1. Information we collect
- Information you provide: Registration email, a password stored only as a cryptographic hash that we cannot read in plain text, display name, optional profile details such as real name, avatar, country or city, rank, EGF rating, biography, favourite players, and playing history, plus content you publish such as game records, comments, mood annotations, and variation diagrams.
- Information collected automatically: Session details such as device type and session time for account and device management, and technical logs such as IP address and browser type recorded by infrastructure providers for security and troubleshooting.
- Purchase and order information: When you buy Stones, we process your Go Kingdom account, package, amount, currency, order and transaction identifiers, payment and delivery status, and refund, reversal, or dispute records. A third-party payment provider handles your full card number and security code; Go Kingdom does not receive or store them.
- Information we do not collect: Identity documents, precise location, or address-book contacts. Gender and date of birth entered during registration are currently used only for display preferences and are not stored in the database.
2. How we use information
We use information to provide accounts, game records, social features, and AI analysis; process Stone orders, confirm payment, deliver Stones, maintain balances and transaction records, and handle refunds or disputes; prevent fraud and abuse; send transactional messages about passwords, orders, and account security; provide support; meet accounting and legal duties; and improve the product using aggregated usage information.
We do not sell your personal information and do not use it for personalised advertising.
3. Storage and service providers
We use third-party providers for cloud hosting, databases and file storage, content delivery, transactional email, and payment processing. They process data only as needed to provide their services and are subject to contractual and applicable data-protection duties. A payment provider processes information you enter on its payment page under its own privacy policy.
If you are in the European Economic Area, your data may be transferred to Singapore and other locations outside the EEA. We rely on safeguards used by our providers, such as standard contractual clauses, where required.
4. What is public and what you control
Public game records, comments, and public profile fields such as display name, avatar, rank, country, and biography are visible to visitors and may be indexed by search engines. Drafts and game records marked private are visible only to you. Follow, follower, and favourite lists are currently visible to visitors; privacy controls for these lists are being prepared. AI analysis results are visible only to the user who started the analysis.
5. Cookies
We use only necessary cookies for sessions and language preferences. We do not use advertising or cross-site tracking cookies. Before adding analytics or tracking that requires consent, we will update this policy and obtain consent where required.
6. Retention and deletion
We keep data needed to provide the Service while your account exists. You may delete your account in Account settings, or request deletion at Gokingdom2026@gmail.com. Deletion starts a 30-day soft-deletion period during which your profile and published content are hidden and you may ask us to restore the account. After that period, profile data and the game records and comments you published are permanently deleted. Lawfully saved or shared copies, backups, and caches may take a reasonable time to clear. Order, transaction, refund, and dispute records may be retained after account deletion for accounting, tax, fraud prevention, dispute handling, or other legal obligations, then deleted or de-identified when no longer needed.
7. Your rights
You may request access to and correction of personal information, export game records as SGF, delete your account, withdraw consent where withdrawal is available, and object or complain about processing. Some data cannot be deleted immediately where it is needed for legal obligations or legal claims. EEA users also have applicable rights such as portability, restriction, and complaints to a supervisory authority. Contact Gokingdom2026@gmail.com. We normally respond within 30 days and will explain if applicable law allows or requires more time.
8. Children
Go Kingdom welcomes young Go players, but a user under 16 years old, or under a higher age required where they live, needs a guardian's consent to register. We do not knowingly collect personal information from a child who cannot validly consent and will delete it when discovered.
9. Security
We use technical and organisational measures proportionate to risk, including encryption in transit, access controls, account-security limits, and log and backup management. No online service can guarantee absolute security. If a breach requires notification, we will notify affected users and authorities as required by applicable law.
10. Changes to this policy
We will give advance notice of a material change through the Service, your registered email, or a website announcement, and obtain consent where law requires it. Previous versions are available through the contact email in this policy.