Privacy policy
Turnpan is an online board game site. This page says what the service stores about you, why it is stored, and how to have it removed. It is written to be read rather than to be exhaustive.
What we collect
An account holds your handle, your email address, your ratings and game history, and the settings you chose. If you set a password, only a one-way hash of it is stored, never the password itself. A guest gets a session cookie and a generated handle, and no email address. Every game you play is stored with its moves, timings and result. We never receive your payment card details - see Payments below.
Cookies
One cookie identifies your session; without it you cannot play, so it is set as soon as you open the site. A second cookie remembers your advertising consent choice. We do not use cookies to follow you across other websites.
Chat and direct messages
Game chat is not saved with the game: the server keeps a game's recent chat for one day, so that it can be attached to a report, and then discards it. Direct messages are kept until the account of either person in the conversation is deleted. Deleting a message hides it from you only - the other person still sees it, and it stays on the server so a reported conversation can still be reviewed. When you report a game chat or a direct message, a copy of the recent messages is saved with the report for the moderator who reviews it.
Supporter list
Once at least 20 supporters would appear on it, the site shows a public supporter list. Current supporters are listed by handle only - never an amount, a plan or a date - and someone whose support has ended is no longer listed. You can take your name off the list at any time in your settings.
Advertising
Free accounts may see ads served by a third-party ad network. If you appear to be in the EEA or the UK we ask for consent before any ad is loaded, and refusing changes nothing except that no ads appear. Supporters see no ads at all, and ads are never shown on a game board.
Payments
Supporter subscriptions are processed by Stripe. Your card details go to Stripe and never reach Turnpan servers; we store only the status, plan and renewal date of the subscription, which is what the site needs to know what you are entitled to.
Services we rely on
A few outside services do part of the work, and each receives only what its task needs. Stripe processes payments. Resend delivers sign-in and password-reset emails. Cloudflare runs our DNS, forwards mail sent to [email protected], and runs the Turnstile check that keeps automated sign-ups and spam out. Google handles sign-in only if you choose to sign in with Google, and then tells us your email address. Sentry receives technical reports when something breaks, which are not linked to your email address. Visit statistics are counted by an analytics tool we host ourselves, without cookies. Our servers are rented from a hosting provider, so your data may be processed outside the country you live in.
How long we keep it
Games and ratings are kept for as long as the account exists, because they are the account history. Session and presence data live in memory and expire within minutes of you leaving. Sign-in and password-reset links stop working shortly after they are sent. Records of payments are kept for as long as tax law requires, even after an account is deleted.
Deleting your account
You can delete your account at any time from "Delete account" at the bottom of Settings. Deleting removes your settings, personal information and messages, and cancels a supporter subscription. Finished games remain, shown as "Deleted account", because they are also your opponents' game history. If you cannot sign in, write to [email protected] from the address on the account.
Your rights
You can ask what is stored about you, ask for a copy, ask for a correction, or ask for deletion. Send the request to [email protected] and we will answer it.
Changes to this page
If this policy changes in a way that affects what happens to your data, the date at the top changes and the site says so before the change takes effect.
Contact
Turnpan's operator is responsible for this service and for the personal information it holds. For questions about this page, or to request a copy or the deletion of your data, write to our privacy officer at [email protected].