Privacy Policy

Welcome to Board Mart (the "Application" or "App"). We value the privacy of our players and are dedicated to safeguarding the personal data collected through your interactions with our services.

Board Mart is a premium, real-time multiplayer board gaming arena built for the Android platform. It hosts a suite of interactive digital board games, including:

• Ludo
• Chess
• Snake & Ladder
• UNO
• Bike Speedway

This Privacy Policy outlines how we collect, process, share, and protect your information when you access our games, lobbies, real-time matchmaking services, and in-game voice chat facilities. By registering an account or downloading Board Mart, you acknowledge and agree to the terms detailed in this document.

To deliver a smooth and engaging multiplayer experience, we collect specific information directly from you or automatically during gameplay. We gather the following categories of data:

To simplify registration and secure access, Board Mart supports authentication via Google Sign-In. When you authenticate using Google, we access and process specific information provided by Google APIs under authorization:

• Google User Identifier: A unique, stable numerical ID used to associate your Google Profile with your Board Mart game account.
• Email Address: Used as a primary identifier for account verification, password retrieval processes, and customer support association.
• Display Name & Profile Picture URL: Used to set up your in-game player name and display avatar dynamically, creating a personal gaming profile. You can customize these within the App settings at any time.

This information is securely verified using Firebase Authentication tokens. We do not store or gain access to your Google account password.

When you connect to our servers, we automatically log information about the hardware device you use to access Board Mart. This includes:

• Operating System details: Android OS version and kernel build info.
• Device Model & Manufacturer: Device model strings (e.g., Pixel 7, Samsung Galaxy S23) used for adjusting screen size scaling and graphical assets.
• IP Address: Logged to determine connection latency, establish WebSocket routes, and block fraudulent operations.
• Unique Push Tokens: Firebase Cloud Messaging (FCM) tokens required to send push alerts (such as game invites or tournament updates) to your active device.

We compile data indicating how you interact with our gaming applications. This diagnostics data helps us optimize performance and troubleshoot network bottlenecks. Collected usage data includes:

• Timestamps of application launches, screen navigation events (e.g., opening the Lobby Screen, settings panel, or game rooms).
• Connection logs, latency/ping rates to our Node.js game servers, and WebSocket connection status records.
• Interface event statistics, such as speech-to-text (STT) activation commands, TTS reads, and accessibility preference selections.

To host fair, competitive matches, track achievements, and display leaderboards, we process detailed information regarding your active game states. This includes:

Board Mart features an integrated real-time voice communication system powered by LiveKit, allowing players to coordinate, strategize, and converse during matches. Please note the following regarding your audio data:

• Real-Time Transmission: When you join a voice-enabled lobby or game room, your audio stream is captured, digitized, and routed securely to matching participants using LiveKit WebRTC nodes.
• No Recording or Storage: Voice communication data is processed dynamically to support live communication. Audio streams are not recorded, stored, or archived on our servers or LiveKit backend instances.
• Token Generation: Our backend Node.js server generates secure cryptographic tokens to authenticate your client device with the LiveKit room. These tokens authenticate authorization without revealing personal profile data.

We leverage Firebase Authentication services to secure account access and manage credentials. This ensures your account remains protected against unauthorized access. Firebase Authentication handles:

• Issuance of secure cryptographic JSON Web Tokens (JWT) upon login. These tokens verify your identity for backend API requests.
• Maintenance of user record IDs mapping your display identity to credentials.
• Multi-platform authentication checks to maintain active sessions and protect account data.

To improve Board Mart's stability, balance, and reliability, we monitor application diagnostics. This data is analyzed in aggregate and is not linked to your personal identity. Collected diagnostics include:

• Crash Logs: Critical error reports and stack traces generated when the App encounters an issue.
• Performance Logs: Tracking socket response latency, game loop synchronization, and memory utilization to optimize the gaming experience.

We process the information collected under strict legal and operational guidelines to deliver, maintain, and secure the Board Mart application. Specifically, we use your data to:

1. Manage Accounts: Register your player ID, verify logins, customize profiles, and manage avatar selections.
2. Facilitate Matchmaking: Search, queue, and pair players in rooms for Ludo, Chess, Snake & Ladder, UNO, and Bike Speedway matches.
3. Enable Voice Chat: Verify permissions and route audio streams during gameplay via LiveKit nodes.
4. Analyze Performance: Evaluate latency, analyze game flow, resolve bugs, and balance gameplay rules.
5. Ensure Fair Play: Track game moves to verify fairness, detect cheats or hacks, and enforce terms of service.
6. Send System Notifications: Dispatch notifications for game invites, match confirmations, or account updates via Firebase Cloud Messaging.

Board Mart connects to third-party SDKs and service providers to manage core systems. These external entities process your data in compliance with their respective privacy policies:

The security of your personal data is a priority. We implement appropriate technical and administrative security measures to protect your information, including:

• Encryption: Data transmitted between the Flutter client and Node.js backend APIs is encrypted using industry-standard SSL/TLS protocols.
• Database Security: Core match records and user profiles are stored in secure MySQL databases. Access permissions are strictly managed and restricted.
• Secure Token Verification: Authentication is handled using secure, short-lived tokens, reducing the risk of unauthorized access.

While we apply industry-standard security measures, no network transmission or storage system can be guaranteed to be completely secure. We cannot ensure or warrant absolute security of all data transmitted to our App.

Board Mart is not directed at children under the age of 13 (or the legal age threshold in your jurisdiction). We do not knowingly solicit or collect personal information from children under 13.

If we discover that a child under 13 has registered an account and provided us with personal information, we will take immediate steps to delete this data and deactivate the account from our MySQL databases. If you believe we have inadvertently collected information from a child under 13, please contact us immediately using the details in the Contact Information section.

We respect your rights regarding the personal information you share with us. Depending on your jurisdiction, you may have the following rights:

• Right to Access & Export: Request a summary or copy of the personal data we store about your gaming profile.
• Right to Rectification: Request corrections to inaccurate, outdated, or incomplete profile details.
• Right to Deletion: Request the deletion of your account and associated profile information from our active databases. You can submit deletion requests by contacting us at our support email.
• Right to Withdraw Consent: Revoke microphone permissions in your Android system settings to disable voice chat, or toggle notifications off.

We retain your personal data only as long as necessary to provide services, support active user profiles, or comply with legal requirements:

• Profile & Account Info: Retained as long as your Board Mart account remains active. If your account is inactive for more than 24 consecutive months, we reserve the right to archive or delete it.
• Match & Game Logs: Aggregated and kept for analytics purposes, or deleted periodically after 90 days if no longer required.
• Voice Stream Data: Never stored; deleted immediately after processing WebRTC packets.

We may update our Privacy Policy periodically to reflect changes in our services, technologies, or legal obligations. We will notify you of updates by:

• Updating the Effective Date at the top of this Privacy Policy webpage.
• Posting the updated Policy directly on this URL for review.

We recommend reviewing this policy regularly to stay informed about how we protect your information. Your continued use of the Application after changes are posted constitutes acceptance of the updated terms.

If you have any questions, feedback, or concerns regarding this Privacy Policy, or if you wish to exercise your data rights (including data deletion requests), please reach out to us: