Chair Royale Privacy Policy

Last updated: October 21, 2026

Controller: Maximiliano Manzur, Chile. Contact: maquin.dev1@gmail.com.

1. Data we process

• Account: username, internal identifier, password, progress, virtual currencies, inventory, statistics, missions, friendships and preferences. Registration does not require email. The server stores a bcrypt password hash. To keep you signed in, your device stores a session token instead of your password; the server keeps only a hash of that token and its last-use date, and invalidates it when you sign out or delete your account. Protect access to your device.
• Activity: navigation, sessions, matches, rewards and store interactions. Our analytics use a persistent random browser or installation identifier which may be linked to your account ID when you sign in. This information is not anonymous while that link exists.
• Diagnostics and connections: errors, device and browser technical information, graphics and network performance and operational logs. Infrastructure providers may record IP addresses and connection metadata. We do not request access to contacts, photos or precise location.
• Purchases: transaction and account identifiers, products, status and rewards delivered. Apple, Google Play or Paddle process payments depending on the available channel; RevenueCat manages purchase information. The game does not receive your full card number. Payment providers may request email, tax and billing information.
• Support: information you send us, including your email and details needed to resolve your request. Do not send passwords or full payment card details.

To recover interrupted actions and prevent duplicate rewards, we store pending rewards, Blackjack hands and results, requested operations and their outcomes, and match results linked to participants. An operation may include the new username requested during a name change. These records are linked to your account.

2. Purposes and legal grounds

We use account, progress and purchase data to operate the service, authenticate you and deliver purchases. Technical data help with security, fraud prevention and fixing errors; activity analysis helps us understand and improve the game. We also handle support requests and applicable obligations.

Where a legal basis is required, we distinguish performance of the service contract, legal obligations, legitimate interests in security and improvement subject to your rights, and consent where required. Accepting the terms does not replace any specific consent required for advertising or device access.

3. Advertising and local storage

The iOS version integrates Google AdMob rewarded ads. Its SDK may process IP addresses and approximate location inferred from them, device or advertising identifiers, interactions and diagnostics. Personalization and tracking depend on applicable permissions, choices and requirements. The current Android preparation and web version do not activate AdMob. This distinction must be reviewed if the integration changes.

On iOS, you can review ad choices in Settings → Ad privacy when the provider has options available. Tracking permission can also be managed in iOS Settings. Changing these choices does not delete your account or purchases.

We use local storage for session credentials, preferences, reward presentation state and the analytics identifier. Clearing app or browser data removes local storage but does not by itself delete your server account. Contact us to exercise rights relating to analytics or advertising.

We also store the economic action awaiting confirmation locally, separately for each account and server, so it can be recovered without repeating its effect. It is removed when confirmed or definitively rejected; signing out may preserve it until you return to that account. Confirmed account deletion also removes this local record on the device.

4. Providers and international transfers

• Supabase hosts the database in Brazil; Google Cloud hosts the game servers in Chile, Brazil and the United States and provides technical logging. You connect to the closest one or to the one you choose in Settings.
• Cloudflare distributes the website at chairroyale.com. Using the approximate location it infers from your IP address, it suggests the closest server and checks whether the game is available in your country; we do not store that location. The previous Vercel address remains available during the transition. RevenueCat manages purchases; Apple, Google Play and Paddle participate depending on the payment channel.
• Google AdMob provides advertising on iOS.

These providers may process information in other countries. Their roles and obligations depend on the service: stores, payment and advertising providers may process certain data for their own purposes under their policies. We do not claim that all providers act exclusively on our instructions. We do not sell player databases.

See the policies of Supabase, Google, Cloudflare, Vercel, RevenueCat, Apple and Paddle. You may ask us about transfers and safeguards applying to your data.

5. Retention and deletion

We retain your account and progress while providing that account's service. Delete it through Settings → Delete account or request assistance on our deletion page. Deletion covers associated operational data and analytics events and links identified as belonging to that account. Effectively anonymous statistics may be retained. Analytics events are deleted automatically 90 days after they are recorded.

Deletion from the operational database does not mean that all infrastructure logs, backups or provider records disappear immediately. Records needed for legal obligations or disputes may require different handling; we will explain applicable exceptions and periods when handling a request. Account deletion does not automatically cancel or refund a purchase. Uninstalling is not a substitute for requesting deletion.

Operation receipts and match results supporting reward delivery are retained for the lifetime of the account to recover deliveries and prevent duplicates; they currently have no automatic age-based deletion. Deleting the account removes its pending rewards and receipts and removes its identity from shared match results while preserving other players' rewards.

6. Your rights

Write to maquin.dev1@gmail.com to request access, correction or deletion, and where applicable portability, objection, restriction or withdrawal of consent. We will verify your identity proportionately. Withdrawal does not affect prior lawful processing. You may complain to the competent authority in your territory; this policy does not limit mandatory rights.

7. Age and minors

The Android alpha distributed through Google Play is limited to people aged 18 or older. This testing restriction takes precedence over the general minimum age below. Access for teenagers in a future version is not enabled or guaranteed.

The service requires a minimum age of 13, or a higher age where the law or the game's rating and availability require it. A contractual minimum does not mean the game is rated 13+ in every country. We currently do not verify age at registration. A legal representative's involvement or authorization is required where legally necessary; we do not assume every 13-year-old can independently consent to all processing.

If you believe we hold data about someone below the applicable age, contact us so we can review and address the case.

8. Changes and contact

We will publish the updated version and date on this page. Changes requiring additional notice or renewed consent must be communicated and implemented according to applicable obligations. Questions: maquin.dev1@gmail.com.