Game Night Studio

Privacy Policy

Last updated: 22 October 2026

This policy explains what personal data Game Night Studio collects when you use our website and games, why we collect it, and your rights. We keep it short and plain on purpose.

1. Who we are

The data controller is Game Night Studio. You can contact us at chrisodin.uk@gmail.com.

2. What we collect

  • Account details: your username, an optional display name, email address and a password (stored only as a secure one-way hash, never in readable form), the date you accepted our Terms, and when you joined and last logged in.
  • Gameplay data: the games you create or join, the moves made, who played, and the result. Your opponent can see your display name (or your username if you have not set one) and the moves in your shared game.
  • Profile and stats: your game results (win, loss or draw, the game, and the other player for two-player games), badges you have earned, your chosen avatar (an icon, an emoji or a picture you upload, which is stored on this site and shown to other players), your friends and friend requests, and when you were last on the site (used for "online" dots). Your display name, avatar, record and badges can be seen by other players on leaderboards and your profile. You can switch your stats to private under Account > Profile.
  • Notifications (optional): if you turn on notifications for a device, we keep a code your browser gives us so we can alert you when it is your turn, someone joins your game or invites you. You can turn this off at any time on the Account page.
  • Game chat: messages, reactions and reports you send in the chat of a game you are playing. Chat is visible only to the players of that game, and is deleted as soon as the game finishes or is deleted. If you report a message, a copy is kept for moderation until an administrator clears it.
  • Technical data: your IP address and browser details are processed by our web server when you visit. We also record your IP address with failed login attempts for up to 24 hours to block password guessing.
  • Cookies: we use only essential cookies (see our Cookie Policy).

We do not ask for payment details, and we do not knowingly collect special category data.

3. Why we use your data (our lawful bases)

  • To provide the service (contract): creating your account, running games and letting you play with friends.
  • To keep the site secure (legitimate interests): preventing abuse, cheating and unauthorised access.
  • To meet legal obligations: where the law requires us to keep or share information.
  • Consent: for any non-essential cookies, if we ever add them. You can withdraw consent at any time from "Cookie settings" in the footer.

We do not sell your data, show adverts, or use it for profiling.

4. Who we share it with

  • Other players: your display name or username, and your moves, are visible to the person you play with.
  • Our web hosting provider, who stores the site and database on our behalf.
  • Google Fonts (Google) and jsDelivr: to display our fonts and icons, your browser downloads files from fonts.googleapis.com, fonts.gstatic.com and cdn.jsdelivr.net. These services receive your IP address and browser details as part of the request.
  • Authorities or advisers, only where the law requires or to protect our legal rights.

Some of these providers may process data outside the UK. Where they do, we rely on appropriate safeguards such as the UK International Data Transfer Agreement or adequacy regulations.

5. How long we keep it

  • Account data: until you delete your account (you can do this yourself on the Account page).
  • Games: games nobody joined are removed after 3 days, games with no activity after 30 days, and finished games after 180 days. Deleting your account removes your games straight away.
  • Results and badges: kept until you delete your account, so your record stays. Notification codes are removed when you turn notifications off or your browser stops accepting them.
  • Game chat: deleted when the game finishes or is deleted. Reported messages are kept until an administrator marks the report as done or removes it.
  • Failed login records: up to 24 hours.
  • Server logs: kept by our host for a short period, according to their policy.

6. Your rights

Under UK data protection law (the UK GDPR and the Data Protection Act 2018) you can ask us to:

  • give you a copy of your personal data;
  • correct anything that is wrong;
  • delete your data (you can also do this yourself from your Account page);
  • restrict or object to how we use it, and move it to another service;
  • withdraw consent where we rely on it.

To use any of these rights, email chrisodin.uk@gmail.com. We will reply within one month. If you are unhappy with how we handle your data you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

7. Security

Passwords are hashed with bcrypt, forms are protected against forgery, game moves are checked on our server, and we recommend that you use a strong, unique password. No online service can be completely secure, so please tell us straight away if you think your account has been misused.

8. Children

Game Night Studio is for people aged 13 and over. If you are under 18, please ask a parent or guardian before signing up. If we learn that we hold an account for a child under 13, we will delete it.

9. Changes to this policy

If we change this policy we will update the date at the top, and tell you on the site if the change is important.

10. Contact

Game Night Studio
chrisodin.uk@gmail.com