Privacy Policy

Effective [DATE]. Last updated [DATE].

The short version: we collect your email, what you say to your Champion, and how the game goes, because that is what the game runs on. We use a payment processor so we never see your card number. We do not sell your data and we do not use your coaching to train third-party AI models. You can export or delete everything from your settings.

1. Who this covers

This policy explains how [LEGAL ENTITY NAME] ("Chalk Corner", "we", "us") collects and uses information when you use chalkcorner.com and the Chalk Corner game (the "Service"). It applies to everyone who visits the site or creates an account.

2. What we collect

Information	Where it comes from	Why
Email address and, if you give it, a display name	You, when you sign up	To sign you in, send Morning Reports and account emails
Coaching conversations with your Champion	You	To compile your Champion's profile and run matches
Match transcripts, offers, results, ratings, highlights	Generated by the game	To run the ladder, show replays and reports
Gym membership and Discord webhook URLs you add	You	To deliver reports to your Gym's channel
Purchases of Chalk and item history	You and our payment processor	To credit your account and keep records
Age confirmation	You	To enforce 13+ to play and 18+ to buy
Device and usage data: browser type, pages viewed, actions in the game, approximate location from IP, crash logs	Collected automatically	To keep the Service working, detect abuse, and understand what people use
Time zone	You or your browser	To deliver your Morning Report at 8am your time

We do not collect your card number. Payments are handled by Stripe, which shares with us only a token, the last four digits and the outcome of the charge.

3. How we use it

To run the game: coaching, matches, ratings, reports, Gyms, tournaments and the Shop.
To send you the emails you'd expect: Morning Reports, magic links, receipts, and important notices about your account or the Service. You can turn off Morning Report email in settings.
To keep the game fair and safe: automated filters and human review of content, detection of multiple accounts and abuse.
To improve the Service, using aggregate and de-identified data. You can opt out of your coaching conversations being used for this in settings.
To comply with law and enforce our Terms of Service.

We do not sell your personal information and we do not share it with advertisers. We do not use your coaching conversations to train third-party AI models.

4. AI processing

Your Champion is powered by a hosted AI model operated by a third-party provider. When you coach your Champion or a match runs, the relevant text is sent to that provider to generate a response. We use providers whose terms prohibit them from training on that data. The provider currently used is [PROVIDER, e.g. Google Cloud Vertex AI]. We may change providers and will update this policy when we do.

5. What other players can see

Your Champion's name, look, record, rank and league are visible on the ladder and on its profile.
Match transcripts are visible to the other player in that match. If you make a replay public, anyone with the link can see it. You can revoke a public link at any time.
Highlight cards you choose to share include the quote, your Champion's name and the result.
Your coaching conversations and your Champion's profile are never shown to other players.
Gym members can see each other's Champions and results inside the Gym.

6. Who we share it with

Service providers who process data on our behalf under contract, only as needed to run the Service:

Hosting and database: [e.g. Supabase, Vercel or Google Cloud]
AI model provider: [PROVIDER]
Payments: Stripe
Email delivery: [e.g. Resend]
Product analytics and error reporting: [e.g. PostHog, Sentry]
Discord, only where you add a webhook to deliver reports to your Gym's channel

We may also share information if required by law, to protect the rights and safety of players or the public, or as part of a merger or acquisition, in which case this policy continues to apply to your data.

7. Cookies

We use a session cookie to keep you signed in and a small number of first-party analytics cookies to understand how the Service is used. We do not use advertising cookies. You can clear or block cookies in your browser; signing in will not work without the session cookie.

8. How long we keep it

Account and Champion data: for as long as your account exists.
Match transcripts and replays: for as long as your account exists, or until you delete the specific replay.
Purchase records: 7 years, as required for tax and accounting.
Usage and error logs: up to 90 days.
When you delete your account, we delete or de-identify your data within 30 days, except records we must keep by law.

9. Your choices and rights

Export: download your Champion's profile, coaching history and replays from settings.
Delete: close your account from settings or by emailing us; see section 8 for timing.
Email: turn off Morning Report email in settings. Account and legal emails still arrive.
Improvement opt-out: stop your coaching conversations being used to improve the Service, in settings.
Public replays: make any replay private again at any time.

If you live in California, you have the right to know what personal information we collect and how we use it, to request deletion, to correct inaccurate information, and not to be discriminated against for exercising these rights. We do not sell or share personal information for cross-context behavioral advertising. To make a request, email privacy@chalkcorner.com; we will verify it using your account email.

If you live in the European Economic Area, the United Kingdom or Switzerland, we process your data on the basis of performing our contract with you, our legitimate interests in running and improving the Service, your consent where we ask for it, and legal obligations. You have the rights to access, correct, delete, restrict and port your data, to object to processing, and to complain to your local data protection authority. Data is processed in the United States; we rely on standard contractual clauses for transfers. [LAWYER: confirm transfer mechanism and whether an EU representative is needed.]

10. Children

The Service is not for children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has created an account, email us and we will delete it. Players aged 13 to 17 cannot make purchases.

11. Security

We use encryption in transit, restricted access to production data, and sign-in by emailed magic link so there is no password to steal. No system is perfectly secure; if we learn of a breach affecting your data, we will notify you as required by law.

12. Changes

We may update this policy. If a change is material, we will notify you by email or in the Service before it takes effect.

13. Contact

Privacy questions and requests: privacy@chalkcorner.com. Everything else: hello@chalkcorner.com. Postal: [LEGAL ENTITY NAME], [MAILING ADDRESS].