DRAFT — not legal advice. Review with a lawyer before publishing.

Privacy Policy — Curling Stars Online

Effective date: [DATE]

This policy explains what Curling Stars Studio Inc. (Ontario, Canada) collects when you use Curling Stars Online at curlingstars.com and its subdomains, why, and what you can do about it. The Google Play and Steam editions have their own policy.

Summary

• You sign in with Google. We receive your Google ID, name and picture, plus your email only if verified — never your password.
• Your game progress is stored in the cloud so it follows you between devices.
• Friends see your handle, name, picture, online status and stats; other lobby players see your handle and name.
• Multiplayer logs your IP address, approximate location and browser type. Raw IPs are deleted after 30 days.
• One session cookie. No analytics, no ad trackers, and we never sell your data.

What we collect and why

1. Sign-in (from Google). Google sends us a signed token with your account ID (sub), name, picture URL, and email address if verified. The ID identifies your account permanently; the name and picture show you in the hub; the email is for receipts, account lookup and Service notices. We request nothing else from Google and never receive your password. A hashed copy of your email lets support find your account.

2. Profile. Your handle, account creation date, last sign-in, and last activity (shown to friends as "online").

3. Game saves. Your progress (seasons, career, rosters, teams, designs, badges, drills, records). It may include things you typed in: team and player names, and the Register-a-Star feature's names, clubs, cities and email addresses of real people. We store it only so your game works and you can export it; we never read or mine it or contact anyone in it. Device settings stay on your device.

4. Friends and stats. Your friends list, pending requests, and stats derived from your saves (games, wins and losses, seasons, career level, head-to-head). Friends can see your stats and online status; nobody else can.

5. Subscription. Your tier, its expiry, and the customer and subscription IDs assigned by our merchant of record, [MERCHANT: Shopify or Stripe — confirm], which collects card, billing-address and tax details under its own privacy policy; we never receive your full card number.

6. Multiplayer lobby. When you use the players-online wall, quick-match, party rooms, chat or challenges, our server records your account ID and handle, IP address, approximate location from that IP (city/region/country, never GPS), browser and operating-system family, the team and venue you are playing, and a connection-log entry (time, ID, name, IP, location, browser). This runs matches, shows who is online, detects cheating and abuse, and enforces bans.

Retention. Raw IP addresses, locations and connection-log entries are deleted after 30 days. We also keep a map of shortened one-way IP hashes to country codes so an operator dashboard can show which countries players have ever connected from; it cannot be reversed to an IP address and is currently retained indefinitely [DECISION: retention window — keep permanently, expire after 12 months, or drop the map].

7. Chat. Lobby chat keeps only the last 50 lines for one hour; room chat is deleted when the room closes. We do not archive chat.

Cookies

We set one cookie, __Host-cs_session, keeping you signed in for up to 30 days. It holds only your account ID and expiry, signed so it cannot be forged. There are no analytics or advertising cookies, and the paid game has no ads. The free demo currently shows no ads [DECISION: if demo ads are enabled, name the ad provider here and add a consent notice].

Who we share with

We do not sell, rent or trade personal information. Our processors are:

• Google — sign-in only.
• Netlify — hosting and storage. Data may be stored outside Canada, including in the United States, and subject to local law.
• [MERCHANT] — payments.

We may also disclose information when the law requires or to protect players or the Service.

Your rights

From /account you can:

• Export — download every save record we hold.
• Delete — permanently delete your account, profile, saves, friends links, subscription record and lobby rows (connection-log entries expire after 30 days). Deletion does not cancel a subscription with the merchant of record; cancel there first.

You can also email us to access, correct or delete your information, withdraw consent, or complain; we answer within 30 days, and you may escalate to the Privacy Commissioner of Canada. EU and UK residents have additional rights (portability, objection, restriction); email us to exercise them.

Security

Sign-in tokens are verified against Google's public keys; sessions are signed, HttpOnly, HTTPS-only cookies; the paid game is served only to paid sessions. No system is perfectly secure; if a breach creates a real risk of significant harm we will notify you and the Privacy Commissioner as PIPEDA requires.

Children

The game is rated for everyone, but accounts require a Google account, which Google limits to users 13 and over in most countries. We do not knowingly collect personal information from children under 13; if we have, email us and we will delete it.

Changes

Updates are posted here with a new date; material changes are announced on /account or by email.

Contact

Curling Stars Studio Inc., Ontario, Canada — [POSTAL ADDRESS] Email: manotickclosingspiel@gmail.com