Privacy policy

This placeholder outlines data practices for the platform. Replace with counsel-reviewed text before production.

• Personal data: account email, play history, consent choices.
• Lawful bases: contract (service), legitimate interests (fraud prevention), consent (ads where required).
• Data subject rights: use the API POST /api/v1/privacy/export and POST /api/v1/privacy/delete with confirm: true after authentication.
• Retention: operational logs rotated; analytics aggregated.