Kondavo

Privacy Policy

Kondavo is a checkers game. It works without an account, without a name and without an e-mail address — and this page exists to say exactly what happens when you go past that.

Last updated: 8 September 2026

1. Who is responsible

The controller of your personal data is Marcin Ziółkowski, a natural person resident in Poland. Privacy contact: kondavohq@gmail.com — write there to exercise any right in section 6, and a postal address will be given on request.

Should this ever pass to a company, the change will be announced in the app before it takes effect and this section will name the company.

2. What is processed

Created automatically on first launch: a random player identifier and a device session token, plus a generated nickname and avatar. Both are yours to change. Nothing here identifies you personally, and the whole game is playable at this level — offline and online.

If you link an account (optional): your Google or Apple account identifier, and your e-mail address when you sign in with an e-mail code or it arrives with the Google or Apple account. Passwords never reach us.

Gameplay: game records (moves and results), ratings and statistics, your friend code, friends list, invitations and blocks, and the in-game wallet with a complete ledger of virtual-currency transactions.

Purchases: handled entirely by Google Play and the App Store. Card details never reach us. What is stored is the store's transaction identifier, which is what makes a purchase deliverable and verifiable.

Push notifications (optional): a device token, and only after you grant the system permission.

Technical and analytics data: crash reports and usage events, and advertising identifiers as handled by Google AdMob — each according to the consents given in the privacy form shown in the app.

3. Why, and on what legal basis

Running the game (matches, ratings, wallet, tournaments)Art. 6(1)(b) GDPR — performance of a contract
Delivering and verifying purchasesArt. 6(1)(b) and (c)
Security, fraud and abuse preventionArt. 6(1)(f) — legitimate interest
Analytics and qualityArt. 6(1)(f), or consent
Advertising, including personalisedConsent — Art. 6(1)(a)
Push notificationsConsent

4. Who else sees it

Only the processors needed to run the service: Google (Google Play, Firebase, AdMob), Apple (App Store, Sign in with Apple), GameAnalytics ApS, and Google Cloud, which hosts the game servers and the database in the europe-central2 region in Warsaw. Transfers outside the European Economic Area rely on those providers' standard contractual clauses.

Your data is not sold, and it is not shared with anyone for their own purposes.

5. How long it is kept

Account and profile data: until you delete the account.

Deleting your account (Profile → Delete account) removes sign-in identities, sessions, push tokens, the wallet, ratings and the friends graph, and anonymises the profile. Game and transaction records may remain in pseudonymised form, because a ledger that can be edited after the fact is not a ledger — and because accounting records have their own retention rules.

Crash reports and analytics: for the retention periods of the providers that hold them.

6. Your rights

You have the right of access, rectification, erasure, restriction, portability and objection, and the right to withdraw consent at any time — withdrawal does not undo processing that already happened lawfully. Advertising consents can be changed at any time in Settings → Privacy. You may lodge a complaint with your supervisory authority; in Poland that is the President of the Personal Data Protection Office.

Finished games export as PDN, the plain-text notation the draughts world already uses, from inside the app. That is portability in the form that is actually useful.

7. Children

The app is not directed at children under 16. Children's data is not knowingly collected; if you believe a child has provided data, write to kondavohq@gmail.com and it will be deleted.

8. Changes

Material changes are announced in the app. The current version is always at kondavo.com/privacy.