{% extends 'Game/index.html.twig' %}

{% block title %} - Privacy Policy{% endblock %}

{% block metas %}
  {%- set _ogImage = 'https://' ~ app.request.host ~ asset('/images/mine-1600x627.png') -%}
  <meta property="og:url" content="{{ url('MineSeekerBundle_privacy') | replace({'http://': 'https://'}) }}"/>
  <meta property="og:type" content="website"/>
  <meta property="og:site_name" content="MineSeeker"/>
  <meta property="og:title" content="Privacy Policy · MineSeeker"/>
  <meta property="og:description" content="Read how MineSeeker collects, uses and protects your personal data."/>
  <meta property="og:image" content="{{ _ogImage }}"/>
  <meta property="og:image:width" content="1600"/>
  <meta property="og:image:height" content="627"/>
  <meta name="twitter:card" content="summary_large_image"/>
  <meta name="twitter:title" content="Privacy Policy · MineSeeker"/>
  <meta name="twitter:description" content="Read how MineSeeker collects, uses and protects your personal data."/>
  <meta name="twitter:image" content="{{ _ogImage }}"/>
{% endblock %}

{% block body %}
  <div class="txt">
    <h2>MineSeeker Privacy Policy</h2>

    <p>Your privacy is important to us. MineSeeker is built on principles of transparency and minimal data collection. We believe you should have full control over your personal information and understand exactly how it's used.</p>

    <p>This Privacy Policy explains how we collect, use, protect, and manage your personal information when you use MineSeeker.</p>

    <h3>1. Our Privacy Principles</h3>

    <ul>
      <li>We collect personal information by lawful and fair means, with your knowledge and consent.</li>
      <li>We collect and use personal information solely for the purposes specified and no others.</li>
      <li>Personal data is kept accurate, complete, and up-to-date.</li>
      <li>We protect personal information with reasonable security safeguards against loss, theft, unauthorized access, disclosure, and modification.</li>
      <li>We retain personal information only for as long as necessary.</li>
      <li>We are transparent about our data practices and policies.</li>
    </ul>

    <h3>2. What Information We Collect</h3>

    <p><strong>Account Information:</strong> When you create a MineSeeker account, we collect:</p>
    <ul>
      <li><strong>Username</strong> - Your unique identifier in the game (publicly visible to other players)</li>
      <li><strong>Email address</strong> - Used only for account recovery and password resets (never publicly exposed)</li>
      <li><strong>Password</strong> - Securely hashed and encrypted (we never store plain-text passwords)</li>
      <li><strong>Optional profile data</strong> - Avatar image (if you choose to upload one)</li>
    </ul>

    <p><strong>Game Data:</strong> To provide multiplayer functionality, we automatically collect:</p>
    <ul>
      <li>Game statistics (win/loss records, game duration, board size preferences)</li>
      <li>Game history (replay data for sharing past battles)</li>
      <li>Timestamps of games played</li>
    </ul>

    <p><strong>Technical Information:</strong> We collect minimal technical data:</p>
    <ul>
      <li>IP address (for multiplayer game sessions only, not stored long-term)</li>
      <li>Browser type and version (for compatibility purposes)</li>
      <li>Device information (to optimize game performance)</li>
    </ul>

    <h3>3. What We Do NOT Collect</h3>

    <ul>
      <li><strong>❌ No social authentication:</strong> We don't use Facebook, Google, Twitter, or other social platforms. You create your own account.</li>
      <li><strong>❌ No AI-generated data:</strong> We don't use AI to profile you or generate insights about your behavior.</li>
      <li><strong>❌ No tracking cookies or analytics:</strong> We don't use third-party analytics tools to track your movement across the web.</li>
      <li><strong>❌ No advertisement profiling:</strong> We don't sell or share your data with advertisers.</li>
      <li><strong>❌ No location tracking:</strong> We don't collect or store your location data.</li>
    </ul>

