Legal
Privacy Policy
Last updated: August 13, 2026
Scrabhana ("we", "us", or "our") operates the Scrabhana web application. This Privacy Policy explains how we collect, use, and share information when you use Scrabhana.
Information we collect
- Account information. When you sign in with Facebook, we receive your name, profile photo, and Facebook user identifier (and email if Facebook provides it). You may also set a display name and bio in Scrabhana.
- Gameplay data. Game boards, moves, scores, invite codes, and related match history needed to run and display games.
- Messages. In-game chat and direct messages you send to other players.
- Technical data. Basic logs such as IP address, browser type, and timestamps that help us operate and secure the service.
- Push notification endpoints. If you enable move alerts (typically after adding Scrabhana to your home screen), we store a browser push subscription endpoint and encryption keys so we can deliver native OS notifications when it is your turn. You can turn this off in the app banner or by clearing site data.
How we use information
- To create and manage your account and profile
- To run multiplayer games, chat, and messaging
- To authenticate you (including via Facebook Login)
- To send optional Web Push alerts about game moves when you opt in
- To maintain security, prevent abuse, and troubleshoot issues
- To improve Scrabhana
How we share information
We do not sell your personal information. We may share information with:
- Other players — your display name, avatar, public profile details, game activity visible in a match, and messages you send them
- Service providers — hosting, database, and infrastructure vendors that process data only to run Scrabhana
- Legal requirements — if required by law or to protect rights, safety, or the integrity of the service
Facebook Login
If you use Facebook Login, Facebook's own policies also apply to data Facebook processes. We only request the permissions needed to sign you in and show your name/photo. You can disconnect Scrabhana from Facebook in your Facebook settings.
Data retention
We keep account, game, and message data while your account is active and as needed to operate Scrabhana. You may request deletion of your account and associated personal data by contacting us (see below).
Security
We use reasonable technical and organizational measures to protect information. No method of transmission or storage is completely secure.
Children
Scrabhana is not directed to children under 13, and we do not knowingly collect personal information from children under 13.
Your choices
- Edit your display name and bio in your profile
- Sign out at any time
- Request account deletion by contacting us
Changes
We may update this Privacy Policy from time to time. The "Last updated" date above will change when we do.
Contact
Questions about this Privacy Policy or your data: contact the Scrabhana operator via the project maintainers on GitHub.
Facebook users can request deletion from Facebook app settings. Our callback is at /api/facebook/data-deletion; check status at /deletion-status.