Privacy Policy

XQ Arena (“the app”, “we”, “us”) is a free Xiangqi (Chinese chess) game for Android and iPhone, published by H&Row STUDIO. This policy explains what data the app collects, why, who can see it, and the choices you have. Please read it before you play.

Last updated: 25 September 2026

1. Who we are and who this is for

H&Row STUDIO is a small studio run by Handrow Cahyadi in Jakarta, Indonesia. We decide how your data is used in XQ Arena. Laws such as the GDPR and Indonesia's Personal Data Protection Law call that role the “data controller”.

XQ Arena is made for teens and adults. It is not directed at children under 13 (under 16 in the EEA and the UK), and we do not knowingly collect data from them. If you are under 18, or under the age of majority where you live, you need a parent or guardian to read this policy and agree before you play. There is more about this in section 10.

2. What we collect

2.1 Account information

Every player starts as a guest. When you first open the app, Firebase Authentication creates an anonymous account for you. It is identified only by a random player ID, a string of letters and digits that says nothing about who you are. No name, email or phone number is involved.

You can secure your account with Google, or with Sign in with Apple on iPhone. Your player ID stays the same, so your handle, rating and games stay with you.

• From Google we receive your name, your email address and a Google user ID. Google's standard sign-in also passes along the web address of your Google profile picture. The app does not show or use that picture.
• From Apple we receive an Apple user ID and, if you choose to share them, your name and email address. If you pick Hide My Email, the address we get is a private relay address that Apple creates for you.

We use these details only to create and secure your account, to let you sign back in on a new phone, and to confirm it is really you when you ask us for help. The app never posts anything to your Google or Apple account. Your email is shown only to you, in Settings.

Our game server never reads your name or email. From your sign-in it takes your random player ID and whether the account is secured with Google or Apple. Your Google or Apple user ID travels with the sign-in too. The server uses it for one thing only: if you use the community, it turns it into a one-way fingerprint (section 2.12). It keeps that fingerprint and nothing else from the sign-in.

2.2 Your public player profile

The first time you play online or join the community, our server makes you a profile that other players can see. It holds:

• your handle: the name you choose, or an automatic one like Player-a1b2c3 until you pick one;
• an avatar seed: a number that sets the colours of your avatar;
• your rating, how many rated games you have played, your trophies, and your wins, losses and draws;
• if you play tournaments, how many you won and how many times you finished on the podium (section 2.14);
• your country flag, only if you chose one (section 2.15);
• when the profile was created, roughly when you were last online, and, while you are playing, the ID of the game you are in.

We also keep a lower case copy of your handle, so that two players cannot pick names that read the same.

2.3 Games you play online

For every online game we keep a game record. It holds both players' handles, avatar seeds, ratings at the start of the game and random player IDs, plus every move, the clocks, the time control, whether the game was rated, any draw offers, the result, the rating change and the times the game started and ended. A short summary of each finished game is also saved to each player's own history list. Either player can share a finished game in a community post. The post shows the poster's side, the result, the moves and both ratings, never the opponent's handle (section 4).

If you had chosen a country flag when a game started, its record also keeps a copy of it (section 2.15). A game played in a tournament is an online game like any other, and its record also notes the tournament's name and round. Everything else a tournament keeps is in section 2.14.

Games against the computer, lessons and puzzles run on your phone. Their moves are not sent to our servers, unless you choose to share a game in a community post (section 2.12).

2.4 Matchmaking and friend challenges

• While you search for an opponent we keep a queue entry with your rating, the time control you picked and when you joined. It is removed when you leave the queue or when the game you were matched into ends. An entry left behind, for example because the app was closed, is removed the next time the matchmaker comes across it, and always when you delete your account.
• When you invite a friend we create a six character challenge code linked to your player ID, with the time control and an expiry time. A code works for 15 minutes. Old codes are cleaned up automatically, usually within a day. A friend who enters your code sees your handle, avatar and rating before joining.

