Privacy policy

Last updated 31 October 2026

GameItApp lets you play Hangman and Square Battle with other people, on the web at gameitapp.com and in the Android app. This policy explains what personal data the service collects, why, and what you can do about it.

Who is responsible

GameItApp is run by Marko Satek, an individual based in Ireland, who is the data controller for the personal data described here. For anything about your data, email privacy@gameitapp.com.

What we collect

• Account details: your username, email address, date of birth, and your password, which is stored only as a one-way hash and never in readable form.
• Game activity: the rooms you create and join, the matches you play, and your moves in them (letters and words guessed, ships placed, shots fired), results and rematch choices.
• Connections: connection requests you send and accept, room invites, and the players you mute.
• Chat messages: what you write in a room's chat, with the room and the time it was sent.
• Reports: when you report a chat message or a player, the reason and any details you give, together with who you reported and a copy of the message or their username.
• Technical data: for each signed-in session, the IP address and the browser or device it came from; and short-lived server logs of requests, which include IP addresses.

We do not use analytics, advertising or tracking services, and we do not collect your location, contacts or anything else from your device.

Why we use it

• To run the service you signed up for (performance of a contract): your account, signing in, playing matches, connections, invites and chat.
• To check your age. You must be 13 or over to sign up, and chat is only available to players aged 16 or over, so we use your date of birth to check both. Your date of birth is never shown to anyone.
• To keep the service secure and working (our legitimate interest): session and log data help us spot abuse, limit spam and fix problems.
• To keep players safe (our legitimate interest): we review reported messages and players, and may rename or suspend players who break the rules. The reported player isn't told who reported them.
• To email you about your account: confirming your email address when you sign up, and password resets you ask for. We don't send marketing email.

What other players see

Other players see your username, your moves and results in matches you play together, and your connection status with them. Players in a room's chat see the messages you post there, unless one of you has muted the other: a mute hides messages in both directions. Your email address and date of birth are never shown to other players.

Who else handles your data

We don't sell or share your personal data. The service runs on servers rented from Hetzner Online GmbH in Germany, who store it on our behalf, and account emails are sent through an email delivery provider acting on our behalf. Your data stays in the European Union. We will disclose data if the law requires it.

How we protect your data

• All traffic between your device and the service is encrypted with HTTPS; unencrypted connections are refused.
• Passwords are stored only as a salted one-way hash (bcrypt), so nobody, including us, can read them.
• Passwords, email addresses and security tokens are filtered out of server logs.
• The sign-in cookie is signed, sent only over HTTPS and not readable by scripts on the page.
• Sign-in attempts, password resets and sign-ups are rate-limited, and automated attacks are blocked, to protect accounts from being guessed or abused.
• Access to the servers and database is limited to the operator of GameItApp.

No system is perfectly secure, but if we ever learn of a breach that puts your data at risk, we will tell you and the Data Protection Commission as the law requires.

Cookies

We use a single cookie that keeps you signed in. It is needed for the service to work, so there is nothing to opt into. There are no advertising or analytics cookies.

How long we keep it

• Account details, game activity, connections and chat messages: for as long as you have an account.
• Session records: until you sign out on that device or your account is deleted.
• Server logs: a short time, after which they are overwritten automatically.
• Reports, including the copy of the reported message or username: for up to a year after they are reviewed, even if the message or the reported account is deleted, so repeated abuse can be recognised.

When you delete your account, your account details, chat messages, connections, invites, mutes and sessions are erased straight away. Matches you have already played stay in the other players' history under an anonymous "deleted" name, with nothing that identifies you.

Deleting your account

You can delete your account yourself at any time: sign in, open Account from the link at the bottom of any page, and choose Delete account. If you can't sign in, email privacy@gameitapp.com from the address on your account and we will do it within 30 days. How account deletion works.

Your rights

Under the GDPR you can ask for a copy of your data, have it corrected, erased or restricted, receive it in a portable format, and object to how it is used. Email privacy@gameitapp.com and we will answer within a month. If you're unhappy with how we handle your data, you can complain to the Data Protection Commission in Ireland at dataprotection.ie.

Children

GameItApp is not meant for children under 13, and sign-up is refused if your date of birth shows you are younger. Players aged 13 to 15 should have a parent's or guardian's permission to use GameItApp. Chat is limited to players aged 16 and over, so younger players can play but can't read or write chat messages. We never use anyone's data for advertising. If you believe a child under 13 has an account, or you are a parent or guardian with a question about your child's account, email privacy@gameitapp.com and we will look into it and delete the account where needed.

Changes

If this policy changes, the new version will be posted here with a new date. If a change significantly affects how your data is used, we will tell you in the app first.