Trap Chess™ Privacy Policy

Last updated: July 5, 2026

Overview

This Privacy Policy explains how XPLAYCE LLC, a United States-based company ("XPlayce," "we," "us," or "our"), collects, uses, shares, and protects information when you use the Trap Chess™ mobile app (the "App") and our websites, including TrapChess.com and any pages it redirects to for board game reservations (the "Website"). The App and Website together are the "Services".

The Services are currently provided in English only, and we are not currently offering localized versions. Because we are located in the United States, information we collect may be processed and stored in the United States and other countries where we or our Service Providers operate.

For users in Italy, the European Union, or the European Economic Area, XPLAYCE LLC is the controller of Personal Information processed through the Services, unless a third-party service states otherwise in its own privacy policy.

1) Definitions

• "You" means the person using the Services.
• "Gameplay Data" means information generated during gameplay, such as play codes, board state, traps/landmine positions, timers, timestamps, move history/logs, game status, and related gameplay events.
• "Device & Diagnostics Data" means information about your device and app usage, such as device/platform type, operating system, app version, crash or error information, and limited logs used to troubleshoot issues (including push notification delivery failures).
• "Notification Data" means information needed to send push notifications, including an Expo push token and related delivery/failure logs.
• "Reservation Data" means information you provide through the Website related to reserving the Trap Chess™ board game or joining related updates (for example, contact details, email signup details, and deposit/purchase details).
• "Marketing Communications" means newsletters, product updates, and announcements we may send about Trap Chess™ and related products.
• "Service Providers" means companies that process information on our behalf to operate the Services, such as hosting/database providers, push notification delivery providers, website analytics providers, email/marketing providers, payment/reservation providers, and app store providers.
• "Personal Information" means information that identifies, relates to, describes, or could reasonably be linked to you, as defined by applicable law. In the App, we generally do not collect your name or email unless you contact us.
• "De-identified" or "Aggregated" means information processed so it cannot reasonably be used to identify you (or is combined across many users).

2) Information we collect

A. Information you provide

• App: The App typically does not require your name, email address, or a traditional account. If you contact us (for example, by email or through a community/support channel), we collect the information you include in that message.
• Website / presale pages: If you join the email list, reserve the board game, or place a deposit, you may provide Reservation Data (such as email address and any other details requested in the signup, checkout, or reservation flow).

B. Information collected automatically

• App: Gameplay Data used to operate matches, sync game state, restore gameplay, and troubleshoot issues, including play codes, board state, landmine/trap positions, timers, timestamps, move history/logs, game status, and a random guest identifier used for gameplay.
• App: Notification Data (if you enable notifications), including an Expo push token and delivery/failure details used for notification delivery and reliability debugging.
• App: Device & Diagnostics Data such as platform/device type, operating system, app version, and limited troubleshooting logs.
• App and Website: Our Service Providers may receive standard network metadata, such as IP address, to deliver, secure, operate, and troubleshoot the Services.
• Website: Standard web data such as IP address, browser type, device identifiers, pages visited, referral/UTM information, and interactions with links or forms.
• Website: Cookies, pixels, tags, SDKs, and similar technologies may be used as described below.

C. Sensitive information

The App is designed for gameplay and does not require you to provide government identification numbers, precise geolocation, contacts, photos, health information, or financial account information as part of normal gameplay. Payment or reservation information, if any, is handled through Website or third-party checkout/reservation flows rather than through ordinary App gameplay.

D. Summary of key data categories, purposes, and retention

3) How we use information

We use the information we collect to:

• provide and operate the Services, including running matches, syncing game state, restoring game sessions, and supporting cross-device gameplay;
• send notifications (if you enable them), such as turn notifications;
• secure the Services, prevent abuse, investigate suspicious activity, and enforce our Terms;
• debug and improve reliability, including investigating crashes, bugs, match sync issues, and push notification failures;
• provide support and respond to your requests;
• send Marketing Communications when you sign up or otherwise provide your email through the Website (you can opt out at any time);
• analyze gameplay patterns, improve game balance, and plan future features;
• develop, train, test, and improve future computer opponent, AI gameplay, and similar product features using only De-identified or Aggregated information unless we provide additional notice or obtain consent where required; and
• comply with legal obligations and protect rights, safety, and property.

