Rovian Privacy Policy: Your Data Is Safe With Us

This policy explains which of your personal data we process when you use Rovian, why and on what legal basis; who we share it with, how long we keep it, and your rights. We follow the KVKK (Turkish Law No. 6698) and GDPR framework. In this text the data controller is referred to as “Rovian.”

What Do We Collect? Only What's Necessary

• For Your Account: Your email address, username, 18+ self-declaration, current Terms acceptance record and a securely hashed version of your password. A date of birth is not required or requested for new native registration; an optional date previously supplied may remain on a legacy account.
• For Your Profile: Your display name, if you choose your country, and if you upload one, your profile photo (avatar).
• For Your Gameplay: Your current rating, match history (PGN), results and matchmaking/behavior signals.
• Technical Data: Your IP address (and the approximate country derived from it), browser/device type, session cookies and local storage (preferences, language, session state).
• For Our Peace of Mind (Moderation Evidence): Report and block records; when you report a user, a short video/audio snippet of that moment and the related chat — solely to review that report.

Android Usage and Crash Measurement — Only With Your Explicit Consent

Usage analytics and crash diagnostics are off by default in the Android app. If you allow them, Google Firebase Analytics and Crashlytics process app installs and opens, successful registration and onboarding, match starts and completions, app version and build, language, session count and duration, and crash or ANR diagnostics. Diagnostics may include device/OS details, app state and stack traces. Account and installation identifiers are pseudonymous; our server never stores the raw installation UUID and turns it into an irreversible, server-secret HMAC at the first trust boundary. Firebase App Check, backed by Google Play Integrity, also processes app/device integrity evidence to distinguish genuine Android measurement; this evidence does not gate gameplay.

Camera, microphone and chat content are never included in analytics or crash reports, and ad personalization stays disabled. When you withdraw consent in Settings, new Firebase collection stops and unsent crash reports are deleted. Identity-free Google Play store and vitals aggregates and our pseudonymous Android measurement records are used to understand product and campaign quality; they are not sold or used to build a personalized ad profile.

🎙️ Camera and Audio: Streamed Live, Not Stored On Our Servers

Your normal game conversation is carried to your opponent in real time, either directly (P2P) or through secure relay infrastructure when connection conditions require it. In normal operation we do not record it or store it on our servers.

In a public match, your camera and microphone are on for spectators by default: once the match starts, your voice and, when available, video are streamed in real time to signed-in spectators who completed the 18+ check. You can turn this off at any time from the “Stream” panel on the game screen; the stream stops immediately, while the live board and clocks remain watchable. If you never want to be broadcast, switch on the “hide from spectators” preference in Settings → Privacy and your matches will not go live again. Your opponent can neither enable nor disable your stream for you — this choice covers only your own camera and microphone. Guest (unregistered) matches, private/friend matches and under-18 matches are never broadcast. Spectator media is likewise not recorded or stored on our servers in normal operation.

Match recording (clips) — only with your explicit consent. The “allow my matches to be recorded” preference in Settings → Privacy is OFF by default; while it is off, viewers cannot record video clips of your match. If you turn it on, viewers can capture roughly 30-second video clips of matches where your opponent has also turned it on, and a clip is published as a shareable link. Consent cannot be given one-sidedly: if either player has it off, no match video clip can be recorded. The safety moderation evidence described below is separate from this match-clip preference. Clip videos are deleted automatically after 30 days; the clip's board replay (the moves — not camera footage) remains. Turning the preference off also deletes existing clip videos that include you, and you can remove any single clip yourself at any time.

There are two exceptions, solely for safety and transparency: (1) If you report a user, a short video/audio snippet of that moment is captured on your device and sent to us only for the moderation review of that report (harassment evidence). (2) Reaction clip: a limited/authorized feature can create a short clip of the game's decisive moment on-device; that clip is exported only if the person recording chooses to share it. This feature is currently enabled for administrators only and includes your opponent's video/audio — it must not be recorded or shared without their explicit consent.

To keep the platform safe and prevent abuse (harassment, nudity, risk to minors, etc.), our moderators may monitor live sessions (video, audio and chat). This monitoring is carried out solely for safety and moderation purposes, under our legitimate interest and, where applicable, our legal obligation; live streams are not recorded on our servers (a limited recording may only be captured as evidence if a violation is detected).

Preventing ban evasion. To detect a banned account returning with a new one, we derive an irreversible one-way technical signature (hash) from your device/browser at sign-in. We do not store your raw IP address or browser details for this purpose — only this irreversible signature, kept for a limited time (about 3 days of active matching; records deleted within ~6 months at most). This processing relies on our legitimate interest in safety and fraud/abuse prevention, and is used only to detect ban evasion — not for advertising or profiling.

✨ AR Lenses (Snap Camera Kit) — Optional

If you want to use fun AR lenses (Snapchat-style masks) on your camera, this feature uses Snap Inc.'s Camera Kit technology. The key point: your camera image never leaves your device — lenses are processed entirely on your device (in your browser) and are not uploaded to Snap. However, while the lens engine and assets are downloaded from Snap's servers (snapar.com, sc-cdn.net), your IP address and browser info are sent to Snap, and Snap may collect technical/analytics data. This feature is entirely optional: it activates only when you tap “Filters” on the camera and pick an AR filter; if you never use it, no data is sent to Snap. See Snap's privacy policy for details.

Why and On What Basis Do We Use Your Data?

