ChorSipahi: CursedVillage

Welcome to ChorSipahi: CursedVillage. This policy explains what data we collect, why we collect it, and how we handle it while you use our multiplayer game and account features.

• Account data: username, hashed password, email address, verification status.
• Email-auth data: signup verification OTP and expiry, password-reset OTP and expiry.
• Gameplay/session data: room state, role assignment, actions, votes, and in-game outcomes.
• Communication data: game chat and community direct messages.
• Support data: optional name/email/description submitted in bug reports and feedback forms.

New account registration requires email verification. During signup, we send a one-time password (OTP) to the provided email address and mark the account as unverified until OTP verification succeeds.

• The verification OTP is stored temporarily with an expiry timestamp.
• Unverified accounts cannot log in until verification is complete.
• If verification expires or fails, a new OTP flow may be required.

Password reset requires a matching username + registered email. If matched, we send an OTP email valid for a limited time. The OTP is required to set a new password.

• To create and secure user accounts.
• To verify signup email ownership and process password reset requests.
• To run game logic, matchmaking, and multiplayer synchronization.
• To provide community messaging and social features.
• To debug issues and improve stability/performance.

In this multiplayer game, many actions and chat messages are visible to other players in your session. Community direct messages are stored so conversation history is available in later sessions.

For deletion requests related to message data, contact support@cursedvillage.com.

We use browser storage for product functionality, such as:

• Session persistence (login/game rejoin context).
• Preferences (e.g., language selection).
• Walkthrough or UI state flags.

• Gameplay session data may be transient and can be cleared after game end/restart.
• Community direct messages are retained for continuity across sessions.
• OTP records are temporary and expire automatically.

We may rely on infrastructure/email providers (for hosting and OTP delivery). These providers may process data under their own privacy terms.

We do not knowingly collect personal data from children under 13. If you believe a child has shared personal information, contact us so we can take appropriate action.

For privacy, data removal, or policy questions, email support@cursedvillage.com.