Privacy Policy

1. Introduction

Local Play ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

By using Local Play, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information You Provide

When you register and use our Service, you may provide:

• Account Information: Name, email address, username, password, date of birth
• Profile Information: Profile picture, bio, skill level, preferred positions, location (city/state)
• Game Data: Games created, games joined, game statistics, ratings, and reviews
• Communication Data: Messages, posts, and comments you submit
• Payment Information: Processed by Stripe (we do not store full payment details)

2.2 Information We Collect Automatically

When you use our Service, we automatically collect:

• Device Information: IP address, browser type, device type, operating system
• Usage Data: Pages viewed, features used, time spent, clicks, actions taken
• Location Data: Approximate location based on IP address (not precise GPS unless you grant permission)
• Cookies and Tracking: See Section 5 below

2.3 Information from Third Parties

If you sign in using OAuth (Google, Apple), we receive:

• Your name and email address
• Profile picture (if available)
• Account ID from the provider

3. How We Use Your Information

We use your information to:

• Provide the Service: Create and manage your account, facilitate game organization, process stats
• Improve the Service: Analyze usage patterns, develop new features, fix bugs
• Communicate with You: Send notifications about games, updates, and important account information
• Safety and Security: Detect fraud, abuse, and security threats; enforce our Terms of Service
• Personalization: Recommend games based on your skill level, location, and preferences
• Legal Compliance: Comply with legal obligations and respond to lawful requests
• Analytics: Understand how users interact with our platform (aggregated data)

4. How We Share Your Information

We do NOT sell your personal information. We may share your information in the following circumstances:

4.1 With Other Users

• Your public profile (username, profile picture, bio, skill level) is visible to other users
• Your game participation and stats may be visible to other game participants
• Your location (city/state level) is visible to help others find nearby games
• You control privacy settings for your profile visibility

4.2 With Service Providers

We share data with third-party service providers who help us operate the Service:

• Neon/PostgreSQL: Database hosting
• Upstash Redis: Caching and rate limiting
• AWS S3: File storage (profile pictures)
• Google Maps: Venue discovery and mapping
• Stripe: Payment processing
• Resend: Email delivery
• Sentry: Error tracking and monitoring

These providers are contractually obligated to protect your data and use it only for the services they provide to us.

4.3 For Legal Reasons

We may disclose your information if required by law or in response to:

• Court orders, subpoenas, or legal process
• Government or law enforcement requests
• Protection of our rights, property, or safety, or that of our users
• Investigation of fraud or security issues

4.4 Business Transfers

If Local Play is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

5. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Essential Cookies: Required for authentication, security, and core functionality
• Preference Cookies: Remember your settings (theme, language)
• Analytics Cookies: Understand how you use the Service (Google Analytics)
• Performance Cookies: Monitor service performance and detect issues

You can control cookies through your browser settings, but disabling essential cookies may affect functionality.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. We may retain certain data for longer periods for:

• Legal compliance (tax records, transaction history)
• Dispute resolution
• Security and fraud prevention
• Aggregated, anonymized analytics

When you delete your account, we will delete or anonymize your personal information, except where retention is required by law.

7. Your Rights and Choices

Depending on your location, you may have the following rights:

7.1 Access and Portability

You can access and download your personal data through your account settings.

7.2 Correction

You can update your profile information at any time through your account settings.

7.3 Deletion

You can request account deletion through your account settings. Note that some information may be retained as described in Section 6.

7.4 Marketing Communications

You can opt out of marketing emails using the unsubscribe link in emails or through notification settings. We will still send transactional emails (game notifications, account security).

7.5 Do Not Track

We do not currently respond to "Do Not Track" browser signals, but you can control tracking through your cookie settings and privacy preferences.

7.6 GDPR Rights (EU Users)

If you are in the European Economic Area, you have additional rights under GDPR:

• Right to object to processing
• Right to restrict processing
• Right to data portability
• Right to withdraw consent
• Right to lodge a complaint with a supervisory authority

7.7 CCPA Rights (California Users)

California residents have the right to:

• Know what personal information we collect and how it's used
• Request deletion of personal information
• Opt-out of sale of personal information (we do not sell your data)
• Non-discrimination for exercising these rights

To exercise any of these rights, contact us at support@local-play.com

8. Children's Privacy (COPPA Compliance)

Our Service is not intended for children under 16. We require users to be at least 16 years old. If you are under 18, you must have parental consent to use the Service.

We do not knowingly collect personal information from children under 16. If we learn we have collected such information, we will delete it immediately. If you believe we have collected information from a child under 16, please contact us.

9. Data Security

We implement industry-standard security measures to protect your information, including:

• Encryption of data in transit (HTTPS/TLS) and at rest
• Secure password hashing (bcrypt)
• JWT tokens with short expiration times
• Rate limiting to prevent abuse
• Regular security audits and monitoring
• Access controls and authentication

However, no method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own. These countries may have different data protection laws. By using our Service, you consent to the transfer of your information to the United States and other countries where we operate.

We ensure appropriate safeguards are in place for international transfers, including standard contractual clauses approved by the European Commission.

11. Third-Party Links

Our Service may contain links to third-party websites (e.g., Google Maps, payment processors). We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by:

• Posting the new policy on this page with an updated "Last Updated" date
• Sending an email notification (for material changes)
• Displaying a prominent notice on the Service

Continued use of the Service after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

Email: support@local-play.com

Subject Line: Privacy Inquiry

We will respond to your request within 30 days.