Privacy Policy

Undercover (“we”, “us”) is an online multiplayer bluffing card game. This policy explains what personal data we collect, why, and the choices you have. By creating an account or using Undercover, you agree to this policy.

1. Data we collect

• Account data — your email address, chosen username, profile icon, and language preference. If you register with email/password, we store only a one‑way hash of your password (never the password itself).
• Social sign‑in data — if you choose “Continue with Google” or “Continue with Facebook”, that provider shares your email address, name, and a provider account identifier with us so we can create or link your account. We do not receive your social password.
• Gameplay data — game history, results, statistics (games played/won), room membership, and text chat messages you send in a room.
• Voice chat — optional in‑room voice uses peer‑to‑peer (WebRTC) connections between players. Audio is streamed directly between participants and is not recorded or stored on our servers.
• Technical data — an authentication cookie to keep you signed in, and connection metadata (such as IP address) required to operate real‑time game and voice connections.

2. How we use your data

• To create and secure your account and sign you in.
• To run games, matchmaking, chat, voice, leaderboards, and statistics.
• To send essential account emails (email verification, password reset, email‑change confirmation). We do not send marketing email.
• To prevent abuse and keep the service working.

3. Legal bases

We process your data to perform our contract with you (providing the game), for our legitimate interest in operating and securing the service, and with your consent where you choose social sign‑in.

4. Sharing & third parties

We do not sell your personal data. We share data only with service providers that help us run Undercover:

• Google and Meta (Facebook) — only if you use their sign‑in, and only to authenticate you.
• Email delivery — our transactional email provider, to send account emails.
• Hosting — the infrastructure that runs the app and database.

5. Cookies

We use a single, essential authentication cookie (a signed session token) to keep you logged in. We do not use advertising or third‑party tracking cookies.

6. Data retention

We keep your account data for as long as your account exists. Game history and stats are retained to power leaderboards and your profile. When you delete your account, we delete or anonymize your personal data, except where we must retain limited records to comply with the law.

7. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to withdraw consent. You can edit your username, profile icon, email, and language in Settings. To delete your account or exercise any right, contact us at support@undercover.game.

8. Children

Undercover is not directed to children under 13 (or the minimum age required in your country). We do not knowingly collect data from children under that age.

9. Security

Passwords are stored hashed, traffic is served over HTTPS, and access to data is limited. No system is perfectly secure, but we take reasonable measures to protect your data.

10. Changes

We may update this policy. We will revise the “Last updated” date above and, for material changes, take reasonable steps to notify you.

11. Contact

Questions or requests: support@undercover.game. See also our Terms of Service.