Privacy Policy

This policy explains what personal data DuelMe stores, why, who processes it for us, and how you can delete it. DuelMe is currently in a closed beta. Full operator details will be published before the public launch. Contact: support@playduelme.com

What we store

• Email address — to sign you in with a one-time link. It is never shown to other players.
• Username (and avatar, if you set one) — shown publicly on invites, your profile and the leaderboard.
• Gameplay — duels you created or joined, round results and reaction times, rating, level and XP, friends and friend requests, and reports about suspected cheating.
• Coin history — every change to your virtual coin balance.
• Technical data — sign-in session cookies, and IP address and browser information in short-lived server and security logs.
• Terms acceptance — when you agreed to the Terms and this policy, and which version.

Why (legal basis)

• To run the game you signed up for: accounts, duels, coins, rating, friends (contract).
• To keep it fair and secure: anti-cheat checks, rate limits, moderation, and an audit log of admin actions (legitimate interest).
• To keep the coin ledger and duel results consistent for all players (legitimate interest).
• To see how the game is used, as aggregate statistics only: cookieless page-view counts (Vercel Web Analytics), and which days you opened the app and whether you copied or shared a duel or invite link (legitimate interest).

We don't sell your data, show ads, or use tracking or advertising cookies. The only cookies are the ones needed to keep you signed in.

Who processes data for us

• Supabase — database and sign-in. Hosted in the EU (Frankfurt, Germany).
• Vercel — hosts the website. Server functions run in the EU (Frankfurt); static files are delivered by a global network.
• Resend — sends the sign-in emails (your email address and the email content).

Some of these companies are based in the US and may access data from there; such transfers are covered by the EU Standard Contractual Clauses and/or the EU–US Data Privacy Framework.

How long we keep it

As long as your account exists. When you delete your account, see below. Server logs are kept only briefly by our providers.

Deleting your account

Go to Profile → Delete account and confirm. We then:

• cancel your open duels and return any held coins to the players involved;
• delete your email address and sign-in account, and remove your friendships;
• replace your username with an anonymous one (like deleted_1a2b3c4d) and remove your avatar.

Past duel results and the coin ledger are kept in anonymised form, because other players' results and balances depend on them. They are no longer linked to your email.

Your rights

Under the GDPR you can ask for access to, correction, deletion or a copy of your data, object to processing, and complain to your data protection authority. Write to support@playduelme.com.

Age

DuelMe is only for people aged 16 or older.

See also the Terms of Service.