Privacy Policy
1. Who is responsible for your data
Peritus Games is the controller of the personal data described here.
Contact us about anything on this page at support@peritusgames.com.
2. What we hold, why, and on what basis
We deliberately hold as little as we can. There is no profile to fill in, no address book, no phone number, no date of birth and no identity document.
| What | Why | Legal basis |
|---|---|---|
| The account identifier and email address Google gives us when you sign in | To have an account at all, and to reach you about it | Performance of our contract with you |
| Your display name | To show you to your opponents and on leaderboards | Performance of our contract |
| Your matches: the deal, every move, the score, the result, who played whom | To run the match, decide it, show your history, and check afterwards that it was played legitimately | Performance of our contract; and our legitimate interest in a fair game |
| Your Lightning address | To pay a prize to you | Performance of our contract |
| Which account referred you, and whether you have ever paid an entry fee | To pay a referral share, and to stop the referral scheme being farmed | Performance of our contract; and our legitimate interest in preventing abuse |
| Your internet address, in our server logs | Security, abuse prevention, and refusing entry fees from sanctioned countries | Our legitimate interest in operating safely; and compliance with sanctions law |
| How the platform is used — which game was opened, when a match was made, at which tier — under a pseudonym | To see what is played and what to build next | Our legitimate interest in understanding and improving the service |
Where we rely on legitimate interest above, the interests are: keeping matches fair, preventing fraud and abuse of the referral scheme, protecting the service from attack, and being able to show afterwards that a prize was owed to the person we paid it to.
3. What we do not do
We run no advertising, and no third-party analytics or error-reporting service. There is no such code in the app, and nothing about you is sent to another company for its own purposes. We do not sell or share your data, we do not profile you for marketing, and we set no tracking cookies.
4. The one record we keep of how the platform is used
We keep our own count of how the platform is used: which game was opened, when a match was made, and at which tier. It is how we see what people actually play and what is worth building next.
Each entry carries a pseudonym derived from your account with a secret key we hold. It never carries your account identifier, your display name or your email, and it cannot be read back into them. We keep this record indefinitely, because its whole use is comparing one period with another. Nobody outside the company sees it.
5. What other players can see
Your display name, your scores and your position on a leaderboard are visible to other players. While a match is being played, your opponent's account identifier is not sent to your device at all — you see a name, not an account. Nothing else about you is shown to anyone.
6. Who else processes it
Google Ireland Limited — Firebase and Google Cloud host the service and store its data, in Google's European region. Google acts on our instructions as our processor.
Speed (Speed Wallet) — our payment provider. When you pay an entry fee or receive a prize, Speed handles the payment and holds its own record of it. Speed decides how it uses that record, so for payment data Speed is a separate controller, not our processor; its own privacy policy applies to what it holds.
We do not disclose your data to anyone else, except where we are required to by law.
7. Data leaving the EU
Your data is stored in the European Union. Two things can take it outside.
Google. Google's Cloud Data Processing Addendum, which governs how Google handles data on our instructions, incorporates the European Commission's 2021 Standard Contractual Clauses, and since September 2023 Google also relies on the EU–U.S. Data Privacy Framework for transfers to the United States. Either way the transfer is covered by an approved safeguard, and you can ask us for a copy of the terms.
Speed. Our payment provider is SPEED1 INC, in Nevada, United States. When you pay an entry fee or are paid a prize, that payment necessarily goes to and from them, and there is no way to run the payment without it. That transfer is made because it is necessary to perform the contract you have with us — Article 49(1)(b) of the GDPR. Speed decides for itself what it does with what it holds, and its own privacy policy applies to that.
8. How long we keep it
| What | How long |
|---|---|
| Your account and display name | While your account is open |
| Match results, and who played whom | Indefinitely. They are the record of every opponent's history as well as yours, and they are how we detect cheating after the fact |
| The move-by-move record of a match | 90 days from when it is written, after which it is deleted automatically. A match with a payment still in dispute is kept for up to a year so it can be settled |
| Payment records | For as long as bookkeeping law requires us to keep them |
| Our own record of how the platform is used, under a pseudonym | Indefinitely. It carries no account identifier, name or email, and comparing one period with another is its only use |
| Server logs, including internet addresses | 90 days |
9. Your rights
You can ask us to give you a copy of your data, correct it, delete it, restrict what we do with it, object to processing we base on legitimate interest, or send it to you in a portable form. Write to support@peritusgames.com.
Closing your account. Your display name is replaced with a label that cannot be read back to you, and your payout address is removed, so nothing on the Platform identifies you to another player. Your sign-in stays — that is what stops the same account being made again, and it is why the two things below survive.
Two things survive it, and we want to be plain about why:
- Your matches stay. A match is a shared record: it is your opponent's history as much as yours, and it is the evidence that their result was real. We keep it attached to a meaningless internal identifier rather than to you.
We keep a one-way fingerprint of the account — from which nothing can be read back — so that the same account cannot simply be created again. Without it, closing an account would be a way to shed a history of cheating or to farm the referral scheme repeatedly. That is our legitimate interest in preventing abuse, and it is the reason your matches cannot simply be detached and forgotten.
If you think we have got any of this wrong, tell us — and you can also complain to Integritetsskyddsmyndigheten (IMY), imy.se, which supervises us.
10. Decisions made automatically
We match you with opponents automatically, and we check every finished match automatically for signs that it was not played legitimately. Neither decides anything about you with a legal effect: matchmaking picks who you play next, and a check that flags a match stops that match's prize being paid until it is resolved. No account is closed, and no payment is refused, without a person looking at it.
11. Storage in your browser
We store a few small preferences on your own device — whether the navigation is collapsed, whether you have seen a game's guide, a game setting, and a referral code you arrived with. They are not tracking cookies and they are not sent anywhere for advertising.
12. Changes
The current version is always on this page, with its date.
Version 2026-08-25.