Privacy Policy

Last updated: June 2026

1. Who we are

SumoVolley.io is a free online multiplayer browser game operated by PlayBoxx Games. If you have any questions about this policy, contact us at contact@sumovolley.io.

2. What we collect

When you register an account:

• Username — chosen by you. It does not have to be your real name.
• Password — stored as a one-way bcrypt hash. We cannot read your password.

When you play:

• Game statistics: rating (ELO), wins, losses, draws, games played, highest jump score, win streaks
• Preferences: display theme, language, avatar selection
• Account creation date

Temporarily during your session:

• IP address — used only to prevent abuse (e.g. too many login attempts). Not stored long-term.

Only if you submit a password reset request:

• Optional email address — used only to contact you. Deleted after the request is resolved.

3. What we do not collect

• Your real name, date of birth, or home address
• Chat messages — public and private chat is not stored on our servers. Messages disappear when your session ends.
• Payment information — SumoVolley.io is entirely free to play
• Persistent location data

4. How we use your data

• To manage your account and save your game progress
• To display the leaderboard (username and rating only)
• To enforce the game rules (moderation, bans)
• To respond to password reset requests

We do not use your data for advertising or marketing.

5. Who can see your data

• Other players can see your username, rating, and avatar in the leaderboard and player list
• Administrators and moderators can access account information for rule enforcement
• We do not sell, share, or trade your data with any third parties

6. How long we keep it

• Your account data is kept for as long as your account exists
• When you delete your account, all your data is removed immediately. Your username is reserved for 14 days to prevent impersonation, then fully and permanently deleted
• Password reset requests are removed after they are resolved

7. Your rights (GDPR)

If you are in the EU or EEA, you have the following rights — all exercisable directly inside the game:

• Access & portability: Download all your data via My Account → Export My Data
• Deletion (right to be forgotten): Delete your account via My Account → Delete Account
• Opt-out of private messages: My Account → Privacy Settings → Accept Private Messages
• Opt-out of game challenges: My Account → Privacy Settings → Accept Challenges

To ask a question or exercise a right that is not available in the game, email us at contact@sumovolley.io. We aim to respond within 30 days.

8. Cookies

We use a single session cookie to keep you logged in. This cookie:

• Is HttpOnly — cannot be read by JavaScript
• Is SameSite=Lax — protects against cross-site request forgery
• Is only sent over HTTPS in production
• Expires when your browser session ends

We use no advertising cookies, no analytics cookies, and no third-party tracking. Because our session cookie is strictly necessary for the service to function, no cookie consent banner is required under EU law.

9. Third-party services

• Twemoji (© Twitter, Inc., licensed under CC BY 4.0) — used to display emoji consistently across browsers. Emoji graphics are loaded from cdn.jsdelivr.net
• Google Fonts — used to load the Sora typeface. Font requests go to fonts.googleapis.com and fonts.gstatic.com

These are the only external services your browser contacts when using SumoVolley.io.

10. Age requirement

You must be at least 16 years old to create an account. By registering, you confirm that you meet this requirement. If we learn that an account belongs to someone under 16, we will delete it.

11. Security

Passwords are hashed with bcrypt before storage — we cannot recover them. Data files are written atomically to prevent corruption. Session cookies are HttpOnly and scoped to this domain.

12. Changes to this policy

We may update this policy from time to time. The date at the top of this page shows when it was last changed. Continuing to use the service after a change means you accept the updated policy.

13. Contact