2.5 Your progress, and its backup

If you play as a guest, your progress is saved only on your phone (section 2.6). None of it is sent to us, and removing the app erases the copy on your phone.

If you have signed in with Google or Apple, your account also gets one private backup document, so that your progress comes back when you install the app on a new phone. It holds your XP, trophies, rank, streaks and the days they count, how far you are on the Arena ladder, your win, loss and draw counts, how many tournaments you won and how many times you finished on the podium, the lessons and quests you have finished, the name you typed in the app, and settings such as your piece style. It also holds the podium list: the ID of each tournament whose podium trophies you were given, and when that tournament ended, so that a new phone you sign in on knows they were already given. Each one drops off the list about six months after its tournament ended. It does not hold your games, your email or your name from Google or Apple.

Only you can read or change that document. The security rules enforce it: no other player can reach it, and our game server never reads it. Deleting your account deletes it too (section 8).

2.6 Data that stays on your phone

Your sound, haptics, motion, piece style, board and theme settings, the name you typed in the app, and your progress (XP, trophies, rank, streaks, the Arena ladder, lessons and quests) are saved on your phone. For a guest, we keep no other copy, and removing the app erases it. For a player who has signed in, the same things are also backed up to your own private document (section 2.5).

Your phone's own backup (iCloud on iPhone, your Google account on Android) may include this copy and restore it on a new phone or after a reinstall. That backup is between you and Apple or Google; we never see it.

Your list of recent games and their reviews are kept on your phone and never sent to us (an online game also has its own record on our server, section 2.3). The app also remembers, on your phone, which players you blocked or reported from an online game. What a block or a report stores on our server is in section 2.12.

Games you play against the computer, and your lessons and puzzles, are played entirely on your phone either way. Their moves are never sent to us, unless you choose to share a game in a community post.

2.7 Crash reports, usage statistics and server logs

To keep the game working and to make it better, we use these Google services:

• Firebase Crashlytics sends us a crash report when the app breaks. A report contains your device model, operating system version, app version, the time, a technical trace of the crash and an installation ID.
• Google Analytics for Firebase records how the app is used. The app itself sends only a few events: that it was opened, which kind of share card you opened, and, when you send one, its kind and shape. They never say what the card shows. The rest is Analytics' own automatic record, such as session length. It uses an app instance ID, basic device details (model, operating system, language) and a rough region that Google works out from your IP address. It does not record the moves you play, your name, your email, your handle, your player ID or anything you write. We have switched off collection of the advertising ID, and the app shows no ads.
• Server logs. Our game server logs each request: the time, the action, whether it worked and how long it took. In these log lines a player appears only as a short scrambled code made from the player ID. Sign-in tokens, emails, handles and the words of posts and comments are never logged.
• Google's hosting logs. As with any internet service, the Google Cloud platform that hosts our game server keeps its own record of each request for about 30 days: the IP address it came from, the type of device and app version that sent it (the “user agent”), and the address that was requested, which can include a game ID or a friend challenge code. Google's sign-in service also keeps sign-in IP addresses for a few weeks for security.

You can turn usage statistics and crash reports off at any time in Settings, under Privacy. That stops collection at the source.

2.8 Fair play and posting records

To stop cheating and abuse, the game server keeps a few simple counters against your player ID: how many games you aborted recently, how often you changed your handle today, how many wrong challenge codes you entered, and how many rated games you played against the same opponent in the last 24 hours. If you use the community, it also counts how many posts, comments, reactions, follows, reports and name searches you made recently, and how often the word filter refused something you wrote (only the count, never the words). If you play tournaments, it also counts how many tournaments you created and joined, and how many podium places you earned, in the last 7 days, how many times you proposed a time in the last 24 hours, how many wrong tournament codes you entered, and how many tournament games you played against the same opponent in the last 7 days. It also counts how many times you chose a country flag in the last 24 hours. The counters only look back a short time (from 10 minutes to 24 hours, or 7 days for some of the tournament counters). Nobody outside H&Row STUDIO can read them.