• To provide the service: Create your account, match you with evenly matched opponents, run the game and compute your rating — performance of a contract.
• Safety and moderation: Keep Rovian safe for everyone, prevent cheating/harassment/abuse, review reports — legitimate interest and, where applicable, legal obligation.
• Communication: Send important account notices (e.g. email verification) — performance of a contract / legitimate interest.
• Statistics and improvement: Count visitors and (with analytics tools you consent to) improve the service — legitimate interest or explicit consent.

People Suggestions: “Suggested for you” and “People you may know”

We suggest players you might follow or add as a friend. The order is calculated automatically from these signals:

• Mutual friends: friends of your friends — only if the people involved allow it under “Who can see my friend list?”.
• Mutual follows: accounts followed by people you follow, and people who follow you.
• Your own games: people you played, rematches, games with both cameras on, how long you both stayed in the private post-game lobby (only the duration is measured; no video, audio or conversation content is used for this), a positive badge you gave after a game and two-way messages. Only YOUR own interaction with that person is used.
• Profile signals: your city (only if you entered one), your country (unless hidden), rating closeness, profile photo/title and approximate activity (no day-level detail if you hide your online status).
• Your reactions to the cards: which suggestions were shown, follows, friend requests and dismissals — suggestions learn from these. The weights of the signals above are re-learned from these reactions (a new version is used only after our team reviews it), and the signal values of each card shown are stored with that record.
• Aggregate reaction rates: how often different people follow or add someone as a friend when that person is suggested, and how much interest each kind of suggestion gets overall. Only totals are used; who reacted counts only toward the total and is never shown to anyone.

Your gender, age, camera/audio, message contents, and matches, messages or badges between two other people are never used for suggestions. People you blocked, reported or flagged for a bad experience (and people who did so to you) are not suggested to you, and you are not suggested to them. An account reported by at least 3 different people in the last 90 days (reports from guest or newly created accounts are not counted) is not suggested to anyone and does not see suggestions itself, unless our team dismisses those reports.

Our basis is legitimate interest (showing you players you may know). If you prefer, turn off “Show me in suggestions” under Settings → Social → Suggestions: you will not appear in other people's lists and your name will not be shown as a mutual friend.

No Secret Deals Behind Closed Doors

We do not sell your data. We only share what's strictly necessary, under contract and to the minimum extent, with trusted technical providers needed to run the service: hosting/infrastructure, database, email delivery and — only if you opt in — analytics tools (Google Analytics, Meta Pixel, Yandex.Metrika). We may also disclose required data when legally compelled (a court or competent authority order).

P2P Video/Audio Is Not Recorded

To say it again: your video and audio chats flow end to end (P2P); in normal use we don't watch them, listen to them, or store them on our servers. The exceptions are described one by one above: (1) user-triggered moderation evidence, (2) the authorized reaction-clip feature, and (3) match clips captured in games where both players explicitly allowed it, which are deleted after 30 days. If you never turn that preference on, the third exception never applies to you.

How Long Do We Keep It?

• Account and profile data: For as long as your account is active; after a deletion request it is permanently erased within a reasonable period.
• Game history and rating: Kept for the life of your account (a natural part of the service).
• Moderation evidence and report records: Kept for a limited time for review and possible abuse/legal processes, then deleted or anonymized.
• Visitor-count records: Stored as an irreversible daily hash and deleted after ~400 days; raw IP is held only ~60 seconds for rate limiting.
• Media-permission recovery measurement: We keep only categorical events such as “opened help / retried / recovered,” using a daily rotating anonymous hash that is not tied to an account; we do not store a browser identifier, device name, or camera label, and delete these records within 90 days.
• Consented Android analytics: Installation HMACs, sessions, app events and Android match links are kept for at most 400 days; Google Play reports contain identity-free daily aggregates only.
• Suggestion records: Which suggestions were shown to you and your reactions to the cards are deleted after 180 days; your own decisions are included in your data export.

You're Fully in Control: Your Rights

Under KVKK and GDPR you always have the right to:

• Access your data and learn whether it is being processed.
• Correct inaccurate or incomplete data.
• Request deletion of your data. Account deletion is handled through an admin-approved request flow to prevent abuse; once received, your request is carried out within a reasonable period.
• Object to processing and withdraw consent (e.g. you can revoke cookie/analytics consent at any time).

To exercise these rights, reach us through the contact channel below. We may need to verify your identity to confirm your request.

Children's Privacy

Rovian is not directed at anyone under 18, and we do not knowingly collect data from below that age. If we discover an account belonging to someone under 18, we close it and delete the related data. If you believe a child has provided us with data, please contact us.

International Transfers

Our providers (hosting, email, analytics) may process your data on servers outside Türkiye. For any such transfer, we take care to ensure appropriate safeguards for your data.

Visitor Statistics

To see how many people visit Rovian day by day (including logged-out visitors), we process your IP address and browser info only momentarily. We do not store them in raw form: we turn them into an irreversible code (hash) that changes every day and keep only that code — so the same browser counts as one person per day, but no one can be tracked across days. This count uses no cookies, relies on our legitimate interest, and records are deleted after about 400 days. To prevent abuse, your IP address is also held briefly (~60 seconds) solely for rate limiting.

Cookies and Analytics

We always use the essential system cookies that keep your session open. Beyond those — only if you choose “Accept” on the cookie banner — we load Google Analytics, the Meta (Facebook) Pixel and Yandex.Metrika for visitor statistics. Session replay (Webvisor) is disabled and sensitive account pages are excluded. Measured page addresses omit query strings, fragments and user/game identifiers. With “Essential only,” these tools do not load. Use “Cookie preferences” at the bottom of the page to change your choice; rejecting stops new analytics events.

Last updated: 2026 · For privacy questions and data requests, reach us via the Community & Safety page or use the in-app support channel.