Legal

Privacy Policy

Last updated 13 October 2026

This policy explains what personal data RankDoku collects, why we use it, who we share it with, and the choices you have. We collect only what we need to run a competitive game.

What we collect

Account: email address, username, display name, and a password (stored hashed by our authentication provider). If you sign in with Google or X, we receive your name, email and profile picture from them.
Profile: skill level, avatar, and the country flag you choose to show.
Gameplay: moves, match results, ratings, streaks, achievements and match history.
Social: friends and friend requests, challenges, chat messages in matches, player reports and feedback you send.
Technical: IP address, browser and device details used for security, abuse prevention and keeping the service running.
Analytics (only if you accept): pages visited and general usage, via Google Analytics.

Why we use it

To run the game (contract): accounts, matchmaking, ratings, friends and chat.
To keep it fair and safe (legitimate interest): stopping bots, cheating, abuse and spam.
To improve it (consent): understanding how the site is used through analytics.
To meet legal obligations when required.

We do not sell your personal data and we do not show ads.

What is public

Your username, display name, avatar, country flag, ratings, match results and leaderboard positions are visible to other players. Chat messages are visible to the players in that match.

Who we share it with

Trusted providers that process data on our behalf:

Supabase — database and authentication (servers in Australia).
Vercel — website hosting.
Cloudflare Turnstile — checks that sign-ups are human.
Google — Analytics (if you accept) and Google sign-in (if you use it).
X — X sign-in (if you use it).

Some of these providers are outside your country. Where required, they are bound by standard contractual protections. We may also disclose data if the law requires it.

How long we keep it

We keep account data while your account is open. When you delete your account we remove or anonymise your personal data within 30 days. Match results may be kept in anonymised form so your past opponents' ratings stay correct.

Your rights

Depending on where you live (for example under the GDPR, UK GDPR or CCPA), you can ask to access, correct, export or delete your data, object to or restrict how we use it, and withdraw consent at any time. Email support@rankdoku.com from the address on your account and we will reply within 30 days. You can also complain to your local data protection authority.

You can change your display name, avatar and country in Settings, and change your analytics choice at any time from the Cookie Policy page.

Children

RankDoku is not directed at children under 13 and we do not knowingly collect their data. If you believe a child has created an account, contact us and we will delete it.

Security

Data is encrypted in transit, access to the database is restricted by row-level security, and passwords are never stored in plain text. No system is perfectly secure, so please use a unique password.

Changes

We will post any changes here and update the date at the top. Significant changes will be announced in the app.

Questions? Email support@rankdoku.com.