2.9 Notifications

XQ Arena does not send push notifications. So that the app can tell you about new comments on your posts, replies to your comments, new followers, and what came of a report you sent, we keep a short list on our server (your bell list) of your last 30 such events: what happened, when, and the player or post it is about. It never copies anyone's words: a comment is read from the comment itself when the app shows it to you, so a deleted comment shows nothing.

The bell also tells you what happens in your tournaments, such as a new round, a time your opponent proposed, or a result. Those lines are worked out from your tournaments each time the app asks for them, so nothing is stored on our server for them beyond the short list of your tournaments in section 2.14.

If we add push notifications later and you turn them on, we will store a device token so that Firebase Cloud Messaging can deliver them (through Apple's push service on iPhone). The token would be removed when you turn notifications off or delete your account.

2.10 What we do not collect

• We do not collect your precise location, your contacts, your photos, or anything from your camera or microphone. The app never asks to read any of those. On Android it asks for no special permissions at all: it only needs internet access. On iPhone, if you tap Save Image after sharing a card, iOS asks whether XQ Arena may add that picture to your Photos. That lets the app add a picture, never look at your photos. The only location information involved is the rough region that Google Analytics works out from your IP address (section 2.7). Two other things come close. A country flag, which you choose yourself if you want one, and which is never worked out from where you are (section 2.15). And, in a tournament, your phone's time zone offset, which is how many hours its clock is ahead of or behind world time (UTC) (section 2.14). The app reads it from your phone's clock, never from its location. Many countries share each offset, so it does not say which country you are in, but it does hint at your part of the world. That is why only your opponent sees it, and only for a game still to be played.
• We do not collect health data or payment data. There is nothing to buy in the app at launch.
• We do not use advertising identifiers, ad networks or marketing tools.
• There is no chat and no private messaging. Posts and comments are public to community members (section 2.12). Nothing you post can be a photo or a file.

2.11 Emails you send us

If you email us for help, to report a player or to use your privacy rights, we keep your email address and the messages so we can answer and keep a record. The emails are handled in Google's Gmail service. We delete them after 24 months unless a law requires longer.

2.12 The community

The community is where members post, comment, react and follow each other. You join by tapping Join, and it is your choice. A player who told the app they are under 13 never sees it (section 10). When you join or use the community, we store:

• the date you joined, that you accepted the community rules, and that you said you are 13 or older;
• your posts: the text, and a game's moves or a board position if you add one. A game you share is checked by our server: an online game is copied from its game record, and a game against the computer or between two players on one phone is replayed move by move;
• your comments and replies, and your reactions;
• who you follow and who follows you, with counts;
• your private safety lists: players you blocked or muted, and posts you hid. Only our game server reads them;
• reports you send: the reason, an optional note, and, for a report made from an online game, which game. The player you report is never told who reported them;
• that you blocked someone. A block also reaches us so we can check on players who are blocked a lot. The player you block is never told, except in a tournament (section 2.14);
• moderation records about you: reports about you or your posts, strikes, suspensions and bans, and the notices we send you about them;
• the posting counters in section 2.8, and the bell list in section 2.9;
• only if you signed in with Google or Apple, a one-way fingerprint of that sign-in. It is made from your Google or Apple user ID in a way that cannot be turned back into it. It is kept for every signed-in player the community has a record of, because it cannot be made later, and it is used for nothing but keeping a banned account from joining again (section 12).

You can report or block a player from an online game without joining. Nothing is posted in your name then: we store only the report or the block as listed above.

Guests can read the community, and report, block, mute and hide. Posting, commenting, reacting and following need an account secured with Google or Apple, so that a ban cannot be undone by reinstalling the app.