Legal bases for processing

Where applicable law requires us to identify a legal basis for processing Personal Information, including for users in Italy, the European Union, the European Economic Area, the United Kingdom, Indonesia, or other locations where a legal basis is required, our legal bases may include:

• Providing the Services / performing your request: operating matches, syncing game state, restoring sessions, processing reservations or deposits, and responding to support requests.
• Consent: sending Marketing Communications, using non-essential analytics cookies or similar technologies, enabling push notifications through your device settings, and other processing where consent is required.
• Legitimate interests and service security: debugging, fraud/abuse prevention, security monitoring, service improvement, and protecting our rights, users, and the Services, where permitted by law.
• Legal obligations: maintaining tax, accounting, transaction, compliance, and legal records; responding to lawful requests; and handling disputes.
• Other lawful bases: any other basis available under applicable law, including for international transfers where required.

4) De-identified and aggregated information

We may create and use De-identified or Aggregated information from Gameplay Data and Device & Diagnostics Data for purposes such as:

• improving game balance and reliability;
• understanding usage trends (for example, common trap activations);
• creating community content or marketing materials that describe high-level patterns (for example, "most common trap of the week");
• planning and improving future features; and
• developing, training, testing, and improving future computer opponents, AI gameplay, and similar gameplay features.

We do not attempt to re-identify De-identified or Aggregated information except as permitted by law, such as to test whether our de-identification process is effective.

5) Cookies and similar technologies

App

• The App is a native application and does not use browser cookies.
• The App stores certain information locally on your device (see Section 9).

Website

• The Website may use cookies, pixels, tags, SDKs, and similar technologies for basic site functionality, analytics, and/or measuring marketing performance (for example, whether a link, QR code, or ad led to a reservation or email signup).
• Our Website uses analytics tools, including Google tag / Google Analytics, to understand site traffic and interactions. We do not intentionally load non-essential Google Analytics tracking on the Website until you accept analytics cookies through the Website cookie controls.
• You can use the Website cookie controls to accept analytics cookies or reject non-essential cookies. You can also control cookies through your browser settings and may be able to limit ad tracking through platform controls.
• Our Website may use email list and reservation tools, including embedded signup or checkout/reservation forms, to process signups, reservations, deposits, and related communications.
• If we use third-party analytics, advertising, email, or reservation tools, those providers may collect information through these technologies under their own privacy policies.

6) How we share information

We share information in the following situations:

A. Service Providers

• We share information with Service Providers that help us operate the Services, such as hosting/database providers, push notification delivery providers, app store providers, website analytics providers, email/marketing providers, payment/reservation providers, and technical support tools.
• Key Service Providers may include, depending on the feature used: Supabase or similar backend/database providers; Expo or similar push-notification providers; Google Analytics for Website analytics after consent; Mailchimp or similar email-list providers; Apple App Store and Google Play; Netlify or similar Website hosting providers; and the payment, checkout, or reservation provider identified in the reservation/deposit flow.
• Service Providers are permitted to process information to provide services to us and as otherwise permitted by law.

B. App stores and platform providers

If you download the App from Apple App Store or Google Play, those platforms may process information related to your download, device, account, crash reports, and app usage under their own policies and settings.

C. Legal, safety, and business transfers

We may share information to comply with law or legal process; to protect rights, safety, and property (ours, yours, or others); to investigate fraud, security, or abuse; or in connection with a merger, acquisition, financing, reorganization, or sale/transfer of assets.

D. Advertising platforms (general)

We may market Trap Chess™ on third-party platforms (for example, social media). Those platforms may collect information directly from you or your device/browser. Your use of those platforms is governed by their own policies.

7) We do not sell personal information

We do not sell Personal Information for money.

Some privacy laws define "sale," "sharing," or targeted advertising broadly (including certain disclosures through cookies, pixels, or tags). If we use third-party cookies, pixels, tags, or similar technologies on the Website, you can limit this through cookie controls, browser/device settings, platform controls, and by contacting us for assistance.

8) International transfers

XPLAYCE LLC is located in the United States. If you use the Services from outside the United States, including Italy, the European Union, the European Economic Area, Canada, India, Indonesia, or other countries, your information may be transferred to, stored in, or processed in the United States and other countries where we or our Service Providers operate. These countries may have privacy laws that differ from those in your location. We use reasonable measures designed to protect information as described in this Privacy Policy.

Where required by applicable law, we use contractual, organizational, and technical safeguards for international transfers, including service-provider agreements and transfer assessments. For Personal Information transferred from Italy, the European Union, or the European Economic Area to the United States or other countries, we use safeguards where required by applicable law, such as service-provider agreements, contractual safeguards, transfer assessments, and other measures designed to protect Personal Information. For Quebec Personal Information, we assess cross-border transfers as required by Quebec law. For Indonesia Personal Information, we use an applicable transfer basis such as adequate protection, binding safeguards, consent where required, or another lawful basis available under applicable law.

