Privacy Policy

Contact

GATO is responsible for the account and game data used by its website, Discord and Steam clients. For privacy questions or requests, contact [email protected].

What GATO stores

• Account: username, protected password hash, optional email, account ID and linked Steam or Discord identity.
• Gameplay: room state and in-game cursors; ranked results, Elo changes, scores, action counts and timing. Only completed ranked games add statistics.
• Security and support: connection addresses, request and error logs, and messages you send us.

Linking accounts combines eligible progress. Private website games do not require an account.

Why it is used

This data runs sign-in, recovery, matchmaking, reconnecting and rankings, and helps prevent abuse and answer support requests. Under European data protection law, the bases are providing the requested service, legitimate interests in security and fair play, and applicable legal obligations.

GATO does not sell personal data, use advertising trackers or send marketing emails.

Who can see it

Room members see your nickname, relevant game actions and in-game cursor. Signed-in players can search usernames for Elo and ranked statistics. Passwords and email addresses are never public.

Service providers receive data needed for their role: Cloudflare handles connections and support-email routing; Resend delivers recovery and linking emails; Google hosts the support inbox. Discord or Steam verifies your identity when you use its sign-in. They may process data outside your country; their linked notices describe their practices and safeguards.

Cookies and preferences

Choosing Play as guest on the website creates a guest profile if you do not already have one. A necessary cookie keeps access to that profile for up to 400 days, refreshed when you return. Guests have ranked progress, data export and deletion just like other profiles. Clearing cookies or using a different browser loses guest access; create an account or log in to preserve or merge progress across devices. IP addresses are not used to identify guest profiles.

Registered website and Steam sign-in cookies normally last seven days. Local storage remembers language, theme, sound and reconnection details. Recovery codes expire after ten minutes.

How long data stays

Account and ranked history have no automatic expiry while you keep your profile. Live room and cursor data are temporary, though troubleshooting logs may include game events and nicknames.

Account deletion removes your active profile, credentials, platform links and ranked records, including linked-profile records. Other players keep their own match history. Minimal internal IDs and deletion dates prevent deleted profiles returning after a backup restore. Limited backup, security and support records remain only as needed for recovery, security, handling requests or legal obligations.

Your choices and rights

Account settings let you change details, download your data or delete your account. You must leave any active ranked game or queue before deletion. Contact support if you cannot sign in.

You can request access, correction, erasure, portability or restriction, or object to processing where applicable. We may verify ownership. You can complain to your local data protection authority. Contact support if a child is using GATO without legally required permission.

Material changes will be described here. Any new use requiring consent will ask for it separately.