2.13 Share cards

When you share a card, such as a game you won or a new rank, the image is made on your phone and goes only to the app you choose. The image and its words are never sent to us. If you allowed usage statistics, we learn only the kind of card and its shape (section 2.7). Your own name is on a card while its switch is on, and you can switch it off. Your opponent's handle is on it only if you switch that on for that card. A tournament card shows the tournament's name and, for every player on it, their rank and the flag they chose; other players' handles appear only if you switch that on for that card. For a player under 13, a card never carries a name.

The words sent with the image say what the card shows, in one sentence, and end with a link to our XQ Arena page. The link is the same for everyone: it says nothing about you or the card. The image itself never carries a web address.

2.14 Tournaments

A tournament is a set of online games between a small group of players over several days or weeks, as a knockout or a round robin. Any player can look at a public tournament. To create or join one you need an account secured with Google or Apple, a handle you chose, and to have said you are 13 or older. When you create or join a tournament, we store:

• its name, which passes our word filter, who created it, and its settings: knockout or round robin, the number of players, the clock, how long each round lasts, and whether it is public or private. Every tournament also has a six character code that its players can send to friends;
• who joined and when, with a copy of each player's handle, avatar colours and rating, and whether and when a player withdrew;
• the seeds, pairings and results, the bracket or table, and the podium. Each game played is an ordinary game record (section 2.3);
• for each match, what happened in its match room: the times the two players proposed and agreed, when each of them pressed Ready and how long they waited (counted up to an hour), whether they came at the agreed time, and which games were started and who caused an aborted one. A proposal is a time only, with no words. This is how a game nobody played is decided fairly;
• your phone's time zone offset, explained below;
• a copy of your country flag, if you chose one, so that the tournament's card can show where its players come from (section 2.15);
• a small membership record: the tournaments you are in or created, the last five of yours that ended, that you said you are 13 or older, and the counters in section 2.8.

Your time zone offset. When you create or join a tournament, and when you use a match room, the app sends how many hours and minutes your phone's clock is ahead of or behind world time (UTC), for example +7 in Jakarta. That is all it sends: not the name of your time zone, and never your location. We keep the latest offset, and when it was last updated, with your entry in the tournament, so that your opponent can see a time in your local time as well as theirs. Only your opponent sees it, and only while your game together is still to be played. It is deleted when the tournament finishes, is cancelled or expires, when you leave it or withdraw, and when you delete your account.

Your profile shows how many tournaments you won and how many times you finished on the podium (section 2.2). You can report or block your opponent from a tournament's match room, as from an online game (section 2.12). If you block the player you are paired with in a running tournament, you lose that match, and both of you see that it was decided by a block. Other players see only that the game was not played. Who sees what is in section 4, and how long it is kept is in section 7.

2.15 Your country flag

You can choose to show a country flag beside your name, from a fixed list of countries and territories. There is none until you choose one. Only players whose account is secured with Google or Apple, and who said they are 13 or older, can choose one. A guest never has one. We never work it out from your location, your IP address, your phone's language or region, your time zone or your phone number: it is only ever the one you picked, and it does not have to be where you live.

Like your handle, your flag is public. Any player can see it beside your name in tournaments, in the player panels of an online game and in the community, and it is part of your public profile (section 2.2). A tournament's card shows the flags of the players still in it, and a share card of a finished tournament can show the flags of the players on it.

You can remove it at any time, and removing it is never refused. To stop misuse, choosing a flag is limited to 10 times a day (section 2.8). When you remove or change it, it changes on your profile, in the community and on the tournaments you are in. Two copies work differently:

• A tournament keeps a copy only while it is open or being played and you are still in it. The copy is deleted when you remove your flag, when you leave or withdraw, when the tournament ends, and when you delete your account.
• The record of each online game keeps the flag you showed when that game started, as it keeps your handle from then. Only the two players of that game can see it. It stays until you delete your account, which removes it from every game record.

