chg: usr: update all texts on all pages - extend them with the game specific things #4

templates/Official/privacy.html.twig

@@ -22,47 +22,133 @@
   <div class="txt">
     <h2>MineSeeker Privacy Policy</h2>
 
-    <p>Your privacy is important to us.</p>
+    <p>Your privacy is important to us. MineSeeker is built on principles of transparency and minimal data collection. We believe you should have full control over your personal information and understand exactly how it's used.</p>
 
-    <p>It is MineSeeker's policy to respect your privacy regarding any information we may collect while operating
-      our
-      website. Accordingly, we have developed this privacy policy in order for you to understand how we collect,
-      use,
-      communicate, disclose and otherwise make use of personal information. We have outlined our privacy policy
-      below.</p>
+    <p>This Privacy Policy explains how we collect, use, protect, and manage your personal information when you use MineSeeker.</p>
+
+    <h3>1. Our Privacy Principles</h3>
 
     <ul>
-      <li>We will collect personal information by lawful and fair means and, where appropriate, with the knowledge
-        or
-        consent of the individual concerned.
-      </li>
-      <li>Before or at the time of collecting personal information, we will identify the purposes for which
-        information is being collected.
-      </li>
-      <li>We will collect and use personal information solely for fulfilling those purposes specified by us and
-        for
-        other ancillary purposes, unless we obtain the consent of the individual concerned or as required by
-        law.
-      </li>
-      <li>Personal data should be relevant to the purposes for which it is to be used, and, to the extent
-        necessary
-        for those purposes, should be accurate, complete, and up-to-date.
-      </li>
-      <li>We will protect personal information by using reasonable security safeguards against loss or theft, as
-        well
-        as unauthorized access, disclosure, copying, use or modification.
-      </li>
-      <li>We will make readily available to customers information about our policies and practices relating to the
-        management of personal information.
-      </li>
-      <li>We will only retain personal information for as long as necessary for the fulfilment of those
-        purposes.
-      </li>
+      <li>We collect personal information by lawful and fair means, with your knowledge and consent.</li>
+      <li>We collect and use personal information solely for the purposes specified and no others.</li>
+      <li>Personal data is kept accurate, complete, and up-to-date.</li>
+      <li>We protect personal information with reasonable security safeguards against loss, theft, unauthorized access, disclosure, and modification.</li>
+      <li>We retain personal information only for as long as necessary.</li>
+      <li>We are transparent about our data practices and policies.</li>
     </ul>
 
