>_ PRIVACY POLICY

1. Information We Collect

We collect only what is needed to run the game and your account:

• Account: your username, an optional email address, and (for password accounts) a securely hashed password — we never store your password in plain text.
• Profile: your avatar image URL and chosen in-game avatar.
• Sign-in identity: if you use GitHub or Discord, the provider gives us your provider account ID, username, avatar, and email address. We never receive your GitHub or Discord password.
• Gameplay: your skill rating (MMR), games played, wins, and per-match statistics (hero, kills/deaths/assists, scrip, damage, healing, items, level) used for matchmaking, your profile, and leaderboards.
• Technical: a single session cookie that keeps you signed in.
• Security: your IP address is processed transiently to rate-limit abuse and brute-force attempts. It is not stored in our database or shared.

2. How We Use Your Information

We use your information to:

• create and secure your account and keep you signed in
• run matches, matchmaking, leaderboards, replays, and your public profile
• send essential account email — address verification, password resets, and security alerts (we do not send marketing email)
• maintain and improve the game and investigate abuse or cheating

3. Signing In With GitHub or Discord

When you choose "Continue with GitHub" or "Continue with Discord", you are redirected to that provider to authorize Termina. We request your basic profile (account ID, username, avatar) and email. We do not receive your password and cannot act on your behalf beyond reading that profile.

Your use of those providers is governed by their own policies — see the GitHub Privacy Statement and the Discord Privacy Policy.

4. Cookies

Termina uses a single, essential cookie: an encrypted session cookie that keeps you logged in. We do not use third-party advertising or analytics tracking cookies.

5. Where Your Data Is Stored

Termina runs on third-party infrastructure that processes data on our behalf. These providers store data in the United States:

• Neon — PostgreSQL database (accounts, matches, statistics)
• Upstash — Redis (live game state and matchmaking, transient)
• DigitalOcean — the game/API server
• Vercel — frontend hosting and content delivery
• Resend — delivery of transactional email (verification, password reset, security alerts)

6. How We Share Information

We do not sell your personal information or share it with advertisers. Some information is public by design: your username, avatar, and gameplay statistics are visible to other players via profiles, match history, and leaderboards. We may disclose information if required by law or to protect the service and its players.

7. Data Retention & Your Choices

We keep your account and gameplay data while your account exists. You can request access to, correction of, or deletion of your personal data at any time by contacting us (below). Deleting your account removes your personal account data; anonymized or aggregate statistics may be retained.

8. Children

Termina is not directed to children under 13 (or the minimum age required in your country, or by GitHub/Discord). We do not knowingly collect data from children under that age; if you believe a child has provided us data, contact us and we will remove it.

9. Changes & Contact

We may update this policy as the game evolves; material changes are reflected in the "Last updated" date above.

For any privacy request or question, email support@terminamoba.com, or open an issue at github.com/abdul-hamid-achik/termina.