Privacy Policy

Last updated: 11 November 2026

1. Overview

The Game Shelf ("we", "us", or "our") operates Hansa Teutonica Online ("the Service") and is responsible for the personal information described in this policy. Solo play is available without an account. If you sign in using Google, Apple (where supported), or an email sign-in code, we collect limited account information. This policy explains what we collect, why, who receives it and how to contact us about it.

2. Data We Collect

Session and account information. We create a random session identifier and store it on your device to associate you with games before sign-in. It does not contain your name or email, but can be linked to gameplay. If you sign in, we store your display name, email address (where provided), sign-in provider and provider identifier. Google or Apple may also provide your first and last name, which we store when supplied. Apple may provide a private relay email address. We also store your marketing preference and account timestamps.

Game and community content. We store game state, player names, actions, chat messages, results and ratings. If you create custom maps, we store board images, map data, submission and review history, and rights confirmations. Feedback and reports may include your message, contact details, game context and diagnostic information.

Notifications. If you register a device for push notifications, we store its notification token and platform so we can deliver game updates.

Purchases. RevenueCat and the underlying app store or Stripe provide purchase and subscription information, such as account and transaction identifiers, product, status and expiry, so we can manage Premium access. We do not receive or store your payment card number; payment details are handled by the payment provider.

Analytics and technical information. Optional analytics collects the information described in Section 3. Hosting and service providers may also process IP addresses, request timestamps and technical logs to operate and secure the Service.

3. How We Use Your Data

We use session identifiers, account details and game data to authenticate you, run multiplayer games, restore progress, show game history and rankings, and manage Premium access. Display names and content you share in games or published maps are visible to other players. We use feedback, reports and technical logs to provide support, moderate content, investigate abuse and fix problems.

We use your email to send sign-in codes and service-related messages, including game and turn notifications where enabled. Notification controls are provided in the app or relevant message. Push notifications use registered device tokens.

Marketing emails are optional and require your opt-in. You can change this preference in your profile or unsubscribe using the link in a marketing email. Where CampaignLark is configured, we send it your email, available name details, sign-up provider and subscription preference to manage contacts. A contact record may exist even if you have not opted in, but is marked unsubscribed.

Optional analytics helps us understand which pages lead to playing a game and where players encounter problems. It includes page paths, referring domains, campaign tags, game events and a pseudonymous identifier. We do not send invitation links, authentication parameters or full referring URLs in website acquisition events. Website analytics runs only after acceptance; choosing Decline leaves the game available. When analytics is enabled, our game server also sends Amplitude an online first-move event with a pseudonymous analytics device identifier and, when signed in, an account identifier, plus the game identifier, game mode, board, player count and platform. Native app analytics is described in the app store privacy disclosures.

We do not use this data for advertising or sell your personal information. We share information with service providers as described below to operate the Service.

Where data protection law requires a legal basis, we process information to provide the service you request, for legitimate interests in security, support and service reliability, and to meet legal obligations. We rely on consent for optional website analytics and marketing emails. You may withdraw consent without affecting the lawfulness of processing before withdrawal.

4. Third-Party Services

The Service uses the following third-party providers, each with their own privacy policies:

These providers may collect standard server log data (IP addresses, request timestamps) as part of normal infrastructure operation. Providers may process information outside your country. Where applicable data protection law requires safeguards for international transfers, those requirements apply to our use of these providers.

5. Cookies & Local Storage

We use cookies and browser storage for sign-in, game identity and your consent preference. If you accept analytics, Amplitude also stores an analytics identifier to connect website visits with gameplay.

Browser local storage includes:

You can clear local storage at any time through your browser settings, which will sign you out and end your anonymous session. To withdraw website analytics consent, clear this site's cookies and browser storage, then choose Decline when the consent banner reappears. This stops future optional website analytics; it does not itself delete information already collected.

6. Data Retention

We retain account information while your account exists. You can delete your account from your profile or contact us for help. Deletion removes your account record, including your email and provider identifiers, and removes account links from player entries in shared games. Shared game records, including display names, actions and chat messages, may remain as part of other players' histories. Contact us about personal information remaining in shared content.

Game records, map submissions, support messages and technical records are kept as needed to provide game history, operate the Service, investigate issues and meet legal obligations. Purchase providers may retain transaction records under their own legal obligations and policies. Account deletion does not cancel a subscription with your billing provider.

Backup copies may persist until they are rotated out. Retention by third-party providers is also subject to their policies. Contact us if you need information about retention or deletion of a particular record.

7. Your Privacy Rights

Depending on where you live and the law that applies, you may have rights to access, correct or delete personal information, restrict or object to processing, receive a portable copy of your data, and withdraw consent. You can change your display name and marketing preference, or delete your account, in your profile.

If the GDPR applies to you, these rights are subject to its conditions and exceptions. You may also complain to your local data protection authority. Exercising the right to object does not require deleting your account.

To exercise your rights or ask about information not covered by the in-app controls, contact The Game Shelf using the details in Section 10. We may need to verify your identity before providing access or acting on a request.

8. Children

The Service is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal data, please contact us and we will delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The "last updated" date at the top of this page will reflect any changes. Where changes are material, we will take reasonable steps to notify you. Where a change requires your consent, we will ask for it before applying that change to the relevant processing.

10. Contact

For privacy-related questions, data access requests, or deletion requests, contact The Game Shelf at info@playhansa.app.