-    <p>We are committed to conducting our business in accordance with these principles in order to ensure that the
-      confidentiality of personal information is protected and maintained. MineSeeker may change this privacy
-      policy
-      from time to time at MineSeeker's sole discretion.</p>
+    <h3>2. What Information We Collect</h3>
+
+    <p><strong>Account Information:</strong> When you create a MineSeeker account, we collect:</p>
+    <ul>
+      <li><strong>Username</strong> - Your unique identifier in the game (publicly visible to other players)</li>
+      <li><strong>Email address</strong> - Used only for account recovery and password resets (never publicly exposed)</li>
+      <li><strong>Password</strong> - Securely hashed and encrypted (we never store plain-text passwords)</li>
+      <li><strong>Optional profile data</strong> - Avatar image (if you choose to upload one)</li>
+    </ul>
+
+    <p><strong>Game Data:</strong> To provide multiplayer functionality, we automatically collect:</p>
+    <ul>
+      <li>Game statistics (win/loss records, game duration, board size preferences)</li>
+      <li>Game history (replay data for sharing past battles)</li>
+      <li>Timestamps of games played</li>
+    </ul>
+
+    <p><strong>Technical Information:</strong> We collect minimal technical data:</p>
+    <ul>
+      <li>IP address (for multiplayer game sessions only, not stored long-term)</li>
+      <li>Browser type and version (for compatibility purposes)</li>
+      <li>Device information (to optimize game performance)</li>
+    </ul>
+
+    <h3>3. What We Do NOT Collect</h3>
+
+    <ul>
+      <li><strong>❌ No social authentication:</strong> We don't use Facebook, Google, Twitter, or other social platforms. You create your own account.</li>
+      <li><strong>❌ No AI-generated data:</strong> We don't use AI to profile you or generate insights about your behavior.</li>
+      <li><strong>❌ No tracking cookies or analytics:</strong> We don't use third-party analytics tools to track your movement across the web.</li>
+      <li><strong>❌ No advertisement profiling:</strong> We don't sell or share your data with advertisers.</li>
+      <li><strong>❌ No location tracking:</strong> We don't collect or store your location data.</li>
+    </ul>
+
+    <h3>4. How We Use Your Information</h3>
+
+    <p>Your information is used exclusively for these purposes:</p>
+    <ul>
+      <li><strong>Account management:</strong> Creating and maintaining your account</li>
+      <li><strong>Game functionality:</strong> Matchmaking, real-time multiplayer connections, and game replay storage</li>
+      <li><strong>Security:</strong> Preventing fraud, cheating, and unauthorized access</li>
+      <li><strong>Communication:</strong> Sending password resets or important service updates (very rarely)</li>
+      <li><strong>Improvement:</strong> Analyzing game performance to fix bugs and improve server stability</li>
+    </ul>
+
+    <p>We will <strong>never</strong> use your data for marketing, profiling, or any purpose other than those listed above.</p>
+
+    <h3>5. Data Retention</h3>
+
+    <ul>
+      <li><strong>Active accounts:</strong> Your data is retained while your account is active.</li>
+      <li><strong>Account deletion:</strong> If you delete your account, we retain only anonymized game statistics (for leaderboards) and permanently delete all personal information within 30 days.</li>
+      <li><strong>Game data:</strong> Your game history and replays are retained indefinitely unless you explicitly request deletion.</li>
+      <li><strong>Technical logs:</strong> IP addresses and technical logs are automatically deleted after 90 days.</li>
+    </ul>
+
+    <h3>6. Data Security</h3>
+
+    <ul>
+      <li>All passwords are hashed using industry-standard encryption (bcrypt)</li>
+      <li>Communication between your device and our servers uses HTTPS/TLS encryption</li>
+      <li>Sensitive data is stored on secure, isolated servers</li>
+      <li>We regularly audit security and patch vulnerabilities</li>
+      <li>We conduct no data sharing with third parties unless required by law</li>
+    </ul>
+
+    <h3>7. Your Rights</h3>
+
+    <p>You have the right to:</p>
+    <ul>
+      <li><strong>Access:</strong> Request a copy of all personal data we hold about you</li>
+      <li><strong>Correction:</strong> Update or correct inaccurate information</li>
+      <li><strong>Deletion:</strong> Request deletion of your account and personal data (with 30-day retention for legal compliance)</li>
+      <li><strong>Data portability:</strong> Export your game data in a machine-readable format</li>
+      <li><strong>Withdraw consent:</strong> Opt out of non-essential data collection at any time</li>
+    </ul>
+
+    <p>To exercise any of these rights, contact us at <a href="mailto:privacy@mineseeker.hu">privacy@mineseeker.hu</a></p>
+
+    <h3>8. Third-Party Services</h3>
+
+    <p>We use the following third-party services (strictly necessary for game operation):</p>
+    <ul>
+      <li><strong>Mercure (WebSocket server):</strong> Real-time multiplayer connections</li>
+      <li><strong>Symfony framework:</strong> Web application backend</li>
+      <li><strong>Cloud storage:</strong> Game replays and user data (hosted in EU data centers)</li>
+    </ul>
+
+    <p>These services are contractually bound to respect your privacy and use data only for the purposes we specify.</p>
+
+    <h3>9. Legal Basis for Processing</h3>
+
+    <p>We process your personal data based on:</p>
+    <ul>
+      <li><strong>Contractual necessity:</strong> To provide the MineSeeker service you've agreed to use</li>
+      <li><strong>Legitimate interest:</strong> To maintain security and prevent fraud</li>
+      <li><strong>Compliance with law:</strong> When required by Hungarian or EU law</li>
+    </ul>
+
+    <h3>10. Contact & Disputes</h3>
+
+    <p>If you have questions about this privacy policy or wish to exercise your rights:</p>
+    <ul>
+      <li><strong>Email:</strong> <a href="mailto:privacy@mineseeker.hu">privacy@mineseeker.hu</a></li>
+      <li><strong>Mailing address:</strong> MineSeeker, Budapest, Hungary</li>
+      <li><strong>EU DPA disputes:</strong> If you're in the EU and believe we've violated GDPR, you may lodge a complaint with your local data protection authority</li>
+    </ul>
+
+    <h3>11. Policy Changes</h3>
+
+    <p>MineSeeker may update this privacy policy to reflect changes in our practices or applicable law. We will notify you of significant changes via email or by posting a notice on our website. Your continued use of MineSeeker after changes constitute acceptance of the updated policy.</p>
+
+    <p><strong>Last updated:</strong> {{ "now"|date("F j, Y") }}</p>
   </div>
 {% endblock %}