Privacy Policy

Effective:

Duelto is a small platform for one-on-one games. This policy says exactly what we collect, why, and who else can see it. It describes what the software actually does, not what we might do one day.

What we collect

When you create an account we store:

  • Your email address. For a player under 13 this is a parent or guardian’s address, not the child’s.
  • Your username, which is public — other players see it, and it appears on your profile page.
  • Your avatar. Either one of our preset drawings, or a photo you upload. Accounts belonging to under-13s cannot upload a photo.
  • Your birth year. We ask once, to apply the right protections. We do not ask for your full date of birth.
  • Optionally, your first and last name. These are private by default and are shown publicly only if you turn that on yourself.
  • Your games: results, ratings, moves, and the opponents you played.
  • Your language preference.

What we do not collect

There is no chat and no messaging on Duelto, so we hold no conversations between players. We do not ask for your address, phone number, or any payment details, because nothing on the platform costs money. We do not buy data about you from anyone.

Cookies and what is stored in your browser

Duelto itself sets no cookies. It keeps three things in your browser’s local storage: your sign-in token, your chosen language, and your answer to the analytics question below. These stay on your device.

If you accept analytics, Google Analytics sets its own cookie. If you decline, or never answer, it is never loaded and no such cookie exists. The site works identically either way.

Analytics

We use Google Analytics to see how many people visit and which pages they use. We ask before it loads, and we turn off its advertising features: no Google Signals, no ad personalisation, and IP addresses are anonymised. We do not run advertising trackers of any other kind.

Analytics never runs for an account belonging to someone under 13, whatever answer was given to the consent question.

Who else sees your data

We use these services to run Duelto. We do not sell your data to anyone, and there is nobody else in the list.

  • Supabase — the database and sign-in system. Your data is stored in the European Union (Sweden).
  • Cloudflare — serves the site and the API.
  • Resend — sends the account emails, such as confirmation and password resets.
  • Google Fonts — the page loads its typeface from Google, which means Google sees your IP address when the page opens.
  • Google Analytics — only if you accepted it.

Players under 13

Duelto is open from age 8. If you are under 13 you sign up with a parent or guardian’s email address, and the account only becomes active when they open the confirmation link we send them. That click is their consent.

On an account for someone under 13 we switch off the things that would publish a child to the open web:

  • No photo uploads — only our preset avatars.
  • No real name, and no option to make one public.
  • No public profile page. Someone opening duelto.com with that username sees nothing.
  • No analytics.

Parents and guardians

You can ask us what we hold about your child, ask us to correct it, or ask us to delete the account entirely. Write to [email protected] from the address you used to confirm the account. If you would rather not wait, you can sign in to the account and delete it yourself from Settings — it is immediate and permanent.

Deleting your account

Settings → Account → Delete account removes your account, your ratings, your rating history, your notifications, your private details, and any photo you uploaded. It happens straight away and cannot be undone.

Games you played against other people are kept, with you removed from them. Deleting them outright would erase your opponents’ history as well, which is not ours to take.

How long we keep things

Your account data is kept while the account exists. When you delete the account it goes, as described above. We keep no separate backup archive of deleted accounts.

Your rights

You can see and change most of your data in Settings. For anything else — a copy of what we hold, a correction, or a question about this policy — write to [email protected]. If you are in the EU or UK, you also have the right to complain to your national data protection authority.

Changes to this policy

If we change what we collect or who we share it with, we will update this page and change the date at the top. Material changes will be announced in the app.