Privacy Policy
Version of 2026-11-11. This service is for adults aged 18 and over only.
1. Who is responsible for your data
Controller: [not specified: operator]. Address: [not specified: address]. Data enquiries: team@playchat.pro.
Representative in the European Union (GDPR Article 27): [not specified: euRep].
2. What we process and why
| Data | Purpose | GDPR basis | Kept for |
|---|---|---|---|
| Nickname, avatar, age confirmation | Account, shown to your opponent | Contract | As long as the account exists |
| Email address and password hash | Signing in | Contract | As long as the account exists |
| Google or Telegram identifier and name | Signing in with those services | Contract | As long as the account exists |
| Rating, coins, purchases, settings, coin ledger | Running the game and keeping progress | Contract | As long as the account exists |
| Game history: moves, dice, result | Fair play and verifying the dice | Contract, legitimate interest | As long as the account exists. Removed 1 year after both players are deleted |
| Payments: pack, amount, payment and Telegram user identifiers | Delivering purchases, refunds, tax records | Contract, law | 5 years, also after the account is deleted |
| Hash of the IP address and hash of the device identifier | Stopping ban evasion and rating manipulation | Legitimate interest | Cleared after 12 months without visits. Ban marks last until the ban ends |
| Reports, blocks, moderation decisions | Keeping players safe | Legitimate interest | Reports 2 years, action log 1 year, blocks as long as the accounts exist |
| Records of accepted documents | Proof of consent | Law | As long as the account exists |
A guest account with no email or linked sign-in is deleted after more than 210 days without a visit.
We do not sell personal data and show no advertising. The site has no third-party analytics.
3. Video, audio and chat
Video and audio only start with your permission in the browser. You can play without a camera. Video and audio are encrypted. Usually they travel directly between devices, and then your opponent can technically learn your IP address. It shows roughly your city and provider, not your home address: providers disclose subscriber details only at the request of public authorities. If you turn on «Hide my IP» in your profile, calls go through a relay server run by Cloudflare, Inc. (USA) and your opponent sees only its address. The relay cannot decrypt video or audio. Players in Russia always connect through the relay. We tell the country from the IP address on sign-in using the DB-IP database (db-ip.com, CC BY 4.0) and do not store the address for this. We do not record or store video or audio.
Chat messages are visible to your opponent only. They are held in memory during the game and temporarily copied to the database to survive a failure. The copy is deleted when the game ends, at the latest within a day.
4. Automated moderation
The nudity filter runs on your device. Frames are not sent to the server, which only receives a mark that the filter was triggered.
Reports can have automatic effects. Three reports from different players within 14 days move an account to a separate matchmaking pool. Five reports from different players within a day suspend the account for 24 hours. A mark from the automatic filter never leads to a ban by itself. You can contest a decision and ask for human review at team@playchat.pro.
5. Cookies and browser storage
We only use what the service cannot work without, so no consent banner is shown.
| Name | Purpose | Duration |
|---|---|---|
| nardy_sid | Sign-in session | 180 days from the last visit |
| nardy_dev | Device, ban evasion protection | 400 days |
| nardy_oauth | Secure sign-in with Google or Telegram | 10 minutes |
| localStorage and sessionStorage | Game settings, technical Telegram sign-in data | Until you clear them |
6. Who receives data
- Your opponent sees your nickname, avatar, rating, chosen language and, if enabled, your video.
- Hosting provider: [not specified: hosting].
- Telegram receives payment data when you pay with Stars or sign in with Telegram. Telegram acts as an independent controller.
- Google receives a sign-in request when you choose Google. Google acts as an independent controller.
- Public authorities receive data only on a lawful request.
7. Where data is stored
Main storage: [not specified: hosting]. First recording and storage for Russian citizens: [not specified: ruStorage]. Storage for users from Kazakhstan: [not specified: kzStorage].
Transfers from the EEA to countries without an adequacy decision rely on the European Commission's standard contractual clauses.
8. Security
Connections are encrypted, passwords are stored as argon2 hashes, sessions and IP addresses are stored only as hashes, and the database is not reachable from the internet. We will report a significant breach to the competent authority and to those affected within the time set by applicable law.
9. Your rights
You can find out what we hold, get a copy, correct or delete data, restrict processing, object to it and withdraw consent. Withdrawal does not affect the lawfulness of earlier processing.
The profile has "Download my data" and "Delete account" buttons. For anything else write to team@playchat.pro.
10. Country-specific terms
EU, EEA and United Kingdom. The GDPR (or UK GDPR) applies. We reply within one month. You may complain to the supervisory authority where you live. Portability is provided by the file in your profile.
Russia. Federal Law No. 152-FZ applies. Consent is given separately from other documents. We reply within 10 working days, extendable by 5 working days with notice. You may complain to Roskomnadzor. The operator reports incidents to Roskomnadzor within 24 hours and the investigation results within 72 hours.
Ukraine. The Law of Ukraine on Personal Data Protection No. 2297-VI applies. You may apply to the Ukrainian Parliament Commissioner for Human Rights or to a court.
Kazakhstan. Law No. 94-V on Personal Data and Their Protection applies. You can withdraw consent by notifying us, and processing stops within the time set by law. Cross-border transfers are made only in line with Article 16 of the Law. You may complain to the authorised body of the Republic of Kazakhstan or to a court.
11. Changes
We will announce significant changes in the game and ask you to confirm consent again. Earlier versions are available from team@playchat.pro.