chichi.quest / privacy LEGAL

Privacy Policy

Last updated: July 14, 2026

Chichi ("we," "us") runs chichi.quest and beta.chichi.quest, a service that randomly pairs people over live video to play multiplayer board games together. This page explains what information we collect, why, and what control you have over it.

Who Can Use Chichi

Chichi is intended for users aged 18 and over. We do not knowingly collect data from anyone under 18. If you believe a minor is using Chichi, contact us at info@chichi.quest and we'll remove the account.

What We Collect
Account info When you sign in with Google, we receive your name, email address, and profile photo from your Google account (via Google OAuth / django-allauth). We don't receive your Google password.
Video & audio Calls are peer-to-peer (WebRTC). Your video/audio stream goes directly to your matched partner's browser, or through our TURN relay server (turn.chichi.quest) only when a direct connection isn't possible. We do not record, store, or review call content.
Gameplay data Which games you play, moves made during a match, and match outcomes, used to run the game and for basic product analytics.
Beta signup email If you leave your email to be notified about upcoming test rounds, it's submitted through Formspree and used only to contact you about Chichi beta sessions.
Feedback & bug reports Feedback and bug reports are submitted through Google Forms and stored in a Google Sheet we control. Whatever you type into those forms (and any screenshots you attach) is what we receive.
Technical data IP address, browser type, and device type, collected automatically for matchmaking, security, and debugging (standard web server logs).
Cookies / local storage Used to keep you signed in and remember basic preferences. We don't use tracking cookies for advertising.
How We Use It

We do not sell your personal data, and we do not use it for third-party advertising.

Third-Party Services We Use

These services process some data on our behalf, each governed by their own privacy policy:

Google OAuthSign-in. Governed by Google's Privacy Policy.
Google FormsFeedback and bug report collection. Governed by Google's Privacy Policy.
FormspreeBeta notification email capture. Governed by Formspree's Privacy Policy.
Amazon Web Services (AWS)Hosts our servers (EC2) and TURN relay. Governed by AWS's Privacy Policy.
Data Retention

Account data is kept while your account is active. Call content is never stored, it exists only for the duration of the live connection. Feedback, bug reports, and beta signup emails are kept until we no longer need them for the purpose they were collected for, or until you ask us to delete them.

Your Rights

You can ask us to:

To do any of this, email info@chichi.quest.

Security

We use standard safeguards (HTTPS, access controls on our servers and admin tools) to protect your data. No system is perfectly secure, and we can't guarantee absolute protection against all threats.

International Users

Our servers are hosted on AWS infrastructure, which may be located outside your home country. By using Chichi, you understand your data may be processed in a different jurisdiction than where you live.

Changes To This Policy

We may update this policy as Chichi changes. We'll update the "Last updated" date at the top of this page when we do. Material changes will be flagged more visibly (e.g. a notice on the site).

Contact

Questions about this policy or your data: info@chichi.quest.