PRIVACY POLICY

WHO WE ARE

The game is operated by OtoCo WY LLC - Think Strategically - Series 507, a registered series of a Wyoming series limited liability company. For any privacy question or request, contact us at support@supertictactoe.app — that is the route we answer, and the fastest way to reach a person.

Formal legal notices may instead be served on our registered agent at 30 N. Gould St Ste R, Sheridan, WY 82801. That address is for legal mail only and is not monitored for support or privacy requests.

MINIMUM AGE

This game is not directed to children. You must be at least 13 years old to play. We do not knowingly collect information from anyone under 13. If you believe a child under 13 has provided us with information, contact us and we will delete it.

WHAT STAYS ON YOUR DEVICE

The following is stored in your browser’s local storage. It never reaches us, and you can erase it at any time by clearing your browser data for this site:

• Your display name — the name you choose for online matches, saved so you do not have to retype it.
• Game progress — your gold, items and match state while you play.

WHAT WE RECEIVE ONLINE

Online matches use a match server that pairs you with an opponent and forwards messages between the two of you. While a match runs, this passes through that server:

• Your display name, so your opponent can see who they are playing.
• Your moves and chat messages, forwarded to your opponent.
• Your IP address, which is unavoidable for any internet connection and is used to route it.

The match server has no database and writes nothing to disk. Messages are relayed in memory and discarded immediately. When your match ends or you disconnect, the server retains nothing about you. Operational logs kept by our hosting providers may briefly contain connection metadata such as IP addresses.

PEER-TO-PEER EXPOSES YOUR IP

The game also offers a direct peer-to-peer mode with no server in between. This is a deliberate trade-off you should understand:

• A direct connection means your IP address is visible to the person you are playing, and theirs to you. That is inherent to how WebRTC works, not something we add.
• To establish the connection, your browser contacts public STUN servers run by Google and Cloudflare to discover your public network address. Those providers see your IP address as part of that process.

If you would rather not share your address with an opponent, use the dedicated server mode instead, where the server sits between you.

ADVERTISING

We show ads through Google AdSense to keep the game free. Google and its partners use cookies and similar technologies to serve and measure ads, and may use your prior visits to this and other websites to show ads based on your interests.

• Control personalized advertising at Google Ads Settings.
• Google’s handling of data from partner sites is described at policies.google.com.
• Opt out of personalized ads from participating vendors at aboutads.info.

In the European Economic Area, the United Kingdom and Switzerland you are asked for consent before any personalized ads are shown, and you can change or withdraw that choice at any time through the consent prompt.

ANALYTICS & COOKIES

We use Vercel Web Analytics to understand aggregate traffic — how many people visit and which pages they open. It is privacy-focused, uses no cookies, and does not build a profile of you or track you across other sites.

We set no cookies of our own. The only cookies placed in your browser by this site come from Google AdSense, as described above. You can block or delete cookies in your browser settings; doing so will not stop you playing.

HOSTING & THIRD PARTIES

We do not sell or rent your information, and we share it with nobody except the providers required to run the game:

• Vercel — website hosting and analytics.
• Cloudflare — match server hosting and STUN.
• Google — advertising and STUN.

These providers operate globally, so data may be processed in the United States or other countries. We may also disclose information where legally required.

YOUR RIGHTS

Depending on where you live, you may have the right to access, correct, delete or export your personal data, to object to or restrict its processing, and to withdraw consent.

In practice we hold almost nothing to act on — there are no accounts and no stored gameplay. Data held on your device can be erased by clearing your browser storage for this site. For anything else, contact support@supertictactoe.app. In the EEA or UK you may also complain to your local data protection authority.

If you live in a US state with a consumer privacy law, see Your Privacy Choices below.

YOUR PRIVACY CHOICES (US STATES)

This section is for residents of California, Colorado, Connecticut, Texas, Virginia and other US states with consumer privacy laws.

We have never sold anyone’s personal information for money. But we would rather be plain than rely on a technicality: showing personalized ads through Google AdSense means cookie and device identifiers are disclosed to Google for cross-context behavioral advertising, and several of these laws treat that as a “sale” or “share” even though no money changes hands. If you want no part of it, you can opt out:

• Turn off personalized advertising at Google Ads Settings. You will still see ads; they will not be based on your interests.
• Opt out across participating advertising vendors at aboutads.info.
• Send a Global Privacy Control signal, which some browsers and extensions transmit automatically as an opt-out request. We neither strip nor override that signal.
• Clearing this site’s cookies and browser storage removes the identifiers already set.

You may also ask us to confirm, access, correct or delete personal information we hold about you, or appeal a decision you disagree with, by emailing support@supertictactoe.app. In practice there is almost never anything to return or delete — there are no accounts, and gameplay is stored on your own device rather than by us. We will not treat you differently for exercising any of these rights.

We do not knowingly collect personal information from minors under 16, and we do not use it for profiling that produces legal or similarly significant effects.

RETENTION & SECURITY

Data on your device stays until you clear it. Match data is discarded as soon as the match ends. We keep no long-term records about players.

Traffic is encrypted in transit. No system is perfectly secure, but because we store so little there is very little to expose. Treat your display name and chat messages as public — anything you type in chat is sent to your opponent.

CHANGES & CONTACT

We may update this policy as the game develops; the date above changes when we do, and significant changes are announced in-game. Questions go to support@supertictactoe.app.