Privacy Policy

Last updated: November 18, 2024

1. Introduction

Welcome to QuadKings: Fog of Checkmate ("we," "our," or "us"), developed by RoboForgeStudios. We are committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you play our four-player simultaneous chess game (the "Game") via Steam, mobile applications, web browser, or other platforms.

RoboForgeStudios is an Individual Entrepreneur registered in Kazakhstan. We operate globally and are committed to protecting user privacy in accordance with international standards, including GDPR.

By using QuadKings, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

  • Username or display name
  • Email address (if provided)
  • Password (encrypted and hashed)
  • Steam ID (if playing via Steam)
  • Profile picture (optional)
  • Country/region (optional)

2.2 Game Data

During gameplay, we collect:

  • Game moves and match history - All moves made during matches
  • Match recordings - Complete game replays for history review (similar to Lichess)
  • Player rankings and ratings - FIDE-based 4-player rating system
  • Game statistics - Win/loss ratio, average game time, performance metrics
  • In-game achievements and titles - Beginner, Amateur, Expert, Master, Grandmaster
  • Fog of war visibility data - What areas you could see during matches

2.3 Communication Data

  • In-game chat messages - Text chat, emojis (smile, reactions), and quick messages
  • Chat settings - Your preferences (on/off/full mode)
  • Support tickets - Customer service communications
  • Community interactions - Forum posts, Discord messages (on our server)

Note: We do not record voice or video. Only text-based communication is stored.

2.4 Technical Information

We automatically collect:

  • IP address and device identifiers (for security and matchmaking)
  • Browser type and version (for web version)
  • Operating system and platform (Windows, Android, iOS, Web)
  • Connection quality and latency data (for optimal matchmaking)
  • Crash reports and error logs (to improve stability)
  • Hardware specifications (for performance optimization)

3. How We Use Your Information

We use your information to:

  • Provide and maintain the Game services across all platforms (Steam, Android, iOS, Web)
  • Facilitate matchmaking between players based on rating and connection quality
  • Calculate and display player rankings and leaderboards (FIDE-based 4-player system)
  • Enable fog of war mechanics and real-time multiplayer synchronization
  • Store and provide access to match replays and game history
  • Moderate in-game chat and prevent abuse
  • Prevent cheating, hacking, and unauthorized access
  • Analyze game balance and improve gameplay mechanics
  • Send important game updates, patch notes, and security notifications
  • Provide customer support and respond to inquiries
  • Improve user experience and fix bugs
  • Comply with legal obligations and enforce our Terms of Service

4. Data Sharing and Disclosure

4.1 Public Information

The following information is publicly visible to all players:

  • Username and profile picture
  • Player rating, rank, and title (e.g., "Grandmaster")
  • Match history and game statistics (wins, losses, draws)
  • Achievements and titles earned
  • Leaderboard position (global and regional)
  • Game replays (if you choose to share them)

Important: Do not use personally identifiable information (real name, address, etc.) as your username, as it will be publicly visible.

4.2 Third-Party Services

We may share limited data with trusted third-party service providers:

  • Hosting providers (e.g., Render.com, Fly.io, Cloudflare) - For server infrastructure
  • Steam Platform - If you play via Steam (subject to Steam Privacy Policy)
  • Google Play / App Store - For mobile versions (when available)
  • Analytics services - Aggregated usage statistics only (no personal data)
  • Anti-cheat services - To detect and prevent cheating

We do not sell your personal data to third parties.

4.3 Legal Requirements

We may disclose your information if required by law, court order, government request, or to protect our rights, property, or safety of our users and prevent fraud or abuse.

5. Data Storage and Security

5.1 Where We Store Data

Your data is stored on secure cloud servers. Data may be processed and stored in various locations to provide optimal performance and availability.

