Personal Data Processing Policy
This is a translation. The Russian text at /ru/privacy is the binding one.
This Policy explains what personal data the Nardy Union website at nardyunion.com (the "Site") collects and processes, for what purposes, how the data is stored and protected, and what rights the user has. The Policy is drawn up in accordance with Federal Law No. 152-FZ of 27 July 2006 "On Personal Data". Please read it before you start using the Site.
1. Operator
The operator of personal data is the owner of the Site, a private individual (the "Operator"). An address for questions and requests will be given in this section.
2. What data is collected
When the Site is used, the Operator may collect and process, for example:
- data the user provides: email address, display name, username, country, playing level, password, chat messages, problem reports and complaints;
- game data: games, moves, results, rating and game history;
- data collected automatically: IP address, browser identifier, information about pages visited and actions on the Site, including through the Yandex Metrica service, the Yandex Advertising Network and cookies.
Playing the computer and playing a friend by link is possible without registration. A guest's games against the computer are stored only in their browser.
3. Purposes of processing
- registration and sign-in to the Site, and restoring access;
- running games, calculating ratings, keeping the profile, game history and the players' table;
- handling problem reports and complaints;
- keeping the Site secure and preventing abuse;
- analysing traffic and improving how the Site works;
- showing advertising on game pages.
4. Legal grounds
The Operator processes personal data in order to provide the user with the service the user is using (clause 5, part 1, article 6 of 152-FZ), and on the basis of the user's consent (clause 1, part 1, article 6 of 152-FZ).
5. Actions with data
Processing includes collection, recording, systematisation, accumulation, storage, clarification, retrieval, use, transfer in the cases listed in section 7, blocking, deletion and destruction. Processing is carried out by automated means.
6. Storage
Personal data is stored on servers in the Russian Federation. No cross-border transfer takes place.
Account data and games are stored for as long as the account exists. Other data is stored no longer than the purposes of processing require, and is then deleted.
When an account is deleted, the Operator deletes the email address and password, and the profile is no longer shown on the Site. In other players' game histories the user remains as "Deleted player".
7. Transfer of data
The Operator does not sell personal data and does not transfer it to third parties, except in the following cases:
- to service providers that keep the Site running: hosting, data storage, sending emails, traffic analysis and showing advertising (Yandex.Cloud LLC, YANDEX LLC);
- when required by law.
Other users can see only the public profile data: display name, username, country, rating and game history.
8. Cookies
The Site uses cookies and browser storage to keep the user signed in, to save settings and a guest's games, and for Yandex Metrica to work. On game pages the Yandex Advertising Network may set its own cookies in order to show advertising. Cookies can be deleted or blocked in the browser settings, but then some functions of the Site, such as signing in, may not work.
9. User rights
The user has the right to:
- receive information about the processing of their personal data;
- demand that it be clarified, blocked or destroyed if it is incomplete, out of date, inaccurate, unlawfully obtained or not needed for the stated purpose;
- withdraw consent to processing;
- appeal against the Operator's actions to Roskomnadzor or in court.
The user can delete their account themselves in the Settings section. Please send other requests to the address in section 1. The Operator answers them within the time limits set by law.
10. Data protection
The Operator takes legal, organisational and technical measures to protect personal data from unlawful access, alteration, disclosure and destruction. In particular, data is transferred over a secure connection, and passwords are stored as hashes.
11. Children
The Site is not intended for children under 14. If a child has registered without their parents' consent, please tell the Operator, and the child's data will be deleted.
12. Changes
The Operator may change this Policy. The current version is always published on this page, and its date is given at the top.