Privacy policy

This policy explains how personal data related to Combixa is processed.

1. Data controller

Controller: Ignacio Bermejo Martínez
Trade name: Combixa
Privacy contact: info@combixa.com

This policy applies to the Combixa mobile application, the Combixa website, its rankings, public profiles and statistics, and communications related to privacy, the exercise of rights and moderation of Combixa services.

2. Data we process

Combixa may process the following data when you use online features:

• Online account: alias, technical player identifier, session identifier, associated device and the data needed to maintain the session.
• Online matches: match code, participants, turn, board, racks, moves, scores, result, abandonment, creation date, latest activity and completion.
• Match chat: messages sent within a match, sender identifier, date and time sent, and the technical status needed to synchronise, mute or mark messages as read.
• Friends and challenges: friend requests, friends list, match invitations, acceptance or rejection of challenges and related notices.
• Blocks: the relationship between the blocking account and the blocked account, together with the block creation date.
• Reports and moderation: reporting user, reported user, reason, details provided, date, review status, action taken and, when the report is submitted from a match, that match code.
• Notifications: technical push-notification token, type of notice, associated match or item, and read or deletion status.
• Official statistics: matches played, won, lost or abandoned, points, best moves, streaks, positions and other indicators derived from verified matches.
• Security and integrity: technical logs, operation identifiers, turn validation, anti-fraud controls and pseudonymous technical identifiers used to limit abusive requests and prevent inconsistent states between players.

Matches against the AI and their local statistics remain on the device unless a specific feature expressly states that they are synchronised online.

3. Purposes

We use this data to create and maintain the online account, reserve the alias, provide asynchronous matches, validate moves, display history, calculate statistics, enable friends and challenges, deliver notifications, provide match chat, manage abandonments, allow users to block and unblock others, handle reports, review possible breaches, take moderation measures and protect the game against errors, abuse or manipulation.

4. Reports, blocks and moderation

Players may report other users, including directly from a match, when they believe there has been inappropriate conduct or a possible breach of Combixa rules. Reports may be reviewed by the person responsible for moderating the service. The information provided is used to assess the incident, protect users, prevent abuse and, where appropriate, take measures regarding the accounts involved. Submitting a report does not automatically result in action against the reported user.

Combixa also allows users to block and unblock other users, including during an active match. The match may continue, but chat becomes unavailable while the block remains active. Blocking prevents new friend requests, challenges, invitations, random matchmaking and the other social interactions provided by the service. The blocked user does not receive a specific notice identifying who blocked them.

5. Match chat

Chat is linked to a specific match. Messages are not public and are shown only to the participants in that match. When either participant mutes a match chat, chat becomes unavailable to both and no new messages can be sent until it is re-enabled. If one participant blocks the other, chat remains disabled while the block is active and can only become available again after unblocking. Messages sent before the mute or block may be retained for the stated period to preserve match consistency and handle incidents.

6. Statistics and ranking

Official statistics are calculated from verified online matches. Some aggregate statistics, rankings or public profiles may be displayed on the Combixa portal using the player’s alias. Match chat is not published.

7. Notifications and news

Combixa may send notifications or display in-app news about turns, chat messages, friend requests, challenges, acceptance or rejection of challenges, abandoned matches and other game-related events. These notifications use technical identifiers and are not used for external advertising.

8. Legal basis

Processing is necessary to provide the online features requested by the player. The management of reports, blocks and moderation measures is also based on the legitimate interest in protecting users, maintaining security, preventing abusive or fraudulent conduct, diagnosing errors and preserving the integrity of scores, rankings and matches. Where appropriate, we may process data to comply with legal obligations, claims or rights requests.

9. Retention

• Account, alias, profile and official statistics: while the account remains active. If there is no activity for 24 months, they will be deleted or anonymised.
• Summary of verified online matches: while the account is active and for no longer than 24 months after each match ends.
• Match chat: 30 days after the match closes, unless longer retention is required to handle an incident, abuse report or legal request.
• Muted-chat preferences: while the account exists or until the player changes them.
• User blocks: while the block remains active or until either account is deleted.
• Reports and moderation actions: for up to 24 months after the report is closed, unless longer retention is needed to handle claims, legal obligations, repeated misconduct or protect the service.
• Pending invitations, expired matches and unaccepted friend requests: 90 days.
• In-app news and notifications: until read, deleted or no longer needed; purely informational notices may be removed automatically when the corresponding match or section is opened.
• Notification tokens: until revoked, the app is uninstalled or there has been no activity for 12 months.
• Technical security logs and pseudonymous rate-limiting identifiers: for the time strictly necessary to prevent abuse, investigate errors and protect service integrity.
• Deletion requests and related communications: 12 months after the request is closed, in order to document its handling.
• Backups: refreshed so that deleted data is no longer included within a maximum of 35 days.

When retention is no longer necessary, data will be deleted, restricted or anonymised. Aggregate results that no longer identify a player may be retained to maintain the game’s global statistics.

10. Recipients and providers

Data is hosted on the infrastructure contracted for Combixa. If notifications are enabled, the technical provider required to deliver them will be used. Essential technical providers may also be involved in hosting, security, backups or app delivery. We do not sell personal data to advertisers.

11. Public data

The alias, official statistics, rankings and public profiles may be visible on the public Combixa portal. Match chat, friend requests, reports and their content, the identity of the reporting user, blocked-user lists, internal moderation actions, notification tokens and session data are not public.

12. Rights and deletion

You may request access, rectification, objection, restriction or portability by writing to info@combixa.com. To protect accounts from third-party requests, deletion of the account and its online data must be requested from the Combixa app under Settings → Data and privacy → Request account deletion. The authenticated session verifies that the requester controls the affected account.

If you cannot access the app because of a technical issue, you may write to info@combixa.com for assistance. An account will not be deleted merely because someone knows its alias.

13. Children

We do not deliberately request additional identifying information. Minors must use online mode in accordance with applicable law and with the involvement of their parent or guardian where required.

14. Cookies and technical storage

The Combixa website uses only cookies and technical storage technologies that are necessary for its operation or to remember preferences requested by the user. A first-party cookie may be used to remember the selected language for up to one year. Invitation links may use temporary tab storage (sessionStorage) to prevent repeated attempts to open the application during the same browsing session.

These technologies are not used for advertising, analytics, tracking or profiling. As they are technical technologies or are necessary to provide features requested by the user, consent is not requested for their use. If Combixa introduces non-essential technologies requiring consent in the future, users will be informed in advance and the appropriate mechanism will be provided.

15. Changes

We will update this policy before enabling features that materially change the data processed, its purposes, recipients or retention periods.