1. Data Controller & Scope

RondaGG is an independent community entertainment project developed and operated from Chile. This policy applies to the main website (including rondagg.com and its subdomains) and all its game rooms. RondaGG is an autonomous service and is not owned by or corporately affiliated with Twitch Interactive, Cloudflare Inc., PayPal Holdings, or Google LLC. For inquiries or rights requests regarding your personal data, you can reach the team at contacto@rondagg.com.

2. Recreational Nature (No Gambling)

RondaGG is a recreational, social leisure platform with no gambling or betting purposes. There are no real-money bets, no paid game cards, and no monetary prizes. Twitch channel points and room passes are strictly playful digital game elements with no real-world monetary value, which cannot be exchanged, sold, or converted into cash or financial assets.

3. Information We Process

Free Rooms: Voluntary nickname chosen by the player, temporary technical session ID, generated cards, marked numbers, and round wins.
Twitch Rooms: Technical Twitch User ID, display name, and avatar profile picture provided through official Twitch OAuth authentication. RondaGG never requests, sees, or stores your password or Twitch account email address.
Filtered Rooms: Verified via the official Twitch API to check compliance with host conditions (subscriber status, moderator role, or channel points redemption).
Room Moderation: Hosts can temporarily kick or ban identities from their specific room. The identifier and nickname are stored solely to enforce that host decision in that room.
Optional Feedback Survey: After your first game, you may submit voluntary feedback anonymously or linked to an irreversible cryptographic room ID. No financial, personal, or sensitive information is ever collected.
Technical Connection Data: Servers and Content Delivery Networks (CDNs) process IP addresses, browser types, operating systems, and security logs to mitigate abuse, block DDoS attacks, and maintain service stability.

4. Purpose of Processing

The collected information is strictly used for:

Real-time roulette and bingo card synchronization via WebSockets.
Session preservation during accidental disconnections or page reloads.
Displaying the live leaderboard and winner celebrations during games.
Guarding against Denial of Service (DoS) attacks, spam, and automated bots.
Monitoring performance and gathering voluntary user feedback for continuous improvements.

5. Cookies, Third-Party Advertising & Local Storage

RondaGG uses local browser storage (localStorage) and essential technical cookies to make the service work. As of the date of this policy, RondaGG does not load third-party advertising or analytics cookies.

Technical and Session Cookies: Twitch authentication uses secure cookies (with HttpOnly, Secure, and SameSite=Lax attributes) expiring in 7 days. The browser stores visual skin, selected language, and sound settings in localStorage.
If third-party advertising is enabled: Before enabling ad vendors, including Google AdSense, RondaGG will update this policy and show the required consent information and choices. Those vendors may use cookies or local storage to serve ads based on prior visits to this or other websites.
Google Advertising Cookies: If Google AdSense is enabled, Google and its partners may use advertising cookies to serve personalized or non-personalized ads based on visits to RondaGG and other websites.
Personalized Advertising Choices: If Google AdSense is enabled, users may opt out of personalized advertising through Google Ad Settings. They can also consult www.aboutads.info and, for the European Union, www.youronlinechoices.com.
Consent Management (CMP): Before serving ads to visitors in the EEA, the UK, or Switzerland, RondaGG will configure a consent management platform compatible with the applicable Google requirements and show choices to accept, decline, or manage non-essential technologies when required.

6. Data Retention

Data from active game rooms is kept only while the room is in use and cleared automatically upon inactivity. Local preferences remain stored in the user's browser until cleared by the user.

7. External Services & Transfers

Cloudflare: Global cloud infrastructure, serverless hosting (Workers/Durable Objects), attack mitigation, and content delivery.
Twitch (Amazon): OAuth authentication and interaction with the Helix API to validate room access conditions set by the streamer.
Google LLC (Google AdSense): It is not currently used to serve ads. If enabled, it may process data for ad delivery, measurement, and personalization under the Google Privacy & Terms Policy.
PayPal: External platform for voluntary donations supporting the project. RondaGG never receives or stores banking details or credit card data.

8. Your Rights, Revocation & Data Deletion Instructions

You can revoke RondaGG's access to your Twitch account from your Twitch connections settings. You can also delete cookies and local storage from your browser settings.

In accordance with applicable data protection laws, you may request access, correction, erasure, or restriction of your personal data by writing to contacto@rondagg.com.

9. Protection of Minors

RondaGG is not directed to children under 13 years old (or the minimum legal age in your jurisdiction). Minors must have the express consent and supervision of a parent or legal guardian to use the platform. We do not knowingly collect information from minors.

10. Security & Contact

We implement industry-standard security protocols, including HTTPS (TLS) encryption, modern security headers (CSP, HSTS, X-Content-Type-Options), and cryptographic session protection.

For inquiries, questions, or requests regarding this Privacy Policy or advertising cookies, users can reach us at any time via official email: contacto@rondagg.com.