3. Why we use your data

Privacy laws such as the GDPR ask us to say which legal reason we rely on. In plain words:

• To give you the game you asked for (contract). Your account, your public profile, matchmaking, friend challenges, game records and ratings, the backup of your progress, and, if you join it, the community: your posts, comments, reactions, follows and bell list. Tournaments, if you play in them, with your time zone offset. Your country flag, if you choose one.
• Because we have a fair reason to (legitimate interests). Keeping play fair, stopping abuse, keeping the service secure, server logs, answering your emails, and keeping finished game records after a player leaves so that opponents' histories and ratings stay correct. Keeping players safe in the community is one of these too: the word filter, automatic hiding, reports and block signals, moderation, strikes, bans and the sign-in fingerprint.
• Because you said yes (consent). Usage statistics and crash reports are off when you install the app, everywhere in the world, and they stay off until you say yes. We ask once, shortly after you start playing, on a card you can wave away. Push notifications, if we add them, are always your choice. You can change your mind at any time in Settings, under Privacy, or in your phone's notification settings.
• Because the law requires it. In rare cases we may have to keep or hand over data to follow a law or a court order.

You do not have to give us any data. Without a profile and game records online play cannot work, but lessons, puzzles and games against the computer still do. You never have to join the community or play a tournament, and a country flag is always your choice.

We do not use your data for advertising or marketing profiles. We do not make decisions with legal or similarly serious effects about you by automated means alone. In the community, a filter refuses some words, links and contact details, and a post or an account can be paused automatically after several reports. These pauses are temporary, and a person reviews every one.

4. Who sees what

• Any player can see your public profile (section 2.2), for example when they are matched with you, type your friend challenge code, or open your profile in the community.
• Your opponent can see the record of each game you played together, including the moves (section 2.3). Either of you can share that game in a community post: members then see the moves, the result, the time control, the date and both ratings at the start, but never the other player's handle or player ID.
• Any player, guests included, can see a public tournament: its name, settings and creator, who is in it with their handles, avatar colours, flags, ratings and seeds, when each joined or withdrew, its bracket or table, and every result. A private tournament can be seen in the same way by its players and by players signed in with Google or Apple who have its code. Only its creator and its players see the code.
• Your opponent in a tournament match can see what happened in your match room: the times proposed and agreed, when you pressed Ready and how long you waited, and when you were last there. While your game together is still to be played, they also see your time zone offset, shown to them as your local time. If a block decides your match, both of you see that it did (section 2.14). Other players see only the result and how it was decided, such as a walkover.
• Community members can see your posts, your comments, the reaction counts on them, your follower and following lists and counts, and when you joined. They can open your profile and find you by your exact handle. A reaction only adds to a count: other players never see who reacted. Players you block cannot see your posts or comments in the app, and you cannot see theirs.
• Only you can see your game history list, your matchmaking queue entry, the challenge codes you create, your progress, your bell list, your blocks (except in a tournament match, as above), mutes, hidden posts and reports, and the email shown in Settings.
• H&Row STUDIO can access the data on our servers when needed for support, moderation, security or legal reasons. That includes reports, block signals and the content they are about.

Your real name, email address and Google or Apple account are never part of your profile, your games or your posts. The random player ID is attached to profiles, game records, tournaments and posts so the system can tell players apart. That means your opponent's app receives your player ID together with the game, a member's app receives the player ID of the people whose posts it shows, and the app of anyone who opens a tournament receives the player IDs of its players. The app does not display it, and it cannot be used to sign in or to find out who you are.

5. Where your data is stored

Profiles, games, queue entries, challenge codes, tournaments, the progress backup, and community posts, comments, reactions, follows, blocks, mutes, reports and bell lists are stored in Google Cloud Firestore in the region asia-southeast2, which is Jakarta, Indonesia. The game server (the “referee” that checks every move) runs on Google Cloud Run in the same region.

Your sign-in record (Firebase Authentication), crash reports (Crashlytics) and usage statistics (Analytics) are handled by Google in its own data centres, which are mainly in the United States.

If you play from outside Indonesia, your data travels to Indonesia and to the other countries where Google operates. Google handles this data for us under its data processing terms. For data from the EEA, the UK and Switzerland, Google relies on the EU-U.S. Data Privacy Framework, with its UK and Swiss extensions, and on standard contractual clauses. You can ask us for a copy of these safeguards.

