Privacy Policy

Overview

Traingame is an online multiplayer train-route board game and is the controller of information processed on Traingame's own servers. This policy explains what we collect, why we use it, how long we keep it, and how you can access or delete it.

Information We Collect

Account information includes your email address, username, password hash, verification status, account preferences, and authentication-provider links. If you use Google sign-in, we receive the Google account identifier, email address, email-verification status, display name, and profile image provided for the openid, email, and profile scopes. We do not request Gmail, Drive, Contacts, Calendar, or other Google account content.

Gameplay information includes guest handles, match participation, match configuration, moves, scores, replay history, friend requests, game invites, and notification state. Anonymous visitors receive a temporary guest identity. Match and replay data is saved on Traingame's servers; if that guest later creates or signs in to an account, the previous guest matches may be adopted into the account's history. Chat is not stored in persisted replay records.

Support information includes problem reports you submit, the category and text of the report, the current page URL, the related match id when present, and whether the report came from a signed-in account or guest session.

Technical information may include signed session cookies, IP address, browser and device details, referring pages, and a limited set of first-party events such as tutorial progress, match starts, completion, abandonment, account registration, and client errors. When advertising measurement is enabled, Meta may also receive page visits and selected registration and gameplay milestones. Event properties are restricted and do not include free-form gameplay or profile text. Traingame does not run third-party session recording on this build.

Legal Bases

Where applicable law requires a legal basis, we process account and gameplay data to perform our contract with you and provide the service you request; security, limited measurement, debugging, and abuse-prevention data for our legitimate interests in operating a reliable game; advertising data with consent where consent is required; and information needed to comply with law. You may withdraw consent or object to legitimate-interest processing by contacting us.

How We Use Information

We use information to:

• create accounts, sign users in, maintain sessions, and prevent unauthorized access;
• verify email addresses or provider sessions and send account messages;
• run matches, matchmaking, replays, chat, friend requests, and game invites;
• show profile, match history, notification, and preference features;
• debug, secure, measure, and improve Traingame;
• review problem reports and respond to support or privacy requests;
• comply with legal, security, and operational obligations.

Cookies And Similar Technologies

Traingame uses signed session cookies to keep you signed in, preserve guest sessions, and protect account and game state. The app may also use browser storage for client-side connection state. Google and Meta may use cookies or similar technologies for advertising and measurement, subject to applicable consent requirements and their own privacy policies.

Sharing

We do not sell personal information. We disclose information only as needed to provide or secure Traingame, comply with law, use service providers acting on our behalf, or provide advertising where enabled.

Service providers may include hosting and infrastructure providers, Google for sign-in and advertising, Meta for advertising measurement and delivery, and SendGrid for account email. Those providers process information under their own terms and privacy policies or on our behalf under appropriate obligations.

Some gameplay data is visible to other players in a match, friends, invited players, or people with access to a replay or invite link, depending on the feature and match settings.

Security And Retention

We use technical and organizational safeguards such as HTTPS, signed cookies, hashed passwords, rate limits, access controls, and encrypted secret storage. No online service can guarantee perfect security.

We apply the following active-system retention periods:

• account profiles and account-linked match history remain until the account is deleted;
• temporary guest identifiers in replay data are anonymized after 90 days; the non-identifying gameplay replay may remain available;
• first-party tutorial and gameplay analytics events are deleted after 90 days;
• resolved or dismissed support reports are deleted after 365 days;
• authentication and verification tokens are deleted after 31 days;
• open support or safety records may remain while needed to investigate and resolve the issue or meet a legal obligation.

When you delete an account, shared replays remain for the other participants, but Traingame permanently replaces your player name and identifiers in those records with “Deleted Player.” Your profile, linked sign-in identities, preferences, social records, support reports, and first-party analytics linked to the account are deleted. Backups and security logs may retain limited information for a short period before routine expiry.

Your Choices

You can play with a temporary identity where available and can use the Data & Privacy section of your profile to download a portable JSON copy or permanently delete the Traingame data linked to your account. Deleting a Traingame account does not delete an external Google account.

You may also request access, correction, deletion, restriction, or an objection by contacting us at privacy@traingame.io. We may need to verify your identity before acting. Depending on where you live, you may also have a right to data portability or to complain to your local data-protection authority. We will not discriminate against you for exercising a privacy right.

Children

Traingame is not directed to children under 13. Do not use Traingame if you are under 13. If you believe a child provided personal information, contact us so we can review and delete it when appropriate.

Changes

We may update this policy as Traingame changes. When we make material changes, we will update the date above and, when appropriate, provide additional notice in the app or by email.