Privacy Policy

Effective date: 28 September 2026

1. General

Chayxana is a mobile application that offers online board games. This document explains what data is collected while you use the app, why it is collected and how it is used.

Data controller: Chayxana. Contact: info@chayxana.app

2. Data we collect

• Device identifier — a random UUID generated by the app itself. For guest (anonymous) sign-in it is the only key used to access your account, and it is stored to keep your account persistent. It is not an advertising identifier or an IMEI.
• E-mail address — collected only if you sign in with Google or Apple, and it is passed to us by that provider itself (if you use Apple's “Hide My Email”, this is the relay address Apple creates). Signing in happens with the provider identity the provider gives us, not with the e-mail address: the address is not an identity key and the same address may sit on more than one account. It is kept only as a contact field — to show you which address is attached to your account and to reach you about account-related support requests (a deletion request, for example). The address is shown only to the owner of the account; other players never see it. The real first and last name returned by Google or Apple is not stored (if Apple provides your name on the first sign-in, it only pre-fills the nickname field; if you keep it, it becomes your nickname and is visible to other players) — only the nickname you choose yourself is shown in the app. If you use guest (anonymous) sign-in, no e-mail address is collected at all.
• Apple sign-in token (refresh token) — stored encrypted on the server only if you sign in with Apple and the one-time code is successfully exchanged with Apple for this token; its sole purpose is to revoke the app's access at Apple when the account is deleted.
• Nickname and avatar choice — entered or selected by the user.
• Game data — score, token balance, number of games played, win/loss statistics and leaderboard records.
• Friend data — friend requests you send and receive, your friend list and the “buzz” (nudge) notifications sent to friends.
• Chat messages — messages you write inside a game room.
• Report records — reports you send with «Şikayət et» (Report) in the app, or that are sent about you: the chosen reason, the reporter's and the reported player's nicknames as they were at the time of the report (a copy), the room and, if the report concerns a message, a copy of the reported message's text. No free text is attached to a report.
• Automatic filter records — a moderation record created automatically when a word from the list of inappropriate words is detected in your chat message or nickname: the original, unhidden text of the message (or a nickname rejected when you change it in your profile), the detected word, your nickname at that moment, the room, the number of attempts and the time. Such a record is created by the system, not by a player.
• Blocked players list — the players you block with «Blokla» (Block) in the app and the date you blocked them. Only you can see this list; you are not shown which players have blocked you.
• Room invitations — invitations to a private room that you send and receive: who invited, who was invited, to which room and the time of the invitation.
• Crash and diagnostic records — a technical record the app sends to our server when an error occurs in the app: the platform (Android or iOS), the operating system version, the app version and build number, the error type, the error text, a technical trace showing where in the code the error happened (stack trace), a short description of the error context and the time the record was received. This record is not linked to your account: it contains no user or device identifier, the IP address is not written to it (it is used only temporarily to limit the number of requests) and the device model is not collected. The error text may contain part of the text that was on the screen (a nickname or a fragment of a chat message, for example). Known formats — e-mail addresses, access keys (tokens), identifiers in UUID format and long digit sequences such as phone numbers — are replaced with [redacted] before the record is stored; other text cannot be recognised this way, which is why the length of each field is limited.
• Technical records — last activity time, IP address and server logs (for security and troubleshooting).

3. Data we do not collect

We do not collect your full name, phone number, location (GPS) data, contacts, photo gallery, payment information, password or advertising identifier.

An e-mail address is collected only if you choose to sign in with Google or Apple (see section 2); with guest (anonymous) sign-in no e-mail address is collected either.

4. Why we collect it

• To operate your account and keep it persistent between games;
• To match players with each other (creating rooms and games);
• To contact the owner of the account when Google or Apple sign-in is used: to show which e-mail address is attached to the account and to answer account-related requests;
• To operate the friend system (friend requests, friend list and “buzz” notifications);
• To operate blocking a player: hiding a blocked player's chat messages from you and not matching you and a blocked player into the same room;
• To operate private rooms: only friends invited by the room owner can join a private room;
• To automatically hide or reject inappropriate words in chat messages and nicknames, and for the related moderation;
• To calculate the leaderboard and statistics;
• To prevent abuse, cheating and spam;
• To detect and fix technical problems, including by means of the crash and diagnostic records (see §2).

5. Tokens

Tokens are an in-app virtual unit only. They have no real monetary value, cannot be cashed out and cannot be transferred to another account. This version of the app does not offer token purchases.