6. Sharing and service providers

We share personal data only with the companies that help run the service:

• Google (Firebase Authentication, Cloud Firestore, Cloud Run and Cloud Logging, Firebase Crashlytics, Google Analytics for Firebase, and Firebase Cloud Messaging if notifications are added). See Google's privacy policy and the Firebase privacy information. Google handles this data only on our instructions, under the Firebase and Google Cloud data processing terms, which require protection at least equal to what this policy promises. The Google sign-in screen itself is run by Google under its own privacy policy.
• Apple, only if you use Sign in with Apple. Apple runs the sign-in itself under its own privacy policy. We do not send Apple anything about your games.

Other than that, your data is shared only with other players as described in section 4, or where the law requires it. If content in the community puts a child at risk or is otherwise illegal, we may report it to the authorities where the law requires us to. If the studio or the game ever changes hands, this policy keeps applying to your data, and we will post a notice on this page before your data is handed over.

A share card goes wherever you send it (section 2.13). That is you sharing, not us, and the app you pick handles it under its own policy.

We do not sell your personal data. We do not share it with advertisers or data brokers. Google Play and the App Store collect their own data when you download the app, under their own policies.

7. How long we keep it

• Account, public profile and progress backup: for as long as your account exists.
• Guest accounts that are never used again: a guest account can only be reached from the phone it was made on, or from a phone restored from that phone's own backup (section 2.6). We may remove guest accounts that have not been used for 12 months.
• Finished game records: kept while the service runs, so that histories and ratings stay correct. After you delete your account you appear in them as “Deleted player” (section 8).
• Tournaments: an open tournament that does not fill up within 14 days expires. A cancelled or expired tournament is deleted automatically about 30 days after it ends. A finished tournament, with its matches and match rooms, is kept for two years after it ends, so its players can look back on it, then deleted automatically. Its games are ordinary game records, kept as above.
• Your time zone offset: only until the tournament ends, you leave it or withdraw, or you delete your account (section 2.14).
• Your country flag: until you remove it or delete your account. A tournament's copy goes sooner, and each online game record keeps its copy until you delete your account (section 2.15).
• Your tournament membership record: while your account exists. Its list of tournaments that ended keeps only the last five.
• Queue entries: until you leave the queue or the matched game ends (section 2.4).
• Challenge codes: they work for 15 minutes and are cleaned up automatically, usually within a day.
• Fair play and posting counters: they only count the last 10 minutes to 24 hours, or 7 days for some of the tournament counters, and are removed with your account.
• Posts, comments, reactions and follows: until you delete them or your account.
• Your community member record, safety lists and bell list: while your account exists. A mute ends when you chose (24 hours, 7 days, 30 days, or until you unmute), your hidden posts list keeps the last 1,000, and the bell keeps your last 30 events.
• Content removed by a moderator: 180 days, so a decision can be appealed, then deleted automatically. The comments and reactions under a removed post are deleted straight away.
• Reports and review records: 12 months after the review. They include the first 200 characters of a reported post or comment, even if its author deletes it in the meantime. Deleting the account of the player a report is about removes them at once.
• Strikes, suspensions and bans on your account: while your account exists. Only strikes from the last 90 days count.
• Records of moderator actions: 24 months.
• The ban fingerprint: while the ban stands, even after the account is deleted (section 8).
• Crash reports: 90 days, which is Google's standard for Crashlytics.
• Usage statistics: up to 14 months, following Google Analytics' standard retention settings.
• Server logs and Google's hosting logs: about 30 days.
• Emails you send us: 24 months (section 2.11).
• Backups: if we keep backups of the database, each one is kept for no more than 30 days. After a deletion, Google clears any leftover copies from its own systems on its own schedule, which Google says can take up to about 180 days.

We may keep something longer only if a law requires it.

