Player Privacy Guide

For players

When a game uses the Multiplayer API, the game's developer decides what data is collected and is responsible for your privacy rights — they are the controller. Michitai operates the backend infrastructure that hosts your player account, matchmaking and game data on the developer's instructions.

Depending on the game, the backend may process your player name or ID, SteamID, room and matchmaking state, chat and game progress, and technical connection data. The games themselves contain no advertising; ads appear only on the michitai.com and api.michitai.com websites in a browser.

To exercise rights (access, correction, deletion, portability), contact the game developer first — their privacy notice tells you how. If you can't reach them, email support@michitai.com and we'll route the request.

For developers — what you must publish

If your game uses this API, you need your own player-facing documents. At minimum:

• A privacy notice naming you as controller, listing the data you send to us (player names, SteamIDs, game state, chat, connection data), purposes, retention, and players' rights — plus naming Michitai (Nichita Levandovici, Moldova) as your backend processor;
• Store/platform disclosures matching reality — Google Play Data Safety, Steam privacy settings, Microsoft declarations must reflect the data your build actually collects;
• Consent flows where your game collects optional data or is used by children — under-13 players require a separate written arrangement with us, not just a checkbox;
• Terms/EULA for your players covering acceptable use, moderation and account actions;
• A working deletion path — if your notice promises account deletion, provide a real mechanism (in-game or support contact) and honour it, including data we hold for you.

The Data Processing Terms govern how we handle your players' data. Our Privacy Policy covers our website and your developer account — it is not a substitute for your own player-facing notice.