Privacy Policy
Effective Last updated
Open Premier Sports makes Open Premier Cricket (“OP Cricket”). This policy explains, product by product, what we collect, why, who else handles it, how long we keep it and how you can have it deleted. We wrote it from the code our products actually run.
Who we are. Open Premier is run by Santosh A, India (“Open Premier”, “we”, “us”). We are responsible for the personal data described here: its “controller” under the GDPR and UK GDPR, and its “data fiduciary” under India’s Digital Personal Data Protection Act. Questions, requests and complaints: support@openpremier.app.
The short version
- The store apps (iPhone and iPad, Android, Windows, macOS, Linux) are offline. They collect nothing, send nothing and contain no network code.
- The web game at cricket.wagmi11.com works without an account. It sends an anonymous count of each solo game, which you can turn off. The game’s site sets no cookies and has no ads, analytics or trackers; signing in for online play uses two strictly necessary cookies on id.wagmi11.com.
- Online play needs Sign in with X. From X we keep only your X user id and username: never your password, email, posts or X tokens.
- In India, online play is for adults: you confirm you’re 18 or over before Sign in with X. Offline and solo play are open to everyone.
- Other online players see your @username, rating and results.
- You can delete your account at any time at https://id.wagmi11.com/delete. Your name, rating and results leave the game at the same time.
- We never sell your data or use it for advertising.
1. The store apps
The Open Premier Cricket apps from the app stores play against the computer only: Quick Match, the batting and bowling nets, and the commentary. They collect no data and open no network connections. They are built without any network code, and every build is checked for it: no networking or encryption libraries and no network system calls. On top of that, the Android app asks for no permissions at all (not even internet access), and the Mac App Store version runs in Apple’s sandbox without network access.
Your settings (difficulty, controls, camera, volumes, captions and so on) are saved in a small file on your device and nowhere else:
- iPhone, iPad and Android: in the app’s private storage. Deleting the app deletes them.
- Windows:
%APPDATA%\OpenPremierCricket - macOS:
~/Library/Application Support/ OpenPremierCricket - Linux:
~/.config/open-premier-cricket
Your device’s own backups (for example iCloud or Google backup) may include this file, under your settings with those services.
The store itself. Apple, Google, Microsoft, Valve (Steam) and itch.io handle your download under their own privacy policies. If you have agreed to it in your device settings, a store may share crash reports or usage statistics with developers. These don’t tell us who you are, and we use them only to fix problems.
Builds from the source code. If you build the game yourself with online play turned on, it can do what the web game does (below). A self-built desktop game only sends play counts if you point it at a server on purpose.
2. The web game (cricket.wagmi11.com)
2.1 Playing without an account
You don’t need to sign up to play in your browser. The page loads only from our own site: no third-party scripts, fonts, ads, analytics or trackers, and cricket.wagmi11.com sets no cookies. Your settings last for the visit, except for these few things your browser keeps:
| Browser storage | What it holds | How long |
|---|---|---|
opc. (localStorage) |
off, only if you turned anonymous play counts off |
Until you clear your browser data |
crease. (localStorage) |
That you’ve seen the ranked rules card | Until you clear your browser data |
crease. (sessionStorage) |
An unfinished online match you can rejoin after a reload: the server, your account id and name, the match or room, your seat and the format | Until the tab closes (ignored after 3 hours) |
crease., crease. (sessionStorage) |
Where to go back to after signing in, and when you left | Until the tab closes |
crease-rotate-dismissed, crease-reloaded:… (sessionStorage) |
That you closed the “rotate your phone” hint; that the page already reloaded once after an update | Until the tab closes |
Like any website, our host Cloudflare receives the technical details of each request (see section 6).
2.2 Anonymous play counts
When you play a solo game against the computer in the browser, the game sends a small anonymous record so we can count how often and how long the game is played. It holds:
- the format (T2, T5, T10 or T20);
- how long ago the game started, and the seconds of active play (time paused, behind a help card or with the tab hidden doesn’t count);
- whether you finished the game or quit;
- a random game number, made fresh for each game and then thrown away.
It is sent at the end of each solo game, and when you hide or leave the tab in the middle of one. It goes only to the game’s own server, without cookies, referrer or any id. The server stores the format, the start and end times from its own clock rounded to the minute, the active time, whether the game was finished and how many sends it merged.
Not sent or kept: no account, no X handle, no device or install id, no cookies, no browser details. Your IP address (for IPv6, its /64 network) is used only to limit how many records one network can send per minute; our code doesn’t store or log it. If a send fails, our code logs the error, and Cloudflare’s log of that message can include the request’s details, such as your IP address, for 7 days (section 6).