8. Deleting your data and account

You can delete your account at any time:

• In the app: Settings › Account › Delete account. You need to be online. Your sign-in account and everything on your phone are erased right away, and the app's access to your Google or Apple account is withdrawn. The rest of your data on our servers is removed at the same time or shortly after, and always within 30 days.
• Without the app: email handrowcahyadi@gmail.com from your account's email address, or tell us your player handle. We check that the account is yours and delete it within 30 days.

What is deleted: your sign-in account, your public profile and handle, your own game history list, any queue entry or challenge code, your fair play and posting counters, and your progress backup if one exists. From the community: your posts (with the comments and reactions under them), your comments (with the replies under them), your reactions, your follows both ways, your blocks, mutes and hidden posts, other players' blocks and mutes of you, reports about you, your bell list and the lines about you in other players' bells, your member record with its strikes and notices, and our records of moderator actions about you. Your country flag, everywhere it is stored, game records included. From tournaments: your membership record and your time zone offset. You leave any open tournament you joined, and an open tournament you created is cancelled and its players are told. In a tournament that is being played you withdraw: your remaining games are forfeited, so your opponents win them, and the tournament carries on without you. With in-app deletion, everything saved on your phone is erased too. An older copy in your phone's own backup (section 2.6) is held by Apple or Google, not by us.

What is kept, and why: finished game records. The moves, clocks, results, ratings at the time and dates of the games you played stay. Your handle is replaced by “Deleted player” in the record and in your opponents' history lists. The record still carries your old random player ID. It no longer belongs to any account or profile and cannot be used to sign in. We keep these records so your opponents' histories and ratings stay correct, for as long as the service runs. We also keep a one-line note that this player ID was deleted, with the date. It holds nothing else, and it is what stops that ID ever being given a new profile.

Tournaments are kept the same way. A tournament you played in keeps its bracket or table, its results and its places, so the other players' records stay correct. Your name in it becomes “Deleted player”, with no flag, and it still carries your old random player ID. It is deleted when its time in section 7 runs out: two years after it finished, or about 30 days after it was cancelled or expired.

From the community we keep the reports you sent, without your name or your note, so that decisions already made stay fair, and, only if you were banned, the ban fingerprint, so that the same Google or Apple account cannot join again. If an opponent shared a game you played together, the post stays. It never showed your name, and it does not now.

Crash reports and usage statistics are not linked to your account and age out on Google's standard schedule (section 7). Your deletion request email is kept as a record for 24 months. Any backup is cleared within 30 days. We keep anything the law requires us to keep.

Full steps, and how to delete only some of your data: handrow.studio/xqarena/delete-account.

9. Your rights

Wherever you live, you can ask us to:

• show you the personal data we hold about you (access);
• fix data that is wrong (correction). You can change your handle and your country flag yourself in the app;
• delete your data (section 8). You can delete any post or comment of yours yourself, in the app;
• send you a copy of your data in a common format (portability);
• stop or limit a use of your data that you object to, and withdraw any consent you gave. For usage statistics and crash reports, use the switch in Settings, under Privacy. That data is not linked to your account, so we cannot find yours from an email.

Email handrowcahyadi@gmail.com. We may ask a question or two to make sure the account is yours. We answer within 30 days, or sooner where your local law sets a shorter time. Using these rights is free and we will never treat you worse for using them.

