Who we are
Chwar Soft (chwarsoft.com) is the data controller for the personal information described in this policy. You can reach us through our contact form or by email at .
What we collect
- When you sign up with email: first name, last name, username, email address, UK phone number and a password. The password is converted into a one-way hash before it is saved, so it is never stored as you typed it.
- When you sign up with Google: your name, verified email address and Google account ID, which our server checks directly with Google. We then ask for your username and phone number.
- While you use your account: your coin balance, XP and level, when you joined, your last sign-in, when you last collected the daily bonus, the games you've opened while signed in, and a count of failed sign-in attempts.
- When you contact us: your name, email address, topic and message.
- Security records: the date, the type of action (for example sign-up, sign-in or form sent), the email address involved and your IP address.
We do not collect payment information of any kind.
Where and how it's kept
All account handling is done on our server. Your details aren't stored in your browser, aren't shown on any web page and can't be reached through the website.
- Your account is saved on our server as a private, protected file. The web server is set up to refuse any request for these files, and each file starts with code that blocks it from being opened even if someone guesses the address. We don't use a public database.
- Your password is only ever stored as a secure hash. Nobody at Chwar Soft can see it.
- Signing in sets one strictly necessary, http-only session cookie that page scripts cannot read.
- Messages you send through our contact or Player Care forms are processed by our server and emailed to our support inbox over authenticated, TLS-encrypted SMTP.
- Logs of form submissions and account actions are kept in protected files on our server. Passwords are never written to any log.
Why we use it (lawful bases)
- To provide your account and the Site — performing our agreement with you (contract).
- To check you are 18+ and in the UK — legal obligation and legitimate interests.
- To reply to your messages — legitimate interests.
- To keep the Site secure (logs, lockouts, preventing misuse) — legitimate interests.
We don't sell your information and we don't use it for advertising.
Who we share it with
- Our email delivery provider, which carries messages from our server to our support inbox.
- Google, only if you choose Google sign-in. Google's own privacy policy applies to your Google account.
- Our hosting provider, which runs the server where the Site and your account file are kept.
- Authorities, if the law requires it.
How long we keep it
- Account information — until you delete your account or ask us to delete it. Deleting your account from your account page removes your account file immediately.
- Messages and form logs — until your request has been dealt with, and then for no longer than 12 months.
- Security logs — up to 12 months.
Your rights
Under UK data protection law (UK GDPR and the Data Protection Act 2018) you can ask to access, correct or delete your information, restrict or object to how we use it, and receive a copy of it. You can delete your account yourself at any time. To make a request, use our contact form or by email at .
If you're unhappy with how we've handled your information, you can complain to the Information Commissioner's Office at ico.org.uk.
Under-18s
The Site is only for adults aged 18 or over. We don't knowingly collect information from anyone under 18. If you believe a child has created an account, please contact us and we'll delete it.
Cookies
We use a very small number of cookies and browser settings. See our Cookies Policy for details.
Changes to this policy
We'll update this page if anything changes. The date at the top shows the current version.