Private web test

Privacy policy

Läs på svenska

Privacy contact

For questions or requests about your data during the private SquareFeud test, contact squarefeud@gmail.com.

Playing and signing in

Local games and settings are stored in your browser. For the private test, Cloudflare Access checks that your email address is approved. Cloudflare processes network and sign-in information. SquareFeud uses a pseudonymous sign-in identifier, the display name you choose, and device and session credentials to provide your profile. Online play stores room state, moves and results. If you choose to upload a local save, SquareFeud stores it so you can load it on another device.

Cloudflare uses IP addresses to limit repeated requests to the profile activation and recovery endpoints and help prevent abuse. Cloudflare applies this limit at its firewall. SquareFeud’s game server limits regular game requests by player and does not store IP addresses in the game database for these limits.

Email recovery

Recovery by email is optional and limited to the pilot. When you request a code, the mail provider receives the recipient address and the message, which includes a code valid for ten minutes. SquareFeud uses a keyed hash to look up the address and does not retain it in plain text in the game database. The address association is kept until you remove it or delete the profile. The server checks a hash of each code and keeps pseudonymous counters to limit repeated requests.

If the Gmail integration is used, SquareFeud requests only permission to send messages from its own Gmail account. It uses that permission for requested address verification, removal and profile recovery. It does not read mail or request access to players’ Google accounts. Google receives the sender, recipient and message to deliver it. Server credentials are stored separately from game data and are accessible to the mail integration. SquareFeud handles information received from Google APIs in accordance with the Google API Services User Data Policy, including its Limited Use requirements.

The SquareFeud information pages have no analytics or advertising scripts.

Purposes, retention and your choices

SquareFeud processes profile and match data to provide the test features you request. It uses limited security data and rate limits to protect access and prevent abuse. Match details in head-to-head history are kept for up to 30 days. Inactive pair summaries are removed after 180 days. Finished rooms expire after seven days and waiting rooms after one day.

You can remove a recovery address or delete your profile through the game. Deleting the profile removes its name, access credentials and recovery association. Opponents can retain pseudonymous aggregate results. You can contact us to request access, correction or deletion, or to exercise other applicable data protection rights. In Sweden you can lodge a complaint with the Swedish Authority for Privacy Protection.