9) Where information is stored

• App local storage: The App stores certain data on your device (for example, join codes, game state, guest identifiers, seat/session tokens, preferences, and notification tokens). This data remains on your device until you uninstall the App, clear the App's storage, or the App replaces/deletes it during normal use.
• Server storage: Gameplay Data, Notification Data, and some Device & Diagnostics Data may be stored in our backend systems and Service Provider systems.
• Website and reservation systems: Reservation Data, email signup information, analytics data, and related support records may be stored by us and/or our Website, email, analytics, payment, reservation, and hosting providers.

10) Data retention

We retain information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to operate the Services, provide support, improve reliability, develop features, comply with legal obligations, resolve disputes, enforce agreements, and protect the Services.

• Local device data: Stored on your device until you remove it by uninstalling the App, clearing the App's data, or the App replaces/deletes it during normal use.
• Gameplay Data: Retained as needed to operate matches, restore sessions, troubleshoot issues, prevent abuse, improve gameplay, and plan future features. When practical, we may delete, aggregate, or de-identify older Gameplay Data. AI/computer-opponent training uses De-identified or Aggregated information unless we provide additional notice or obtain consent where required.
• Notification Data and Device & Diagnostics Data: Retained as needed for notification delivery, reliability debugging, security, and support, then deleted, aggregated, or de-identified when no longer reasonably necessary.
• De-identified or Aggregated information: May be retained long-term, including for gameplay analysis, product improvement, and developing, training, testing, and improving future computer opponents or similar features.
• Reservation Data: Retained as needed to operate the presale/reservation flow, provide support, maintain business records, process refunds or fulfillment issues, comply with legal/tax/accounting obligations, and resolve disputes.
• Support and legal records: Retained as needed to respond to you, document our response, and protect legal rights.

Because the App does not use traditional accounts, our ability to locate and delete App-related records may depend on information you provide, such as play codes, approximate dates/times, device type, app version, and other details.

11) Your choices and privacy rights

Depending on where you live, including the United States, Italy, the European Union, the European Economic Area, Canada, India, Indonesia, or other locations, you may have rights to request access to certain Personal Information we hold about you; correction of inaccurate Personal Information; deletion or erasure of Personal Information; a copy of certain information; withdrawal of consent where processing is based on consent; information about how we use and disclose Personal Information; or other rights provided by applicable law.

Important practical note (App): The App does not use traditional accounts. The best way for us to locate App-related records is typically a play code and, if available, approximate dates/time, device type, and app version. If we cannot reasonably locate the information with the details provided, we may ask for additional information or be unable to fulfill the request.

If you are located in Italy, the European Union, or the European Economic Area, you may also have the right to object to certain processing, restrict processing, receive a portable copy of certain Personal Information, withdraw consent where processing is based on consent, and lodge a complaint with your local data protection authority.

Marketing Communications: You can opt out of Marketing Communications by using an unsubscribe link (if provided) or by emailing hello@gameofchancechess.com.

To make a privacy request, email hello@gameofchancechess.com with subject "Privacy Request." We may need to verify your request before responding. We will respond within the time required by applicable law and will let you know if we need additional information or time where required or permitted.

12) Children and age requirements

The Services are not directed to children under 13, and we do not knowingly collect Personal Information from children under 13. If you believe a child under 13 has provided Personal Information, contact hello@gameofchancechess.com and we will take appropriate steps.

At this time, the Services are not intended for users under 18 in India, and we do not offer a parent/guardian consent process for India users. If you access or use the Services from India, you should be at least 18 years old. We do not knowingly process Personal Information of users under 18 in India. If you are under the age required by your country, region, app store rules, or applicable law, you should not use the Services without any required parent/guardian involvement or consent.

13) Security

We use reasonable safeguards and rely on reputable Service Providers, but no system is 100% secure. Please use the Services responsibly and protect your device.

If we become aware of a personal data incident, we will assess it and provide notices to users, regulators, Service Providers, or other parties when required by applicable law.

14) Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will update the "Last updated" date and post the revised policy on the Website. Continued use of the Services after the update means you acknowledge the revised policy.

15) Contact us

XPLAYCE LLC is located in the United States.

Privacy Officer / Person Responsible for Privacy: Jason Young

Email: hello@gameofchancechess.com

For Quebec residents, Jason Young is the person responsible for the protection of Personal Information. For users in Italy, the European Union, or the European Economic Area, XPLAYCE LLC is the controller contact for privacy questions and requests. For India users, this is the person authorized to answer questions about processing Personal Information. For Indonesia users, this is the contact for personal data requests and related privacy questions.