Privacy Policy

Caribbean Dominoes ("we," "us," or "our") operates the website at caribbeandominoes.io (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and play our online dominoes game. Please read this policy carefully. By using the Service, you consent to the data practices described in this policy.

1. Information We Collect

1.1 Information You Provide

When you create an account or log in through our authentication provider (Manus OAuth), we collect:

• Account Information: Your display name and unique user identifier provided by the authentication service.
• Profile Preferences: Your chosen country flag, tile skin, table theme, and other cosmetic preferences you set within the game.

1.2 Information Collected Automatically

When you access the Service, we may automatically collect certain information, including:

• Game Data: Match results, scores, win/loss records, ELO ratings, and gameplay statistics.
• Usage Data: Pages visited, features used, time spent on the Service, and interaction patterns (collected via privacy-focused analytics).
• Device Information: Browser type, operating system, screen resolution, and language preferences.
• Connection Data: IP address (used temporarily for rate limiting and security; not stored long-term).

1.3 Cookies and Similar Technologies

We use cookies and similar technologies as described in our Cookie Policy. You can manage your cookie preferences at any time through the cookie settings banner or the link in our footer.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the game and multiplayer services
• Authenticate your identity and manage your account session
• Track game results, maintain leaderboards, and calculate ELO ratings
• Improve the Service based on aggregated, anonymized usage patterns
• Detect and prevent fraud, abuse, and violations of our Terms of Service
• Enforce rate limiting and protect against denial-of-service attacks
• Communicate important updates about the Service (if you have opted in)

3. How We Share Your Information

We do not sell, rent, or trade your personal information to third parties. We may share information in the following limited circumstances:

• Other Players: Your display name, country flag, ELO rating, and game statistics are visible to other players in game rooms and on leaderboards.
• Service Providers: We use third-party services for hosting, authentication, and analytics. These providers only access data necessary to perform their functions and are bound by contractual obligations to protect your data.
• Legal Requirements: We may disclose information if required by law, regulation, legal process, or governmental request.
• Safety: We may disclose information to protect the rights, property, or safety of our users or the public.

4. Data Retention

We retain your account information and game history for as long as your account is active. If you request deletion of your account, we will remove your personal data within 30 days, except where retention is required by law or for legitimate business purposes (such as resolving disputes or enforcing agreements).

Aggregated, anonymized data that cannot identify you may be retained indefinitely for analytical purposes.

5. Data Security

We implement industry-standard security measures to protect your information, including:

• HTTPS/TLS encryption for all data in transit
• Secure, HttpOnly, SameSite cookies for session management
• HTTP security headers (Content Security Policy, HSTS, X-Frame-Options, etc.)
• Rate limiting on API endpoints and WebSocket connections
• Server-side input validation and sanitization

While we strive to use commercially acceptable means to protect your personal information, no method of transmission over the Internet or method of electronic storage is 100% secure.

6. Your Rights and Choices

6.1 All Users

• Access: You can view your profile and game history within the game.
• Correction: You can update your display name and preferences at any time.
• Deletion: You can request deletion of your account and associated data by contacting us.
• Cookie Preferences: You can manage cookie settings through the banner or footer link.

6.2 European Economic Area (GDPR)

If you are located in the EEA, you have additional rights under the General Data Protection Regulation, including the right to access, rectify, erase, restrict processing, data portability, and object to processing. Our legal basis for processing your data is:

• Contract Performance: Processing necessary to provide the game service you requested.
• Legitimate Interests: Processing for security, fraud prevention, and service improvement.
• Consent: Processing based on your explicit consent (e.g., analytics cookies).

6.3 California Residents (CCPA/CPRA)

If you are a California resident, you have the right to:

• Know what personal information we collect and how it is used
• Request deletion of your personal information
• Opt out of the sale or sharing of your personal information
• Non-discrimination for exercising your privacy rights

We do not sell or share your personal information as defined under the CCPA/CPRA.

7. Children's Privacy (COPPA)

The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us and we will take steps to delete such information.

Users between the ages of 13 and 17 may use the Service with parental or guardian consent. We encourage parents to monitor their children's online activities.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from the laws of your country. We take appropriate safeguards to ensure that your personal information remains protected in accordance with this Privacy Policy.

9. Third-Party Services

We use the following third-party services:

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. Your continued use of the Service after any changes constitutes your acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy, wish to exercise your data rights, or have concerns about our data practices, please contact us at:

• Email: [email protected]
• Website: caribbeandominoes.io