How long: records are deleted 13 months after the game.
Turning it off: in the game, Settings → Anonymous play counts → Off (this browser remembers the choice); or turn on Global Privacy Control in your browser, which the game respects (the setting then shows “Off (browser setting)”). Turning it off mid-game stops that game’s sends; a part-record already sent stays until it is deleted at 13 months.
The phone and tablet store apps never send play counts.
2.3 Online play
Online play (casual matches, friend rooms and open games, ranked and the leaderboard) needs an Open Premier account, made with Sign in with X (section 3). Once you’re signed in, the game server keeps:
| What | Details |
|---|---|
| Your player record | Your account id (a random number from the sign-in service); your display name (your @username, refreshed each time you go online); when you first and last went online; your rating (three Glicko-2 numbers); rated games, wins, losses and draws; how many different opponents you’ve had; when you last played ranked; the ranked match you’re in; any ranked cooldown; fair-play strikes; any ban from online play |
| Match records | For each finished online match: the two players’ account ids (or that a seat was the computer), the queue (casual, ranked or private) and format, the result, the number of balls, how many balls were played automatically after a timer ran out, the start and finish times, and the match’s random seed (revealed at the end so the result can be checked) |
| Ranked history | For each ranked match: your opponent’s account id, your seat, whether it was rated (and if not, why), the score, and your rating before and after |
| Cooldown history | Each ranked cooldown for leaving or not turning up, and its length |
While you’re connected the server also holds, temporarily: which regional lobby you’re in (from your continent), whether you’re queued, the live match (your inputs, ball-by-ball events and connection quality) and the ranked network check below. This goes when you disconnect, or about 30 minutes after the match ends.
The ranked network check. Two players on the same network can’t be paired in ranked, and if they meet anyway the match isn’t rated. To check this, the server turns your IP address (for IPv6, its /64 network) and your network provider’s number (ASN) into a short scrambled code using a secret key. The code can’t be turned back into your IP address without that key. It is kept only with your live connection and match, never in our database, and is gone about 30 minutes after the match.
What other players see: your @username and rating (marked provisional while you’re new) in matches, rooms and versus screens; your username as the host of a public room you open; and, on the leaderboard (shown only to signed-in players), your rank, @username, rating, games, wins, losses and draws, once you’ve played at least 10 rated games against at least 5 different opponents, one of them in the last 30 days. Ranked hides your opponent’s name until you’re both in the match. People watching a match see the players’ names.
How long: your player record, match records, and ranked and cooldown history are kept while the online game runs, so that ratings and the leaderboard stay correct, or until you delete your account, when they are erased (section 3.5).
3. Your Open Premier account (Sign in with X)
Online play uses our sign-in service at id.wagmi11.com. Its pages say “wagmi11 accounts”: wagmi11 is the platform our games run on. We run it ourselves.
3.1 What we get from X
When you choose Sign in with X, you sign in on X’s own site and approve our app. X then sends us your X user id (a number), your X username and your X display name. We keep only the user id and the username, and nothing else from X.
In India, you confirm you’re 18 or over first. If you choose Sign in with X from India (as Cloudflare places you from your IP address), we first ask you to confirm that you are 18 or over. Only if you confirm do we send you on to X; if you don’t, you aren’t signed in and can keep playing without an account. Everyone else goes straight to X. We don’t keep your answer or your country: your answer travels only in the sign-in link, works for 10 minutes, and only in the browser where you gave it (section 3.3). See section 11.
- X’s approval screen lists “read posts” and “read profile” because X requires both for the single “who is this?” request we make. We make that one request and throw X’s access away straight after: it is never stored or logged, and we don’t ask for ongoing (offline) access. We can’t post for you, read your posts, see who you follow or send messages.
- We never see your X password, your email address or your contacts.
- X learns that you signed in to our app. Your X account is covered by X’s own privacy policy (https://x.com/en/privacy).
3.2 What the sign-in service keeps
| What | Details |
|---|---|
| Your account | A random account id, when it was made, your @username, the account type and its status (active, banned or deleted) |
| Your X link | Your X user id, and when you first and last signed in with X |
| Your sign-ins (sessions) | For each sign-in (up to 20 at once): the kind of app (“web”), how you signed in (X), when you signed in, when it expires, and whether and why it ended (signed out, replaced, account deleted, security). While you play online, your sign-in is renewed about every 15 minutes, and each renewal adds a record with a one-way hash of the new sign-in token (never the token itself) and the time. After a day, each renewal record keeps only its date, so for up to about 90 days these records show on which days you played online |
| Sign-in attempts | While you’re away at X: hashed one-time codes, a code verifier and the game page to come back to. Deleted when you return, or after 10 minutes |
| Abuse counters | How many times each X account signed in today, keyed by a one-way hash of its X user id, and overall totals. Deleted after 2 days |
While you’re signed in, the game receives a 15-minute access token signed by the sign-in service, holding your account id, display name, account type and session id. The game server checks it itself and doesn’t store it.
