1. Who operates the project
68Leela is an early-stage project operated by ritamz and xxWINDxx. Privacy questions and account requests may be sent to info@68leela.com. This policy is a template and does not invent a separate legal entity or physical address.
2. Data collected
The service collects the name and email you provide, a Cognito user identifier, authentication and verification metadata, legal-document acceptance records, account-deletion requests, game intentions, answers, board activity, generated dialogue, and technical security or error logs. Passwords are handled by Amazon Cognito and are not stored by the application.
3. Why data is processed
Data is used to create and secure accounts, authenticate requests, provide and restore game sessions, generate requested reflective content, record legal acceptance, prevent misuse, diagnose failures, maintain the service, and respond to account or privacy requests.
4. Cognito and other services
Amazon Cognito processes account credentials, verification messages, and authentication tokens. Amazon DynamoDB stores application records. Amazon Bedrock and related model services may process the game context needed to generate dialogue. Hosting and network providers process technical request data. These providers process data under their own service terms and security responsibilities.
5. Identity and security
The Cognito `sub` claim is the permanent application user identifier; email and name are not database keys. Protected API routes validate access-token signatures and claims against Cognito. The application uses access tokens only for API authorization and does not intentionally place tokens in URLs, logs, analytics, or browser local storage. Reasonable safeguards reduce risk but cannot guarantee absolute security.
6. Retention and deletion
Account and game data are retained while the account is active and as reasonably needed to operate and secure the project. A deletion request can be made from the authentication screen. Permanent deletion of the Cognito account, profile, legal records, and associated game data is scheduled three months after the request unless the request is canceled. Limited security records may be retained where genuinely necessary or legally required.
7. Your choices and rights
Depending on applicable law, you may request access, correction, deletion, restriction, or a copy of personal data, and may object to certain processing. Requests can be sent to info@68leela.com. Identity verification may be required before a request is fulfilled. This policy does not claim implementation of any specific regulatory certification.
8. International processing and legal basis
Cloud providers may process data in configured service regions and other locations necessary to provide their services. The intended legal framework is EU law (Czech Republic), but the applicable legal bases, transfer safeguards, and mandatory rights require professional review before production use.
9. Changes and contact
This policy may change as the project and its data practices develop. Material changes will use a new effective date and may require renewed acknowledgement. Contact info@68leela.com with privacy questions or requests.