Privacy Policy
Effective: 24 April 2026 · Version 1.0
1. Introduction
TzDraft ("we", "us", "our") operates the TzDraft game platform, accessible at www.tzdraft.co.tz and via the TzDraft mobile application. This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you use our Platform.
By registering an account or using TzDraft, you agree to the collection and use of information as described in this Policy.
Controller: TzDraft, Mkuranga, Pwani, Tanzania. Contact: support@tzdraft.co.tz
2. Who This Policy Applies To
This Policy applies to registered users, mobile application users, and platform visitors.
TzDraft is not intended for children under 13 years of age. If you are between 13 and 18, you should review this policy with a parent or guardian.
3. Information We Collect
3.1 Information You Provide Directly:
| Username | Account identification, leaderboards (publicly visible) |
| Display name | Profile display |
| Email address | Account verification, notifications, password reset |
| Password | Authentication (hashed, never stored in plain text) |
| Country / Region | Matchmaking, regional leaderboards, analytics |
| Profile avatar (optional) | Profile display |
3.2 Information Collected Automatically:
| IP address | Security, fraud detection, rate limiting |
| Device type and OS | App compatibility, analytics |
| Session tokens | Authentication state |
| Game moves and timestamps | Game storage, replay, dispute resolution |
| Game results | ELO rating calculation, leaderboards |
| AI level selections | Personalization, analytics |
4. How We Use Your Information
| Providing and operating the Platform | Contract performance |
| Account creation and authentication | Contract performance |
| Calculating ELO ratings and leaderboards | Contract performance |
| Storing and displaying game replays | Contract performance |
| Detecting cheating, fraud, and abuse | Legitimate interest |
| Security monitoring and incident response | Legitimate interest |
| Improving matchmaking and gameplay | Legitimate interest |
| Promotional emails (opt-in only) | Consent |
| Targeted advertisements (opt-in only) | Consent |
| Compliance with legal obligations | Legal obligation |
5. Public Information
The following information is publicly visible on TzDraft by default:
- Your username and display name
- Your ELO rating and rank on leaderboards
- Your win/loss/draw record
- Your game replays (move history)
- Your country/region flag on leaderboards
6. Data Sharing and Third Parties
We do not sell your personal data. We share data with:
| Hetzner Online GmbH | Cloud VPS hosting, database storage (Germany, EU) |
| Cloudflare Inc. (R2) | Media asset storage (avatars, ad creatives) |
| Redis (self-hosted) | Session and leaderboard cache |
| Advertising Partners | Limited identifiers (consent only) |
| Legal Authorities | When required by law or court order |
7. Data Retention
| Active account data | Until account deletion |
| Game move history | 3 years from game date, then anonymized |
| Login / security logs | 12 months |
| Deleted account personal data | Anonymized within 30 days |
| Anonymized analytics data | Indefinitely |
8. Your Rights
| Access — obtain a copy of your data | Settings → Privacy → Download My Data |
| Deletion — delete your account | Settings → Account → Delete Account |
| Correction — update inaccurate data | Settings → Profile |
| Withdraw consent (marketing/ads) | Settings → Privacy |
| Portability or Object | support@tzdraft.co.tz |
We respond to all requests within 30 days.
9. Data Security
- All data in transit is encrypted via HTTPS / WSS (TLS 1.2+)
- Passwords are stored using bcrypt hashing with salt
- Database access is restricted to the application server only
- Sessions use signed, short-lived JWT tokens
- Data breach notification within 72 hours of discovery
10. International Data Transfers
TzDraft is operated from Tanzania. Our hosting is located in the EU. By using the Platform, you consent to the transfer and processing of your data in these locations.
11. Children's Privacy
TzDraft does not knowingly collect personal information from children under 13. If you believe your child has provided us data, contact support@tzdraft.co.tz and we will delete it within 14 days.
12. Changes to This Policy
We may update this policy. Material changes will be announced in-app or via email. Continued use after changes constitutes acceptance.
13. Contact
support@tzdraft.co.tz · TzDraft, Mkuranga, Pwani, Tanzania