3.3 Cookies
The sign-in service uses two cookies. Both are strictly necessary for signing in, can’t be read by scripts, and are sent only over HTTPS and only to id.wagmi11.com:
| Cookie | Why | How long |
|---|---|---|
__Host-w11_ |
Keeps you signed in (your sign-in token, replaced each time it’s used) | Up to 90 days after you last played online; removed when you sign out or delete your account |
__Host-w11_ |
Makes sure only your browser can finish a Sign in with X it started. In India, it also ties your “18 or over” answer to this browser | 10 minutes from when you start signing in (in India, from when the sign-in page asks your age); removed when you come back from X, otherwise it simply expires |
There are no tracking or advertising cookies anywhere in our products. If your browser blocks these two, signing in won’t work.
3.4 How long
- Your account and X link: until you delete your account.
- Sign-in records: deleted a day after they expire, or about 30 days after they end (sign-out, account deletion or a security reset). Renewal records are kept until their token would have expired (up to about 90 days, with only the date after the first day), so that a stolen old token can be spotted.
- Sign-in attempts: 10 minutes. Abuse counters: 2 days.
3.5 Signing out and deleting your account
Sign out: in the game, Play Online → Sign out. This ends the session at the sign-in service and removes the cookie.
Delete your account: go to https://id.wagmi11.com/delete in the browser you play in, and confirm. If you signed in more than ten minutes ago, you’ll be asked to Sign in with X again first, so that nobody with an old session can delete your account.
In India, signing in again first asks you to confirm that you’re 18 or over (section 3.1). If you’re under 18, don’t confirm: email support@openpremier.app with your @username instead, and we’ll delete the account once we’ve confirmed it’s yours.
- At once: every sign-in on every device ends, the link to your X account is removed, and your @username is removed from the account (it shows as “Deleted user”). Signing in with X later starts a brand-new account.
- At once, in the game: your player record (your @username, rating, results, fair-play strikes and any ban) and your ranked and cooldown history are erased, so you leave the leaderboard (its cached copy catches up within a minute). In other players’ match and ranked records, your account id is replaced with “deleted”. If the game server can’t be reached at that moment, or a match you were still playing ends afterwards, our daily clean-up does this again every day for the next 30 days.
- Within about 30 days: the account record and its remaining sign-in records are erased by our daily clean-up.
Removing our app at X (Settings → Security and account access → Apps and sessions) only withdraws the approval you gave there. It doesn’t delete your Open Premier account, and we keep nothing from X that it could revoke: use the delete page. If you can’t sign in any more (for example, you lost your X account), email us and we’ll help once we’ve confirmed the account is yours.
4. Emailing us
When you write to support@openpremier.app, Cloudflare Email Routing forwards your message to our mailbox at Google (Gmail). We get your email address, your name if your email shows it, your message and any attachments. We use them only to answer you and fix problems, and we delete support emails within two years of the last message, unless we need them longer to deal with a legal claim.
5. This website (openpremier.app)
openpremier.app is an information site: no accounts, no cookies of its own and no analytics. Cloudflare hosts it (section 6).
6. Hosting, logs and security
Our websites, the game server and the sign-in service run on Cloudflare (Workers, D1 databases, Durable Objects and rate limiting). Like any web host, Cloudflare receives your IP address and the details of each request.
- Logs. Our online services keep Cloudflare’s Workers Logs for the short messages our code writes: errors, “signed in” with an account id and session id, “account deleted” with the account id, and counts. Cloudflare adds technical details of the request to each message, which can include your IP address, the approximate location Cloudflare works out from it, and your browser type. We have turned off Cloudflare’s separate log of every request, and the part of a web address after “?” (where game connections carry their one-time ticket) is removed before anything is logged. Our code doesn’t write your IP address, play-count records or tokens to the logs. Logs are deleted after 7 days.
- Rate limits. Your IP address (or, once you’re signed in, your account id) is used to count requests for about a minute, to stop floods and abuse. It isn’t stored with your account or records.
- Security cookies. Cloudflare may set a strictly necessary security cookie (such as
__cf_) if it needs to check for bots.bm
How we protect your data: HTTPS everywhere; sign-in tokens stored only as one-way hashes; cookies that scripts can’t read; access tokens that last 15 minutes; one-time, 60-second tickets for game connections; X’s access never kept; a recent sign-in required to delete an account; reuse of an old sign-in token ends the whole session; strict security headers on our pages; and rate limits. No system is perfectly secure. If a breach puts your data at risk, we’ll tell you and the authorities as the law requires.
