Privacy Policy

1. Introduction

Welcome to Reaction Speed Game ("we," "our," or "us"). We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you use our website and services.

2. Information We Collect

2.1 Information You Provide

• Account Information: Username, email address, and password (encrypted)
• Profile Data: Avatar customization, level, XP, and in-game statistics
• Payment Information: Processed securely through Stripe (we do not store credit card details)

2.2 Automatically Collected Information

• Usage Data: Game sessions, scores, reaction times, and gameplay statistics
• Technical Data: IP address, browser type, device information, and cookies
• Performance Data: Game performance metrics and error logs

3. How We Use Your Information

We use your personal data for the following purposes:

• Service Provision: To provide and maintain our game services
• Account Management: To create and manage your account
• Gameplay Features: To track progress, leaderboards, and competitive rankings
• Payment Processing: To process gem purchases and battle pass upgrades
• Communication: To send important updates, security alerts, and support responses
• Improvement: To analyze usage patterns and improve game features
• Security: To detect and prevent fraud, cheating, and abuse

4. Legal Basis for Processing (GDPR)

If you are in the European Economic Area (EEA), our legal basis for collecting and using your data includes:

• Consent: You have given clear consent for specific processing activities
• Contract: Processing is necessary for the performance of our services
• Legal Obligations: We need to comply with legal requirements
• Legitimate Interests: To improve our services and prevent fraud

5. Data Sharing and Third Parties

We may share your information with:

• Stripe: Payment processing (subject to Stripe's Privacy Policy)
• Supabase: Database hosting (subject to Supabase's Privacy Policy)
• Vercel: Application hosting (subject to Vercel's Privacy Policy)
• Legal Authorities: When required by law or to protect rights and safety

We do not sell your personal data to third parties.

6. Cookies and Tracking

We use cookies to:

• Essential Cookies: Maintain your login session and account security
• Preference Cookies: Remember your game settings and preferences
• Analytics Cookies: Understand how users interact with our service

You can control cookies through your browser settings. However, disabling essential cookies may affect functionality. For more details, see our Cookie Policy.

7. Data Retention

We retain your data for different periods:

• Account Data: Until you request deletion or close your account
• Game Sessions: 7 days (automatically deleted by cron job)
• Competitive Matches: 1 hour (automatically deleted)
• Transaction Records: 7 years (legal requirement for financial records)
• Backup Data: 30 days after deletion request

8. Your Rights (GDPR)

If you are in the EEA, you have the following rights:

• Right to Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your data ("right to be forgotten")
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time

To exercise these rights, please contact us using the information below or use the account settings page.

9. Data Security

We implement industry-standard security measures to protect your data:

• Strong password encryption and hashing
• Encrypted data transmission
• Secure session management
• Regular security audits and updates
• Database access controls and authentication

However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

10. Children's Privacy

Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately.

11. International Data Transfers

Your data may be transferred to and processed in countries outside your country of residence. We ensure appropriate safeguards are in place to protect your data in accordance with this privacy policy and applicable laws.

12. Changes to This Privacy Policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last Updated" date. Continued use of our services after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:

You also have the right to lodge a complaint with your local data protection authority if you believe we have not complied with applicable data protection laws.

14. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to say no to the sale of personal information
• Right to access your personal information
• Right to equal service and price

Note: We do not sell personal information to third parties.