5.2 Security Measures

We implement industry-standard security measures including:

  • SSL/TLS encryption for all data transmission (HTTPS)
  • Encrypted password storage (bcrypt/argon2 hashing)
  • Regular security audits and vulnerability scanning
  • Access controls and multi-factor authentication for staff
  • Automated backup systems with encryption
  • DDoS protection and firewall systems

5.3 Data Retention

We retain your data for the following periods:

  • Account data: Until you delete your account + 30 days
  • Match history and replays: Indefinitely (or until you request deletion)
  • Chat messages: 90 days (for moderation purposes)
  • Technical logs: 30 days
  • Banned accounts: Permanent records for anti-cheat purposes

Security Notice: While we use industry-standard security measures, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

6. Your Rights (GDPR & Privacy Rights)

Depending on your location, you may have the following rights:

  • Right to Access: Request a copy of all your personal data we hold
  • Right to Rectification: Update or correct inaccurate information
  • Right to Erasure ("Right to be Forgotten"): Request deletion of your account and associated data
  • Right to Data Portability: Export your game data, match history, and statistics in a machine-readable format
  • Right to Object: Opt-out of certain data processing activities
  • Right to Restrict Processing: Limit how we use your data
  • Right to Withdraw Consent: Revoke previously given permissions at any time

How to Exercise Your Rights:

Contact us at: privacy@4chess.org

We will respond to your request within 30 days (as required by GDPR).

7. Children's Privacy (COPPA & Age Requirements)

The Game is rated for general audiences but requires online interaction. We comply with children's privacy laws:

  • Minimum age: 13 years old (USA - COPPA requirement)
  • EU users: 16 years old (or age of digital consent in your country)
  • Parental consent: Required for users under the minimum age

We do not knowingly collect personal information from children under the applicable age. If you believe a child has provided us with personal data without parental consent, please contact us immediately at privacy@4chess.org.

For Parents: You can request deletion of your child's account and data at any time.

8. Cookies and Tracking Technologies

We use cookies and similar technologies:

Essential Cookies (Required):

  • Authentication tokens - Keep you logged in
  • Session management - Maintain your game state
  • Security cookies - Prevent CSRF attacks

Functional Cookies (Optional):

  • Language preference - Remember your selected language
  • Game settings - Board theme, sound preferences, etc.
  • Chat preferences - Remember on/off/full mode selection

Analytics Cookies (Optional):

  • Usage analytics - Understand how players use the game (aggregated data only)
  • Performance monitoring - Track loading times and errors

You can control cookies through your browser settings. Disabling essential cookies may prevent the Game from functioning properly.

9. International Data Transfers

QuadKings is a global game. Your data may be transferred to and processed in countries other than your country of residence, including:

  • United States (server infrastructure)
  • European Union (GDPR-compliant hosting)
  • Other regions as necessary for optimal performance

We ensure that any international data transfers comply with applicable laws, including GDPR Standard Contractual Clauses and adequacy decisions.

10. Match Replays and Public Game Data

Similar to Lichess.org: All matches are recorded and can be replayed by any player who participated.

  • Match replays are stored indefinitely and can be viewed in your match history
  • Game moves are public to all players in the match
  • Replay sharing: You can share replay links with others
  • Public leaderboards: Your username, rating, and rank are publicly visible

Note: If you want replays of your matches deleted, contact us. However, other players in those matches may still have access to their copy of the replay.

11. Chat and Communication Moderation

To maintain a safe and respectful community, we:

  • Store chat messages for up to 90 days for moderation purposes
  • Use automated systems to detect offensive language and abuse
  • Human moderators may review reported chat messages
  • Violating our Code of Conduct may result in chat restrictions or bans

Chat modes available: On (full chat), Off (disabled), Emojis only (smile/reactions)

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

We will notify you of significant changes via:

  • Email notification (if you provided an email)
  • In-game notification when you next log in
  • Announcement on our website and Discord server

Continued use of the Game after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy:

RoboForgeStudios

Individual Entrepreneur registered in Kazakhstan

Privacy Officer: privacy@4chess.org

General Support: support@4chess.org

Discord Community: discord.gg/TZTp4XC4

We aim to respond to all privacy inquiries within 30 days.

Legal Basis for Processing (GDPR Article 6)

For EU users, we process your data based on:

  • Contract performance: To provide the Game service you signed up for
  • Legitimate interests: To improve the Game, prevent fraud, and ensure security
  • Consent: For optional features like analytics (you can withdraw anytime)
  • Legal obligations: To comply with applicable laws and regulations