Game Night Studio

Privacy Policy

Last updated: 31 October 2026

This policy explains what personal data Game Night Studio collects when you use our website and games, why we collect it, and your rights. We keep it short and plain on purpose.

1. Who we are

The data controller is Game Night Studio. You can contact us at chrisodin.uk@gmail.com.

2. What we collect

  • Account details: your username, an optional display name, email address and a password (stored only as a secure one-way hash, never in readable form), the date you accepted our Terms, and when you joined and last logged in.
  • Gameplay data: the games you create or join, the moves made, who played, and the result. Your opponent can see your display name (or your username if you have not set one) and the moves in your shared game.
  • Profile and stats: your game results (win, loss or draw, the game, and the other player for two-player games), badges you have earned, your chosen avatar (an icon, an emoji or a picture you upload, which is stored on this site and shown to other players), your friends and friend requests, and when you were last on the site (used for "online" dots). Your display name, avatar, record and badges can be seen by other players on leaderboards and your profile. You can switch your stats to private under Account > Profile.
  • Notifications (optional): if you turn on notifications for a device, we keep a code your browser gives us so we can alert you when it is your turn, someone joins your game or invites you. You can turn this off at any time on the Account page.
  • Game chat: messages, reactions and reports you send in the chat of a game you are playing. Chat is visible only to the players of that game, and is deleted as soon as the game finishes or is deleted. If you report a message, a copy is kept for moderation until an administrator clears it.
  • Visit records: to keep the site safe and to see how it is used, we record each visit: your IP address, your approximate location (country and town, worked out on our own server from the IP address), your browser, operating system and device type, the pages you open and roughly how long you stay. We do not record visits from search engines and other robots. These records are deleted after 90 days. We also keep the IP address your account signed up from and last logged in from for as long as the account exists. We use these to block spam and abuse, and an administrator can block an IP address or account from the site. Our legal basis is our legitimate interest in keeping the site secure.
  • Our own adverts: we sometimes show banners for our own site and games. They are served from this site, set no cookies and are not personalised. We count how many times each advert is seen and clicked, as totals per day, and keep no personal details with those counts.
  • Technical data: your IP address and browser details are processed by our web server when you visit. We also record your IP address with failed login attempts for up to 24 hours to block password guessing. For security we keep a separate record of each failed log in (the name typed, the reason, your IP address, country and browser, never the password) for the visit record period, so we can spot attacks and help genuine users.
  • Cookies: we use only essential cookies (see our Cookie Policy).

We do not ask for payment details, and we do not knowingly collect special category data.

3. Why we use your data (our lawful bases)

  • To provide the service (contract): creating your account, running games and letting you play with friends.
  • To keep the site secure (legitimate interests): preventing abuse, cheating and unauthorised access.
  • To meet legal obligations: where the law requires us to keep or share information.
  • Consent: for any non-essential cookies, if we ever add them. You can withdraw consent at any time from "Cookie settings" in the footer.

We do not sell your data, show adverts, or use it for profiling.

4. Who we share it with

  • Other players: your display name or username, and your moves, are visible to the person you play with.
  • Our web hosting provider, who stores the site and database on our behalf.
  • Google reCAPTCHA: the sign up, log in, forgot password and guest join forms use reCAPTCHA v3 to stop bots. Google receives your IP address and information about your browser and how you use the page, under the Google Privacy Policy. Nothing from it is used for advertising by us.
  • Authorities or advisers, only where the law requires or to protect our legal rights.

Some of these providers may process data outside the UK. Where they do, we rely on appropriate safeguards such as the UK International Data Transfer Agreement or adequacy regulations.

5. How long we keep it

  • Account data: until you delete your account (you can do this yourself on the Account page).
  • Games: games nobody joined are removed after 3 days, games with no activity after 30 days, and finished games after 180 days. Deleting your account removes your games straight away.
  • Results and badges: kept until you delete your account, so your record stays. Notification codes are removed when you turn notifications off or your browser stops accepting them.
  • Game chat: deleted when the game finishes or is deleted. Reported messages are kept until an administrator marks the report as done or removes it.
  • Failed login records: up to 24 hours.
  • Server logs: kept by our host for a short period, according to their policy.

6. Your rights

Under UK data protection law (the UK GDPR and the Data Protection Act 2018) you can ask us to:

  • give you a copy of your personal data;
  • correct anything that is wrong;
  • delete your data (you can also do this yourself from your Account page);
  • restrict or object to how we use it, and move it to another service;
  • withdraw consent where we rely on it.

To use any of these rights, email chrisodin.uk@gmail.com. We will reply within one month. If you are unhappy with how we handle your data you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

7. Security

Passwords are hashed with bcrypt, forms are protected against forgery, game moves are checked on our server, and we recommend that you use a strong, unique password. No online service can be completely secure, so please tell us straight away if you think your account has been misused.

8. Children

Game Night Studio is for people aged 13 and over. If you are under 18, please ask a parent or guardian before signing up. If we learn that we hold an account for a child under 13, we will delete it.

9. Changes to this policy

If we change this policy we will update the date at the top, and tell you on the site if the change is important.

10. Contact

Game Night Studio
chrisodin.uk@gmail.com