Chkobbeta Chkobbeta
Privacy policy

Your data on Chkobbeta

What the game collects, why, who can see it, how long it is kept, and how to delete your account. Last updated 24 October 2026.

Who we are

Chkobbeta is an online game of Chkobba, the Tunisian card game, played on chkobbeta.tn and in the Chkobbeta app for iPhone and Android. In this policy, "Chkobbeta", "we" and "us" mean the team that runs it.

For anything about your data, write to [email protected].

The short version

  • We collect what the game needs to work: your account, your matches, and what you send to other players or to us.
  • No advertising, no advertising trackers, no third-party analytics, no cookies. We never sell your data.
  • Your email and phone number are private: only you and the team can see them.
  • You can delete your account from your profile at any time.

What we collect

Your account

Your username and password. We keep your password only in scrambled (hashed) form, which nobody, including us, can turn back into the password. Then, if you give them: your first and last name, gender, country, year of birth, email address, phone number and profile picture. We keep your three most recent pictures, so you can wear one again. We also note the language you play in.

You can play as a guest without any of this. A guest account has no password: it is the code saved in your browser or app, and whoever holds that code holds the account.

Your games

Every match you play: who played, the cards dealt and played, the scores and the result. From these come your statistics, your place on the leaderboard and your match history. We also keep your friends, the invitations you send and receive, the players you block, and your answers when the game asks for a rating or a vote.

What you send

  • Chat messages in a match, read by the other players at that table.
  • Reports about a player, with the screenshot you attach if you do, and support messages you send us, with our replies.
  • Voice chat. Calls go directly between the two players' devices, encrypted. When a direct connection is not possible, the call passes encrypted through a relay service (Metered). We do not record calls. On the website, your browser keeps the last few minutes of the call in its memory, and sends them to us only if you report the other player, as evidence for the team. If nobody reports, it is never sent and is gone when the call ends. The app keeps nothing.

Your devices and visits

  • When you sign in: the time, whether you are on a phone or a computer, and whether you use the app.
  • When you open the website: your IP address, your browser and device type, the page you came from, the address you opened, your screen size and your browser's language. We use this to count where players come from; it is not linked to your account.
  • If you allow notifications: the address your phone or browser gives us to deliver them.
  • How smoothly the game runs on your device (frame rates), without anything that identifies you.

Why we use it

  • To run the game: your account, your matches, the leaderboard, friends, invitations, chat and voice.
  • To keep it fair and safe: to look into reports, stop cheating and abuse, and suspend accounts that break the rules.
  • To answer you when you write to us.
  • To make the game better: how many people play, from where they arrive, and how well it runs.

Who can see what

  • Other players see your username and picture, and on your profile your country, gender, year of birth and the year you joined, with your statistics, leaderboard place and match history. The players at your table see your chat messages and hear you on voice chat.
  • Only you and the team see your email, phone number and first and last name.
  • The team can see the accounts, matches, chats, reports and support messages, to run the game, look into reports and answer you.

We share data with no one else, except the services below that the game needs to work, and only what each one needs:

  • Cloudflare delivers the website and protects it from attacks, so it sees every visit, including your IP address. It also counts page views for us without cookies, and gives us only the totals.
  • Apple and Google deliver notifications to phones: they receive your device's notification address and the text of the notification, which can include another player's name.
  • Your browser's notification service (from Google, Mozilla, Apple or Microsoft, depending on your browser) receives website notifications in encrypted form.
  • Voice chat uses Google's servers to help two devices find each other, which sees your IP address, and Metered's relay when a direct call is not possible, which carries the encrypted call.

On your device

The website sets no cookies. It saves in your browser what it needs to keep you signed in and remember your settings: your sign-in code, your profile, your language, and your sound and voice choices. The app keeps your sign-in code in your phone's secure storage. Signing out removes the sign-in code.

How long we keep it

  • Your account, as long as you keep it.
  • Matches stay in the history of everyone who played them.
  • Chat messages, reports and support messages are kept so the team can look back at what happened.
  • Visit records are kept for our statistics.
  • Records of how the game runs on devices are kept for 30 days, then only hourly totals.
  • Backups: we copy the database every day and keep each copy for up to 14 days. A few copies made before maintenance work are kept longer, only to repair the game if something goes wrong. If we ever have to restore a copy, every account deleted since that copy was made is deleted again before the game reopens.

Deleting your account

In the game, open your profile and choose Delete my account, then confirm with your password. You are signed out on every device at once, and nobody can see your account any more.

You then have 14 days to change your mind: sign in again and your account is back as it was. After 14 days it is erased for good: your account, profile, pictures, friends, statistics, notifications and sessions. In the matches you played, your name is replaced by "Deleted account", so the other players keep their results without seeing your name. Chat messages you sent stay in those matches, without your name. Reports you sent are deleted with your account; a screenshot or voice clip you attached stays with the team.

If you play as a guest, write to us and we will erase the guest account's data.

Your rights

You can ask us for a copy of your data, to correct it, or to delete it, and you can object to how we use it. Most of it you can change yourself in your profile. For anything else, write to [email protected] and we will answer within 30 days.

If you think we have not respected your data, you can complain to Tunisia's data protection authority, the Instance Nationale de Protection des Données Personnelles (INPDP).

Children

Chkobbeta is not meant for children under 13. If you think a child under 13 has an account, write to us and we will delete it.

Changes

When this policy changes, we update the date at the top. If a change matters for how your data is used, we will also tell you in the game.