Privacy Policy

• We collect account details you submit and usage/device data generated when you use the site.
• Analytics cookies run only with your consent.
• Chat messages are not stored. They live in the server's memory only while the room exists and disappear when the room closes.
• No ads. We do not show advertising and do not sell or share your data with advertisers.
• Providers we use: hosting/CDN (Cloudflare), database hosting for accounts (Neon), analytics (Google Analytics 4), tag management (Google Tag Manager), error logging (Sentry).

Information you provide

• Account info (e.g., display name, email) and profile choices (avatars, preferences).
• Content you submit in games or chat (usernames, answers, messages). Chat messages are held in memory only while the room exists and are never written to a database or log; see Data retention.
• Support requests and your consent selections for cookies/marketing.

Information collected automatically

• Device & log data: IP address, coarse location (country/region), browser/OS, referral URL, pages/events, session IDs, crash logs.
• Cookies, local storage, and similar technologies.

Information from third parties

• Sign in with Discord / Twitch. When you sign in with one of these services, they send us your user ID, username, avatar and email address, and we store them with your Chiby.io account. Creating an account is optional; you can play as a guest. We also keep the access tokens the service issues so you stay signed in. We never post on your behalf or read your messages. Their own policies: Discord, Twitch.
• Twitch channel bans. Signing in with Twitch also lets us read the list of users you have banned or timed out on your Twitch channel. We only use it when you host a room restricted to signed-in players, to keep those users out of your room. We do not store that list.

• Operate core features: gameplay, matchmaking, chat, leaderboards, and anti-abuse.
• Improve performance, reliability, and security; debug and prevent fraud.
• Measure feature usage (GA4), capture errors (Sentry), and plan capacity.
• Comply with law and enforce our Terms.

Legal bases (UK/EEA): contract; legitimate interests (site safety/analytics); consent (non-essential cookies); legal obligation.

We use these categories of cookies:

• Strictly necessary (e.g., session, load-balancing, security).
• Analytics (e.g., GA4 event metrics) – only with consent.

You can manage choices via your browser controls.

We use Google Analytics 4 and Google Tag Manager to understand usage. We also use Cloudflare as CDN/anti-abuse and Sentry for error logging. We are migrating to a more ethical solution and plan to reduce our reliance on Google analytics over time.

• Google Privacy: policies.google.com/privacy
• GA opt-out add-on: tools.google.com/dlpage/gaoptout

We share personal data only with the providers listed above, who process it on our instruction (hosting/CDN, database hosting, analytics, error reporting). Google Analytics receives usage data, only with your consent, so we can measure how the site is used; we do not use it for advertising. We do not run advertising, and we do not sell, rent, or share personal data with advertisers or data brokers. We may disclose data to comply with law, protect rights and users, or in a business transfer (e.g., merger, acquisition).

Some games allow users to input text or other content, and rooms have a chat. Content is provided by users and does not represent Chiby.io's views. Users are solely responsible for what they submit. Chat messages are checked automatically on the server as they are sent (profanity is masked and repeat offenders are muted for the rest of the room); the text itself is not stored, reviewed by people, or used for any other purpose. We may remove content that violates our Terms or the law and may take action on accounts that abuse the service.

UK/EEA users can request access, correction, deletion, restriction, portability, and object to certain processing. For consent-based processing (e.g., analytics cookies), you can withdraw consent via your browser controls.

To exercise rights, email chiby.customers[at]gmail.com. We may need to verify your identity.

Deleting your account. Email us from the address linked to your account and we will delete your account and the data we received from Discord or Twitch. You can also revoke our access at any time from your Discord or Twitch settings (Authorized Apps / Connections).

We retain personal data only as long as needed for the purposes above (e.g., your active account), unless law requires longer. Aggregated/anonymised data may be kept longer.

Rooms and chat. Usernames, avatars, game answers, scores and chat messages exist only in the game server's memory for the lifetime of the room. Only the most recent chat messages are kept so that players who join or reconnect can see them. Everything is discarded when the room closes or the server restarts; nothing from a room is written to a database or log.

We implement reasonable technical and organisational measures to protect personal data. No online service is 100% secure, but we work to prevent unauthorised access, misuse, and incidents.

This service is not directed to children under 13 (or the age required in your country). If you believe a child provided personal data, contact us so we can delete it.

Personal data may be processed outside the UK/EEA. Where required, we use safeguards such as Standard Contractual Clauses (with the UK Addendum) for transfers.

We will update this page if we make material changes. If changes are significant, we may provide a more prominent notice.

Email: chiby.customers[at]gmail.com.