Hand Clash

1. Introduction

Welcome to Hand Clash ("Company", "we", "our", "us"). We respect your privacy and are committed to protecting your personal data. This Privacy Policy describes the types of information we may collect from you or that you may provide when you visit the website handclash.com (the "Website") and our practices for collecting, using, maintaining, protecting, and disclosing that information.

Please read this policy carefully to understand our policies and practices regarding your information and how we will treat it. If you do not agree with our policies and practices, your choice is not to use our Website. By accessing or using this Website, you agree to this Privacy Policy.

2. Information We Collect About You and How We Collect It

We collect several types of information from and about users of our Website, including:

• Personal Information: By which you may be personally identified, such as name, email address, or any other identifier by which you may be contacted online or offline. This is primarily collected during account registration via third-party authentication providers (e.g., Google OAuth via Firebase).
• Biometric and Visual Data: As a core functionality of the Hand Clash competitive matching service, our application requires access to your device's camera. We capture ephemeral image frames (snapshots) of your hand gestures during active gameplay.
• Technical and Usage Data: About your internet connection, the equipment you use to access our Website, IP addresses, and usage details.

3. Camera Usage and Artificial Intelligence Processing

To determine the outcome of a match, our Website requests explicit permission to access your device's camera.

• Real-Time Processing: When a match reaches the final countdown, the Website captures a single image frame and transmits it securely via WebSockets to our proprietary machine vision backend.
• No Permanent Storage of Visual Data: The image frames transmitted to our servers are processed instantaneously in volatile memory (VRAM) by our artificial intelligence models solely to classify the gesture (Rock, Paper, or Scissors). Once the classification is complete and the match result is broadcasted, the image frame is immediately discarded and overwritten. We do not store, archive, or use your visual data to train future models without explicit secondary consent.

4. WebRTC and Peer-to-Peer (P2P) Connections

To provide real-time video streaming between opponents, our Website utilizes WebRTC (Web Real-Time Communication) technology.

• IP Address Visibility: By the inherent technical nature of peer-to-peer WebRTC connections, your public IP address may be exposed to the opponent you are matched with in order to establish the video stream. If a direct P2P connection cannot be established, traffic is routed securely through our STUN/TURN servers (hosted via IONOS).

By participating in a match, you acknowledge and consent to the transmission and potential exposure of your IP address required to facilitate the WebRTC protocol.

5. Third-Party Services and Infrastructure

We utilize third-party service providers to facilitate our Service, provide the Service on our behalf, perform Service-related operations, or assist us in analyzing how our Service is used. These third parties have access to your Personal Data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.

• Google Firebase: Used for website hosting, user authentication, and secure routing.
• Cloudflare: Used for DNS management, Content Delivery Network (CDN) acceleration, and secure tunneling (Cloudflare Tunnels) to protect our backend infrastructure.
• Payment Processors: If applicable, entry fees and transactions are processed by secure third-party gateways. We do not store your raw credit card information on our servers.

6. How We Use Your Information

We use information that we collect about you or that you provide to us, including any personal information:

• To present our Website and its contents to you.
• To facilitate user-to-user matchmaking and execute the core logic of the Hand Clash tournaments.
• To enforce our Terms of Service, including automated anti-cheat mechanisms and rate-limiting protocols.
• To fulfill any other purpose for which you provide it, including notifying you about tournament results or account status.

7. Data Security

We have implemented measures designed to secure your personal information from accidental loss and from unauthorized access, use, alteration, and disclosure. All information you provide to us is stored on secure servers behind firewalls. The transmission of camera snapshots is secured via WSS (WebSocket Secure) protocol.

Unfortunately, the transmission of information via the internet is not completely secure. Although we do our best to protect your personal information, we cannot guarantee the security of your personal information transmitted to our Website.

8. Your Privacy Rights (GDPR & CCPA Compliance)

Depending on your jurisdiction, you may have specific rights regarding your personal information, including the right to access, correct, delete, or restrict the processing of your data. You may also have the right to object to processing and the right to data portability.

To exercise these rights, you may contact us using the information provided below. Upon receiving a verifiable request, we will process your deletion request, which will result in the permanent removal of your account and associated historical match data from our active databases.

9. Changes to Our Privacy Policy

It is our policy to post any changes we make to our privacy policy on this page. If we make material changes to how we treat our users' personal information, we will notify you by email to the primary email address specified in your account or through a notice on the Website home page. The date the privacy policy was last revised is identified at the top of the page.