7. Who we share data with
We don’t sell or rent personal data, share it for advertising, or use advertising or analytics tools.
- Cloudflare, Inc. hosts our websites, game server, sign-in service and databases, keeps our logs and forwards support email, on our behalf and under its data processing terms (https://www.cloudflare.com/privacypolicy/).
- X Corp. provides Sign in with X. You deal with X directly when you sign in; we send X a one-time code with our app’s credentials and receive your X user id, username and display name, of which we keep the id and username.
- Google hosts our support mailbox (Gmail) (https://policies.google.com/privacy).
- Other players see your @username, rating and results, as described in section 2.3.
- When the law requires it, or to protect people’s safety or our services, we may disclose data to the authorities. If the project ever changes hands, we’ll tell you first, and this policy will keep applying to your data.
Google Gemini. Before release we used Google’s Gemini to voice the pre-written commentary and to make the menu music. No player data was involved, and nothing is generated while you play.
8. International transfers
We’re based in India, and Cloudflare runs a global network, so your data may be processed in the United States and in other countries where Cloudflare operates, including countries outside your own. Live matches run in a Cloudflare data centre near the players. For people in the EEA, the UK and Switzerland, transfers to Cloudflare are protected by its data processing addendum, which includes the EU Standard Contractual Clauses and the UK addendum, and by Cloudflare’s certification under the EU-U.S. Data Privacy Framework and its UK and Swiss extensions. X and Google are based in the United States; when you sign in with X or email us, they handle your data under their own policies.
9. Why we’re allowed to use your data
| Use | Legal basis (GDPR and UK GDPR) |
|---|---|
| Your account, online play, ratings and the leaderboard | Performing our agreement with you (the Terms of Use) |
| Fair play (network check, strikes, cooldowns, bans), rate limits, logs and security | Our legitimate interest in a fair, safe and working game |
| Anonymous play counts | Our legitimate interest in knowing how the game is played; you can turn them off at any time |
| Answering your emails | Our legitimate interest in helping you, and our agreement with you |
| Keeping records the law requires | Legal obligation |
The cookies and browser storage we use are all strictly necessary for what you asked for, so they don’t need consent. In India, we process your data for the purpose you gave it to us for (signing in and playing online), as the DPDP Act allows; you can stop at any time by signing out or deleting your account.
10. Your rights and choices
You can ask us to show you the data we hold about you, correct it, delete it or stop using it for a purpose, and you can opt out of play counts at any time. Email support@openpremier.app, or delete your account yourself (section 3.5). It’s free, and we’ll answer within one month. We may ask you to show that the account is yours, for example by signing in with X.
- EEA and UK: you also have the rights to restrict processing, to data portability and to object to processing based on our legitimate interests. You can complain to a data protection authority, such as the UK Information Commissioner’s Office (ico.org.uk) or the authority in your EU country.
- India (DPDP Act): you can get a summary of your data and how it’s processed; have it corrected, completed, updated or erased; have your grievances addressed; and nominate someone to act for you. Our grievance contact is Santosh A at support@openpremier.app (subject “Grievance”). If you’re not satisfied with our answer, you can complain to the Data Protection Board of India.
- Automated decisions: matchmaking, ratings, whether a ranked match is rated, cooldowns and strikes are worked out automatically by fixed rules. They have no legal or similarly significant effect on you, but you can ask a person to review one.
11. Children
The store apps collect nothing from anyone, children included, and the web game can be played without an account. Online play is not meant for children under 13: it needs an X account, and X requires its users to be at least 13. If you’re under the age of digital consent where you live, please only sign in with your parent’s or guardian’s permission. If we learn that a child under 13 has an account, we’ll delete it; parents can email us.
India. India’s DPDP Act treats everyone under 18 as a child, whose data needs a parent’s verifiable consent. Online play doesn’t collect that consent, so in India it is for adults only. When you choose Sign in with X from India (as Cloudflare places you from your IP address), you’re first asked to confirm that you are 18 or over, and you go on to X only if you do (section 3.1). Offline and solo play stay open to everyone, in India too: the store apps and the web game’s solo modes need no account and ask nothing about your age. If you’re under 18 in India, please play those. If we learn that an account belongs to someone under 18 in India, we’ll delete it; parents can email us.
12. Changes to this policy
When our products change what they collect, we’ll update this page and its effective date. If a change is significant, we’ll say so on openpremier.app and in the game before it takes effect.
13. Contact
Santosh A, India
Email: support@openpremier.app
Website: https://openpremier.app