• Indonesia. You have these rights under Law No. 27 of 2022 on Personal Data Protection (the PDP Law), including the right to object to automated decisions and to claim compensation. We act on requests to see, correct, limit or stop the use of your data within 3 x 24 hours of receiving them. You can also complain to Indonesia's personal data protection authority or to the Ministry of Communication and Digital Affairs (Komdigi).
• EEA, UK and Switzerland. You have these rights under the GDPR, the UK GDPR and Swiss data protection law. You can also complain to the data protection authority where you live or work, for example the ICO in the UK. The EEA authorities are listed at edpb.europa.eu.
• California. The CCPA and CPRA give you the right to know, delete and correct your personal information, and the right not to be treated worse for asking. The categories we collect are identifiers (player ID, handle, email, app and installation IDs, IP address, and the one-way sign-in fingerprint), internet activity (games, tournaments, community posts and comments, app usage, crash reports) and a rough location worked out from your IP address. Only if you use them, they also include the country flag you choose and, in tournaments, your phone's time zone offset. They come from you, your device and Google or Apple sign-in. We use them for the purposes in section 3, keep them as set out in section 7, and disclose them only to the service providers in section 6. We do not sell personal information, do not share it for cross-context behavioural advertising, and do not use sensitive personal information to work out things about you. You, or an agent you authorise in writing, can make a request by email.

10. Children

XQ Arena is not directed at children under 13 (under 16 in the EEA and the UK). On Google Play its target audience is set to 13 and over. We do not knowingly collect personal data from children below those ages. If you believe a child has given us data, email us and we will delete it.

The app asks every new player their age, in three neutral brackets. On iPhone with iOS 26 or later, the app may also ask Apple for your age range, which you can decline. The answer stays on your phone and is used only to decide what the app offers. A player who answers Under 13 keeps the lessons and the games against the computer on their phone. They are not offered online play, are never asked about crash reports or usage statistics and send none, never see the community, and the app never asks our server for it. They never see tournaments, and they cannot choose a country flag. A card they share never carries a name.

The game has no ads, no purchases, no chat or private messages, and no way to send photos or files. Players 13 and over (16 and over in the EEA and the UK) can post text and Xiangqi games in the community, which is filtered and moderated. If we learn that a player is under 13, we delete their account from our servers, their community posts and comments included, in the same way as section 8. Beyond what section 8 keeps, we keep only, if they signed in with Google or Apple, the one-way fingerprint that stops that sign-in from joining the community again. They can keep playing the lessons and the computer on their phone.

Parents and guardians can email us at any time to see, correct or delete a child's data, or to withdraw their permission.

11. Security

All traffic between the app and our servers is encrypted, and Google encrypts the stored data. Database security rules decide who can read what, and they are tested automatically before they go live. Players can read only what concerns them, and only the game server can write profiles, ratings and games. No player can read community content from the database directly: our game server serves it and applies blocks, hides and moderation first. The game server accepts requests only from signed-in players. No system is 100% secure, but we take reasonable care to protect your data, and we will tell you and the authorities about a serious breach where the law requires it.

12. Fair play and moderation

The referee service checks every move of every online game and keeps the clocks. To keep ratings honest, some limits are applied automatically. For example, repeated rated games against the same opponent in one day count for less, and a player who keeps abandoning games has to wait a few minutes before the next rated game.

Handles are filtered for offensive words, links, contact details and names that imitate another player. Tournament names are filtered for offensive words, links and contact details too. In the community, a word filter refuses posts and comments with slurs, sexual terms, links, email addresses or phone numbers before they are posted. A post or comment that several members report is hidden automatically until we review it, and a player many members report is paused from posting, commenting, reacting and following for up to 72 hours while we look. A person reviews every report and every automatic pause.

We may reset a handle, reset a tournament's name, close a tournament that has not started, adjust a rating, hide or remove a post or comment, give a strike, or suspend, ban or close an account, as set out in the Terms of Use. When we act on your post, comment or account, the app shows you a notice with the reason. When you report something in the app, we tell you what came of it. If you think a decision is wrong, email us and a person will review it.

To report an offensive handle, a post, a comment or an abusive player, use Report in the app (on the post, the comment, the player's profile, in an online game or in a tournament), or email us. See section 4 of the Terms of Use.

13. Changes to this policy

We may update this policy as the game grows. When we do, we change the “Last updated” date above. For important changes we will also post a notice on this page, and in the app where we can, before they take effect.

14. Contact

Questions about this policy or your data: H&Row STUDIO, Jakarta, Indonesia. handrowcahyadi@gmail.com