Privacy Policy

1. Data Controller

Trapoula is an online gaming platform for traditional card games (Scopa, Tressette, Briscola). For inquiries concerning data protection and your rights, contact us at: [email protected].

2. Collected Data

We only collect data strictly necessary to provide our gaming service and maintain fair competition:

• Account identity data: email address, display name or username, and optional profile avatar.
• Gameplay and rating data: match history, scores, Elo rating progression, moves, and game event replays.
• Social interactions: friend lists, table invitations, and in-game messages.
• Technical and security data: client IP address, active session records, and encrypted authentication tokens.

3. Purposes of Processing

Your information is processed solely for:

• Secure authentication and profile management.
• Real-time matchmaking and ranked table management.
• Abuse prevention, anti-cheat enforcement, and competitive integrity.
• Essential service communications (such as sign-in magic links and password recovery).

4. Infrastructure & Processors

All application data is hosted on secure European infrastructure (Hetzner Cloud, Germany). We use Cloudflare for DDoS protection and content delivery, and compliant transactional mail services for authentication. We never sell or share your data with third parties for marketing or tracking.

5. Cookies & Local Storage

Trapoula uses only strictly essential technical cookies and local storage required for site functionality (session cookies, sound preferences, card deck style, and locale). We do not use third-party advertising or tracking cookies.

6. Retention & Account Deletion (SEC-04)

Account data is retained while your profile is active. You may irreversibly delete your account at any time through the Settings page. Account deletion immediately revokes all active sessions, deletes your profile and personal data, and permanently anonymizes completed match historical seats.

7. Your Rights (GDPR)

Under GDPR Articles 15-22, you have the right to access, rectify, port, or erase your personal data. To exercise these rights, email [email protected].