preventing fraud, abuse, and unauthorized access.
• To remember your preferences (language, sound settings) across sessions.
• To display advertising that keeps the Service free to play.
• To communicate with you about your account, such as password-reset emails.

3. How We Share Your Information

We do not sell your personal information. We share information only with:

• Stripe — to process coin purchases securely.
• Google and Facebook — to verify your identity if you choose to sign in with those providers.
• Google AdSense — to serve advertising on the website.
• Law enforcement or other parties, only when required by law or to protect the rights, safety, or security of Chkoba, our players, or the public.

4. Data Retention

We retain your account and gameplay data for as long as your account is active. If you delete your account, we deactivate it immediately and permanently erase your personal data (email, username, and identifying information) within 30 days, except where we are required to keep limited records (for example, transaction records) to comply with legal or accounting obligations.

5. Your Rights and How to Delete Your Data

You can request access to, correction of, or deletion of your personal data at any time. To do so, email us at [email protected] from the email address associated with your account, and specify what you'd like us to do. We will respond and complete deletion requests within 30 days.

6. Children's Privacy

The Service is not directed at children under 13, and we do not knowingly collect personal information from children under 13. Sound effects rated for mature audiences (+18) are only available if a player enables them; this is a content setting, not an age-verification system. If you believe a child has provided us with personal information, contact us at [email protected] and we will delete it.

7. Security

We use industry-standard measures to protect your information, including encrypted password storage and secure, independently-verified authentication for Google and Facebook sign-in. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date above. Continued use of the Service after changes take effect constitutes acceptance of the revised policy.

9. Contact Us