Privacy Policy
⚖️ DRAFT — pending legal review; not yet localised. Factual basis: Docs/GDPR_DATA_MAP.md.
HotBoards respects your privacy. This policy explains what personal data we process, why, the lawful basis, how long we keep it, and your rights.
Data we process
Account data (email, display name, hashed credentials, KYC level), gameplay/match data, financial ledger references, and device/notification tokens — itemised per service in our internal data map. We never store card numbers: payments use Stripe (see Payments below).
Payments
Card data is entered directly into Stripe and never touches HotBoards systems (PCI-DSS SAQ-A). We hold only Stripe reference identifiers.
Your rights
Access, rectification, erasure, restriction, portability and objection, subject to legal-retention obligations for financial/KYC records. Contact us to exercise them.
privacy@hotboards (placeholder)