Privacy Policy

In short

Calçada is a free, ad-free tile-drafting game. We collect only what we need to sign you in and let you play: your email address, a username and a display name you choose, your friends list, and a record of the games you play. We do not run ads, we do not use analytics or tracking tools, and we do not sell your data. Your email is used only to sign you in; other players never see it. This page explains the details.

What we collect, and why

We keep the data we hold deliberately small. We collect:

• Email address. Used only to identify your account and sign you in. There are two ways to sign in, and both involve an email: a one-time code sent to your email (a "magic code"), or "Continue with Google", in which Google tells us the email on your Google account. Your email is never shown to other players, and it is never written into the parts of our database that other players can read.
• Username. A short, unique handle you choose (3–20 characters). It lets friends find and add you, and it is the name opponents see when you play.
• Display name. A name you choose (1–30 characters), shown alongside your username to opponents and friends.
• An internal account ID. A random identifier that links your account to your profile, friends, and matches. It is not meaningful on its own.
• Game records. When a game finishes we store its result — who won, the final scores, the format and mode, and timestamps. During a live multiplayer match we store the current state of the shared board so both players see the same game. These records are tied to your account.
• Friends and friend requests. Who you are friends with, and pending requests you have sent or received, with timestamps.
• Presence while matchmaking and in a match. Short-lived signals (such as a "last seen" timestamp and your place in the Quick Match queue) so we can pair you up and detect when an opponent has disconnected.

What we do not collect

We want to be clear about what is absent, because it is a deliberate choice:

• No advertising, and no advertising identifiers.
• No analytics, telemetry, behavioural tracking, or crash-reporting tools of any kind.
• No password (both sign-in methods are passwordless).
• No phone number (phone sign-in is turned off), and no anonymous sign-in.
• No real name, profile photo or avatar, location, contacts, or device identifiers.

On Android, the app requests two permissions: access to the internet (to sign you in and play online) and vibration (for the optional haptic feedback you can turn off in Settings). Neither reveals anything about you.

Account and sign-in

You sign in without a password. You can either request a one-time six-digit code sent to your email, or use "Continue with Google".

If you choose Google, Google acts only as an identity provider: during sign-in it confirms your identity and passes your account email to our backend. We do not request or store any other Google profile details, such as your name or picture. Google's handling of your information is governed by Google's own privacy policy.

Where your data is stored, and who processes it

Calçada uses Supabase as its sole backend. Supabase provides the database, authentication, real-time multiplayer, and server functions, and acts as our data processor. Your account, profile, friends, and game records are stored in Supabase. Your email address in particular is held only within Supabase's authentication system; it is not copied into any other part of our database.

The only other company that ever receives any of your data is Google, and only if you choose to sign in with Google, and only during the sign-in handshake described above.

What other players can see

Calçada is a social game, so some information is shared with other players by design:

• Your username and display name are visible to opponents during a match and to your friends. Any signed-in player can also look you up by username to send a friend request, and your profile is technically readable by other signed-in players — so treat your username and display name as visible to anyone signed in to Calçada, not only your current opponents and friends.
• During a multiplayer match, the shared game board (tiles, scores, whose turn it is, and the turn clock) is visible to everyone seated in that match. This is a perfect-information board game, so the full board is meant to be mutually visible.
• A completed match's result is visible to the players who took part in it. Your overall stats (games played, wins, and losses) are visible to you and to your accepted friends.
• Your friends list and friend requests are visible only to you and the other person involved.

Your email address is never visible to other players.

Data stored on your device

A small amount of data is kept locally on your device and is never sent anywhere except as described above:

• Your app settings (sound, music and volume, colour-blind mode, theme, and whether you have finished the tutorial).
• Your sign-in session — a secure token that keeps you signed in across app restarts. This token is sent to our backend to authenticate your requests; it is not shared with anyone else. On Android, we turn off the system app-data backup so this token is not copied into device backups.

Third parties, ads, and tracking

Calçada contains no advertising, no analytics, and no third-party trackers. We do not embed any third-party tracking scripts, pixels, or software development kits. This is intentional, and part of how Calçada is designed: free to play, ad-free, and free of tracking.

The only external parties involved at all are Supabase (our backend and data processor) and Google (only as a sign-in option, only if you use it).

Keeping and deleting your data

We keep your account data — your profile, friends, and game records — for as long as your account exists, so your stats and match history remain available to you.

You can delete your account yourself, at any time, from inside the app: go to Settings → Account → Delete account. Deletion is immediate and permanent. If you no longer have the app installed, email us at the address below from the email you signed in with and we will delete the account for you.

When an account is deleted, we remove your profile, your friendships, and the link between your account and your past matches. A name already shown to people you have played against may remain part of their own game history.

Children

Calçada is a general-audience strategy game and is not directed at children. We do not knowingly collect personal data from children. If you believe a child has created an account, please contact us and we will remove it.

Changes to this policy

We may update this policy as the app evolves — for example, if a future version adds a feature that changes what data is collected. When we make a material change, we will update the effective date at the top and, where appropriate, note the change in the app. Continued use of Calçada after an update means you accept the revised policy.

How to contact us

If you have a question about this policy, or you want to access or delete your data, contact us at hi@calcada.app.