Compliance & Safety

Minimum age 13, or 16 in the EEA, the UK and other regions with a higher digital-consent age, unless a parent or guardian consents.

We follow a data-minimisation-by-default approach consistent with COPPA and the UK Age Appropriate Design Code: no behavioural advertising, no direct messaging, no public sharing of email addresses, and profile fields are optional.

Suspected underage accounts are closed and their personal data deleted.

User-generated content on Corridor is limited to usernames, short bios and avatar images. All three are subject to our acceptable-use rules.

Anyone can notify us of allegedly illegal content at support@playcorridor.com with a description, the location on the site, and a statement of good faith. We acknowledge notices, act without undue delay, and inform both the notifier and the affected user of our decision and the reasons for it.

Affected users may contest a moderation decision by replying to that notice; decisions are reviewed by a human who was not involved in the original action.

We are a small provider and are exempt from the DSA obligations that apply only to very large online platforms; the notice-and-action, statement-of-reasons and point-of-contact requirements above are applied regardless.

Corridor involves no stakes, no wagering, no purchasable competitive advantage and no chance-based monetisation. It therefore does not fall within gambling regulation in the EU, the UK, the US or comparable regimes, and no gaming licence is required.

Ratings and puzzle progress are cosmetic achievements with no cash value.

We build towards WCAG 2.2 AA: keyboard-operable play, visible focus states, colour choices tested for contrast, alternative text on meaningful images, and layouts that reflow down to small mobile screens.

Colour is never the only way information is conveyed on the board - the pawns, goal rows and last-move markers are also distinguished by shape and position.

If any part of the site is inaccessible to you, email support@playcorridor.com and we will prioritise a fix.

Traffic is encrypted with TLS. Database access is protected by row-level security policies so that a player can only read their own private records. Passwords are stored as salted hashes and never in plain text.

We run periodic security reviews and dependency scans. Vulnerability reports are welcome at support@playcorridor.com - please give us reasonable time to remediate before public disclosure, and do not access other users' data while testing.

Personal-data breaches are notified to the competent supervisory authority within 72 hours where required, and to affected users without undue delay when the risk to them is high.

We disclose user data only when compelled by a valid legal request from a competent authority, and we narrow the scope of what we hand over wherever possible.

The service is not available to users in countries subject to comprehensive sanctions where provision of online services would be unlawful.

Corridor is an independent implementation of an abstract strategy game. Our name, mascots, artwork, and code are our own. We are not affiliated with, endorsed by or sponsored by any board game publisher or trademark holder.

If you believe content on the site infringes your rights, send a notice with proof of ownership and the exact location to support@playcorridor.com and we will act promptly.