Privacy Policy
Društvene Igre | Last updated: 2 November 2026
1. Who we are
This Privacy Policy explains how Društvene Igre collects, uses and protects your personal data when you play Chess, Ludo, Tablic, Rummy, Yamb and Belot on the website or in the Android app.
The data controller is:
- Name
- Dragan Mitrović PR
- Legal form
- sole proprietor (flat-rate taxation)
- Tax ID (PIB)
- 116011352
- Registration number
- 68824281
- Registered address
- Branka Krsmanovića 4, Niš, Republic of Serbia
- info@drustvene-igre.com
- Service
- www.drustvene-igre.com and the Društvene Igre Android app
We process data in accordance with the Personal Data Protection Law of the Republic of Serbia (Official Gazette RS no. 87/2018) and, for users in the European Union, the General Data Protection Regulation (GDPR, Regulation (EU) 2016/679).
2. What data we collect
We collect only the data needed to run the Service and play the games.
| Category | Data | Source |
|---|---|---|
| Account | nickname, email address, password (stored only as a one-way bcrypt hash, never readable), confirmation that you accepted the Terms of Service and this Policy, language | you, at registration |
| Profile | profile picture (if you set one), sound and notification settings | you |
| Games and progress | played games and results, statistics, leaderboard, token balance and premium status, daily bonus, quests, trophies | created as you use the Service |
| Social features | friends and friend requests, token gifts, club membership, players you blocked, who invited you to the Service | you and other players |
| Chat | messages you write in chat | you |
| Reports | a reported message with the surrounding messages, a reported nickname, picture or club, the reason and comment of the report | you as the reporter, or other players if they report your content |
| Contact | email address and message content | you, via the contact form |
| Payments | purchased package, amount, currency, date, order number, buyer's email | payment provider (we never see or store card details) |
| Technical data | IP address of your last sign-in, country derived from the IP address on our server, error and access logs, number of failed sign-in attempts | automatically, as you use the Service |
| Analytics (only with consent) | pages viewed and in-game events (e.g. sign-in, game start), device and browser type, approximate location, a pseudonymous identifier from a cookie | Google Analytics 4, only if you accept it in the cookie banner |
We do not collect special categories of personal data (e.g. health, religious or political beliefs). We do not use advertising. We use analytics (Google Analytics) only if you consent to it.
3. Why we process data and on what basis
| Purpose | Legal basis |
|---|---|
| Creating and running your account, games, leaderboard, friends, clubs | performance of a contract (Terms of Service) |
| Service emails: account confirmation, new-password link, notices about a password change and account deletion | performance of a contract |
| Tokens, premium and processing purchases | performance of a contract |
| Keeping payment records | legal obligation |
| Security: protecting forms from automated attacks (reCAPTCHA), limiting sign-in attempts, preventing cheating and abuse | legitimate interest |
| Moderation: reports, blocking players, chat bans, the automatic measures in section 4 | legitimate interest (community safety) and performance of a contract |
| Answering contact-form messages | legitimate interest |
| Analytics: how the games are used and what to improve | consent, which you can withdraw at any time |
We do not sell your data or share it with third parties for their advertising.
4. Automatic moderation measures
To keep the community safe, some measures are taken automatically, based on reports from other players:
- Chat ban: if your messages are reported three times within four hours, you cannot write in chat for 24 hours (three days if you have had a ban before).
- Nickname: if three different players report the same nickname within 30 days, it is changed to a neutral one ("Igrac-" followed by characters). You can change it again in your profile.
- Profile picture: if three different players report the same picture within 30 days, the default picture is restored. The reported picture is kept for review for the period in section 8.
These measures have no legal effects on you and do not affect your tokens, purchases or statistics. We receive and check every report. If you think a measure was wrong, write to info@drustvene-igre.com: we will review it and reverse it if it was a mistake.
7. Transfers to other countries
The server and email sending are in the European Union. Some data is transferred to the United States because Google and Meta operate there.
Such transfers rely on appropriate safeguards: the EU–US Data Privacy Framework where the provider is certified, or standard contractual clauses. For transfers from Serbia, Articles 63–69 of the Personal Data Protection Law also apply. You can request a copy of the safeguards at info@drustvene-igre.com.
8. How long we keep data and how we protect it
| Data | Retention |
|---|---|
| Account, profile, statistics, tokens, friends, club, blocks | while the account exists; deleted immediately when you delete the account |
| Details of a played game (moves) | 31 days |
| Game result in other players' history | also after your account is deleted, but with no link to you |
| Chat messages | not archived; the last five messages of a room are shown to people who enter it while the room exists |
| Reports (messages, nicknames, pictures, clubs) | 12 months |
| Daily quests | 30 days |
| New-password link | valid for 60 minutes and usable once |
| Sign-in on a device (session) | 14 days from last use |
| Number of failed sign-in attempts | 15 minutes |
| Contact-form messages | as long as needed to reply, at most 12 months |
| Payment records | as long as accounting and tax rules require; after account deletion without name, email or address |
| Server logs | 30 days |
| Analytics data (Google Analytics) | 14 months |
| Backups | 14 days; deleted data disappears from them within that time |
We protect data with an encrypted connection (HTTPS), password hashing (bcrypt), limits on sign-in attempts, bot protection on forms, restricted access to the server and database, and regular backups. No system is completely secure; if a data breach may put your rights at risk, we will inform you and the Commissioner without undue delay, as the law requires.
9. Your rights
You can exercise the following rights at any time:
- Access: to find out what data we process about you and receive a copy.
- Rectification: you change your nickname, picture and settings yourself in your profile; we correct anything else on request.
- Erasure: you delete your account and its data yourself, on your profile page ("Delete account" tab) or at drustvene-igre.com/delete-account. If you cannot sign in, send a request from the account's email address.
- Restriction: to temporarily restrict processing, e.g. while we check the accuracy of the data.
- Portability: to receive your data in a structured, machine-readable format.
- Objection: to processing based on legitimate interest, including the automatic measures in section 4.
- Withdrawing consent: for analytics, via "Cookie settings" in the footer; this does not affect the lawfulness of earlier processing.
Send requests to info@drustvene-igre.com from your account's email address. We reply within 30 days; for complex requests we may extend this by another 60 days and will let you know.
10. Minors
People aged 15 or over may use the Service on their own. Younger users may open an account only with the consent of a parent or guardian. If we learn that we collected a child's data without such consent, we will delete it.
11. Complaints to the supervisory authority
If you believe the processing of your data breaks the law, you have the right to lodge a complaint with the Commissioner for Information of Public Importance and Personal Data Protection (Bulevar kralja Aleksandra 15, 11000 Belgrade, www.poverenik.rs). Users in the EU may also contact the supervisory authority of the country where they live or work.
12. Changes to this Policy
We update this Policy when the way we process data changes. We will notify you of important changes by email or by a notice in the Service before they take effect. The date of the last update is at the top of the document.
13. Contact
For any privacy questions, write to us at info@drustvene-igre.com.