Version 1.0 — March 2026

SHESH CLUB — PRIVACY POLICY

English Version

1. INTRODUCTION

Shesh Club ("we", "us", "our") operates a social gaming platform that allows users to play backgammon and other board games remotely with friends and club members. We do not facilitate, encourage, or support real-money gambling in any form. All in-app chips are virtual currency used solely to participate in games within private clubs. We provide infrastructure for social play only — not a platform for financial wagering of any kind.

2. DATA WE COLLECT

We collect only what is strictly necessary to operate the service:

• Account information: email address, username, avatar selection
• Authentication tokens: Google or Apple identity tokens when you use social login
• Device push token: to send you game notifications (optional, can be disabled)
• Gameplay statistics: wins, losses, game history within your clubs
• Crash and error reports: technical diagnostic data via Sentry, which may include device type, operating system version, app version, and anonymized stack traces
• Server log data: IP address, browser type, pages visited, and timestamps — retained for 30 days for security purposes only

We do NOT collect: real name, phone number, precise location, payment card details, bank information, or any financial information.

HEALTH & SENSOR DATA

Shesh Club does not collect, store, transmit, or share any health or fitness data. Previous versions of the app used the device accelerometer sensor solely to detect shake gestures for dice rolling animations — a gameplay feature with no health purpose. No health metrics, fitness data, activity data, or biometric data of any kind were ever recorded or transmitted. As of version 18 of the app, accelerometer access has been completely removed. We do not access Android Health Connect, Google Fit, Apple Health, or any health data platform.

3. VIRTUAL CHIPS — NOT REAL MONEY

Shesh Club uses a virtual chip system. Virtual chips:

• Have no monetary value
• Cannot be withdrawn as cash
• Cannot be exchanged for real money through our platform
• Cannot be transferred outside the app

Club owners manage chip distribution among their members for the purpose of organized social play. We explicitly prohibit the use of our platform to facilitate real-money gambling. Users found violating this policy will have their accounts permanently terminated and may be reported to relevant authorities.

4. HOW WE USE YOUR DATA

• To create and manage your account
• To enable multiplayer gameplay and club management
• To send push notifications about your games
• To send transactional emails (password reset, account verification)
• To improve the app through diagnostic crash analytics
• To maintain security and prevent fraud
• To respond to support requests

5. DATA SHARING

We do not sell your personal data. We share data only with trusted infrastructure partners:

• Supabase — database hosting (US/EU)
• Railway — server hosting (US)
• Sentry — crash diagnostics (US)
• Google — OAuth login flow only
• Apple — OAuth login flow only
• Resend — transactional emails (password reset only)

None of these partners may use your data for their own marketing or advertising purposes.

6. INTERNATIONAL DATA TRANSFERS

Your data may be stored and processed in the United States and European Union through our infrastructure partners. These transfers are conducted under appropriate safeguards in compliance with applicable data protection laws including GDPR and the Israeli Privacy Protection Law.

7. PUSH NOTIFICATIONS

Push notifications are optional. To disable them:

• iOS: Settings → Notifications → Shesh Club → toggle off
• Android: Settings → Apps → Shesh Club → Notifications → toggle off

Disabling notifications does not affect your ability to use the app.

8. DATA RETENTION & DELETION

You may delete your account at any time from Settings → Delete Account. This permanently and irreversibly removes your profile, game history, club memberships, and all personal data from our systems within 30 days. Server logs are automatically purged after 30 days. This action cannot be undone.

9. SECURITY

• All data is transmitted over HTTPS and WSS encrypted connections
• Passwords are hashed using industry-standard algorithms and never stored in plain text
• Authentication tokens are stored securely on your device
• We conduct regular security reviews of our infrastructure

10. CHILDREN'S PRIVACY

Shesh Club is intended exclusively for users aged 18 and older. We do not knowingly collect personal data from anyone under the age of 18. If you believe a minor has registered an account, please contact us immediately at privacy@sheshclub.uk and we will delete the account promptly.

11. YOUR RIGHTS

Under GDPR and Israel's Privacy Protection Law (חוק הגנת הפרטיות, תשמ"א-1981), you have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your data (via in-app account deletion)
• Object to processing
• Data portability
• Lodge a complaint with your local data protection authority

To exercise any of these rights, contact: privacy@sheshclub.uk

12. GOVERNING LAW

This Privacy Policy is governed by the laws of the State of Israel. Any disputes arising from this policy shall be resolved in the competent courts of Tel Aviv, Israel.

13. POLICY UPDATES

We will notify users of any material changes to this policy via in-app notification and email at least 14 days before the changes take effect. Continued use of the app after that date constitutes acceptance of the updated policy.

14. CONTACT & DATA CONTROLLER

Shesh Club
Email: privacy@sheshclub.uk
Website: https://sheshclub.uk

For all privacy-related requests, complaints, or questions, contact us at privacy@sheshclub.uk and we will respond within 30 days.