In some places these are also called coins (for example the “coin gift records” and “coin accounting” mentioned in section 9): coin and token denote the same in-app unit. Where this policy speaks of “access keys (tokens)”, it means login sessions, not this virtual unit.

6. Chat messages

Messages written inside a room are stored on the server and may be reviewed in case of a report or moderation. We recommend that you do not share personal information (phone number, address, etc.) in chat.

When a message is reported, a copy of the reported message's text is kept in the report record (see §9); this copy remains even if the message is later removed from the chat.

Automatic filter: chat messages are checked automatically when they are sent. If a message contains a word from the list of inappropriate words, the message is not rejected, but that word is replaced with ***: only the hidden text is shown in the chat, both to you and to the other players. The original, unhidden text of the message may be kept in an automatic filter record (see §9) and is used only for moderation. The filter works automatically and can make mistakes: it may miss some inappropriate expressions and may occasionally hide a harmless word; if you see an inappropriate expression the filter missed in another player's message, you can report that message in the app.

7. Sharing with third parties and server location

Your data is not sold and is not shared with third parties for advertising purposes. Only the hosting provider where the server runs technically stores the data.

When you sign in with Apple, the one-time code the app receives is sent to Apple to obtain the Apple sign-in token; when the account is deleted, the Apple sign-in token, if stored, is sent to Apple to revoke the access.

The servers are located in the European Union (Germany). This means your data is stored and processed outside Azerbaijan; by using the app you consent to this cross-border transfer.

8. Children

The app is not intended for persons under the age of 13.

9. Retention period

Data is kept while the account is active. When an account is deleted, profile data is anonymised: the nickname becomes “Deleted player”, the device identifier is removed, your e-mail address is erased and the link to the provider (Google or Apple) is removed completely — so if you wish, you can open a brand new account from scratch with the same Google or Apple account. If an Apple sign-in token is stored, it is removed from the account and a request is sent to Apple to revoke the app's access. If the request fails, the Apple sign-in token is kept encrypted for a retry and is deleted automatically once 30 days have passed. Your chat messages (except copies of reported messages), friendships and friend requests are deleted, and all active access keys (tokens) are revoked. Block records are deleted in both directions: both your list of blocked players and the records of other players blocking you. Room invitations are deleted in both directions: both the invitations you sent and the invitations sent to you. Apart from this temporarily kept Apple sign-in token and the report records described below, only anonymous records required for the integrity of other players' game history and statistics, as well as for the integrity of the system's coin accounting, remain (game results, moves, score records and coin gift records).

Room invitations (see §2) become invalid when the room starts a game or is closed, or 24 hours after they were sent, and are deleted during the daily automatic clean-up. When a friendship is removed or one of the players blocks the other, the invitations between them are deleted as well.

Report records (see §2) are kept without a time limit, including after the account is deleted — whether you were the reporter or the reported player — for moderation and to prevent abuse: the reason, both parties' nicknames as they were at the time of the report and a copy of the reported message's text. These records are not shown to other players and are used only for moderation.

Automatic filter records (see §2 and §6) are likewise kept without a time limit, including after the account is deleted, for moderation and to prevent abuse: even though your chat messages are deleted, the original text of a message or the rejected nickname in these records remains. These records are not shown to other players.

When an account is deleted by an operator following an e-mail request, a short audit record is kept so that the handling of the request can be checked afterwards: the ID of the deleted account, the ID of the operator who performed it, and the character count and a short hash of the request note. The text of the note itself is not stored — such free text could contain personal data (your e-mail address, for example), so it is deliberately kept out of the logs. This audit record is part of the server logs and falls under the 90-day rule below.

Crash and diagnostic records (see §2) are deleted during the daily automatic clean-up once 90 days have passed since they were received. As they are not linked to any account, they are not deleted separately when an account is deleted; they are removed by this clean-up.

Server logs and IP records are kept for no longer than 90 days and are then deleted automatically.

10. Your rights

You have the right to access, correct and delete your data. To delete your account: App → Profile → Delete account, or contact info@chayxana.app. More details: account deletion.

Legal basis for processing: data required to run your account, the games and the friend system is processed for the performance of the contract formed by these terms of use; technical logs, IP records and moderation are processed on the basis of our legitimate interest in keeping the service secure.

Data portability: you may request a copy of your profile and game data in a machine-readable format (for example JSON).

Right to complain: if you are not satisfied with how your data is processed, you have the right to lodge a complaint with the competent supervisory authority.

11. Changes

This policy may be updated from time to time. The update date is shown at the top of this page.

12. Contact

For any questions: info@chayxana.app