    <h3>4. How We Use Your Information</h3>

    <p>Your information is used exclusively for these purposes:</p>
    <ul>
      <li><strong>Account management:</strong> Creating and maintaining your account</li>
      <li><strong>Game functionality:</strong> Matchmaking, real-time multiplayer connections, and game replay storage</li>
      <li><strong>Security:</strong> Preventing fraud, cheating, and unauthorized access</li>
      <li><strong>Communication:</strong> Sending password resets or important service updates (very rarely)</li>
      <li><strong>Improvement:</strong> Analyzing game performance to fix bugs and improve server stability</li>
    </ul>

    <p>We will <strong>never</strong> use your data for marketing, profiling, or any purpose other than those listed above.</p>

    <h3>5. Data Retention</h3>

    <ul>
      <li><strong>Active accounts:</strong> Your data is retained while your account is active.</li>
      <li><strong>Account deletion:</strong> If you delete your account, we retain only anonymized game statistics (for leaderboards) and permanently delete all personal information within 30 days.</li>
      <li><strong>Game data:</strong> Your game history and replays are retained indefinitely unless you explicitly request deletion.</li>
      <li><strong>Technical logs:</strong> IP addresses and technical logs are automatically deleted after 90 days.</li>
    </ul>

    <h3>6. Data Security</h3>

    <ul>
      <li>All passwords are hashed using industry-standard encryption (bcrypt)</li>
      <li>Communication between your device and our servers uses HTTPS/TLS encryption</li>
      <li>Sensitive data is stored on secure, isolated servers</li>
      <li>We regularly audit security and patch vulnerabilities</li>
      <li>We conduct no data sharing with third parties unless required by law</li>
    </ul>

    <h3>7. Your Rights</h3>

    <p>You have the right to:</p>
    <ul>
      <li><strong>Access:</strong> Request a copy of all personal data we hold about you</li>
      <li><strong>Correction:</strong> Update or correct inaccurate information</li>
      <li><strong>Deletion:</strong> Request deletion of your account and personal data (with 30-day retention for legal compliance)</li>
      <li><strong>Data portability:</strong> Export your game data in a machine-readable format</li>
      <li><strong>Withdraw consent:</strong> Opt out of non-essential data collection at any time</li>
    </ul>

    <p>To exercise any of these rights, contact us at <a href="mailto:privacy@mineseeker.hu">privacy@mineseeker.hu</a></p>

    <h3>8. Third-Party Services</h3>

    <p>We use the following third-party services (strictly necessary for game operation):</p>
    <ul>
      <li><strong>Mercure (WebSocket server):</strong> Real-time multiplayer connections</li>
      <li><strong>Symfony framework:</strong> Web application backend</li>
      <li><strong>Cloud storage:</strong> Game replays and user data (hosted in EU data centers)</li>
    </ul>

    <p>These services are contractually bound to respect your privacy and use data only for the purposes we specify.</p>

    <h3>9. Legal Basis for Processing</h3>

    <p>We process your personal data based on:</p>
    <ul>
      <li><strong>Contractual necessity:</strong> To provide the MineSeeker service you've agreed to use</li>
      <li><strong>Legitimate interest:</strong> To maintain security and prevent fraud</li>
      <li><strong>Compliance with law:</strong> When required by Hungarian or EU law</li>
    </ul>

    <h3>10. Contact & Disputes</h3>

    <p>If you have questions about this privacy policy or wish to exercise your rights:</p>
    <ul>
      <li><strong>Email:</strong> <a href="mailto:privacy@mineseeker.hu">privacy@mineseeker.hu</a></li>
      <li><strong>Mailing address:</strong> MineSeeker, Budapest, Hungary</li>
      <li><strong>EU DPA disputes:</strong> If you're in the EU and believe we've violated GDPR, you may lodge a complaint with your local data protection authority</li>
    </ul>

    <h3>11. Policy Changes</h3>

    <p>MineSeeker may update this privacy policy to reflect changes in our practices or applicable law. We will notify you of significant changes via email or by posting a notice on our website. Your continued use of MineSeeker after changes constitute acceptance of the updated policy.</p>

    <p><strong>Last updated:</strong> {{ "now"|date("F j, Y") }}</p>
  </div>
{% endblock %}