Dice of Discord privacy policy
Dice of Discord is a multiplayer dice game for Android and iOS. Elena Lapina develops and runs the game and is the controller of the data described here. This policy explains what the game collects, why, and how long it keeps it.
No account of our own, no ads, no tracking
The game has no accounts of our own and never asks you to create one with us. It has no sign-in screen of its own. It can use the game service of your platform, as described below. It shows no advertisements, contains no analytics, does not track you across apps or websites, and does not sell or share your data for advertising. It does not access your location, contacts, photos, camera or microphone.
What the game collects
- Player name. Before you join a game you type a name of 1 to 16 characters, or keep the one the app prefills from your platform game service (see below). The game sends it to the game server, and the server shows it to the other players in the same lobby. Choose a name that does not identify you if you prefer.
- Game session identifiers. When you join a lobby, the server creates a random player identifier and a seat token so you can return to your seat after a network failure. The lobby code, your moves and the board state are part of the game itself.
- Network address. Your device connects to the server over an encrypted connection. The server uses the connection address in memory only, to limit abuse, and does not write it to its logs.
- Crash reports. If the release version of the app crashes or freezes, it sends a crash report to Sentry. A report contains the error and stack trace, the app version, the device model, the operating system version and a random identifier of the app installation. The app is configured not to attach personal data such as your player name to crash reports.
Game services of your platform
The game works with Google Play Games Services on Android and with Apple Game Center on iOS. Both are optional. If you are not signed in, the game plays exactly the same, without achievements and without a prefilled name.
- Google Play Games Services. If you are signed in to Play Games on your device, the app connects to it when it starts. If you are not and you open the achievements, the app asks Play Games to sign you in. The app reads your Play Games display name and puts it, cut to 16 characters, into an empty name field. When you earn an achievement, the app sends the unlock, or the steps added to a counted achievement, to Google.
- Apple Game Center. When the app starts, it asks Game Center to sign you in, and iOS may show its sign-in sheet. The app reads your Game Center alias and puts it, cut to 16 characters, into an empty name field. It also reads your Game Center player identifier and loads your achievement progress from Game Center. When you make progress on an achievement, the app sends Apple your progress on it as a percentage. The app uses the player identifier only on your device, to keep your progress apart from that of another Game Center player on the same device.
The game server never receives your platform player identifier, a platform token or your avatar.
Google and Apple keep your achievements in your own Play Games or Game Center account. They process this data as independent controllers under their own terms and privacy policies, not on our behalf: the Google privacy policy and the Apple privacy policy. They may also record that you play this game.
To stop sending achievement data, on Android turn off automatic sign-in to supported games or sign out of games in the Play Games settings, and on iOS sign out of Game Center in the Settings app. The game then stops sending achievements and no longer reads your display name. A name already in the name field stays on your device until you change it. Data that Google or Apple already hold is deleted through the account tools of Google or Apple.
What stays on your device
The app stores your player name, the seat of your current game and your sound and vibration settings on your device, so you do not have to type the name again. On iOS, the app also stores the number of steps towards each achievement, together with your Game Center player identifier. Uninstalling the app removes them, and on Android clearing the app's data removes them too. A device or cloud backup, such as an iCloud backup, may keep a copy.
How long the data is kept
- The game server keeps the player name, the session identifiers and the game state in memory only, while the lobby exists. When the lobby ends, the server forgets them. Nothing is written to a database.
- The server log records lobby events, such as a lobby code being created or a match ending. It contains no player names and no network addresses.
- Sentry keeps crash reports for up to 90 days and then deletes them.
Why the data is processed
The player name and the session identifiers are needed to run the game you asked to play. The game service data is processed to provide the achievements and the prefilled name that you get by signing in to the service of your platform. Both are processed on the basis of providing the service you asked for (Art. 6(1)(b) GDPR). Crash reports are processed on the basis of our legitimate interest in finding and fixing defects (Art. 6(1)(f) GDPR).
Service providers
- Railway hosts the game server in a European region.
- Sentry processes crash reports in its data centre in Germany.
Both act on our behalf under a data processing agreement and do not use the data for their own purposes.
Transfers outside Europe
Both providers are companies based in the United States. The data is stored in Europe, but the providers may access it from outside the European Economic Area. Such transfers rely on the EU–US Data Privacy Framework or on the Standard Contractual Clauses of the European Commission.
Security
All traffic between the app, the game server and Sentry is encrypted with TLS. Only the developer has access to the crash reports and the server log. No system is perfectly secure, but the game keeps as little data as it can, for as short a time as it can.
Disclosure
We do not give your data to anyone except the service providers above. If you use the game service of your platform, the app sends the data described above to Google or Apple. We may disclose data when the law requires it, for example in response to a court order, or when it is necessary to protect the safety of players.
Your rights
Under the GDPR and similar laws you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data erased;
- restrict the processing of your data;
- receive your data in a portable format;
- object to processing based on our legitimate interest.
Because the game has no accounts of our own and forgets session data when a lobby ends, there is usually nothing on the server to return or delete. Your achievements are held by Google or Apple in your platform account, so a request about them goes to Google or Apple. To exercise a right, to ask about crash reports or with any other question, write to the address below. We answer within one month.
You may also complain to a data protection authority. The European Data Protection Board lists the authorities of the EU member states, and the Information Commissioner's Office covers the United Kingdom.
Children
The game is not directed at children under 13, and we do not knowingly collect personal data from them. If you believe a child has sent us personal data, contact us and we will delete it.
Changes
If the game starts to collect other data, this page will change before the new version of the app is released, and the effective date above will change with it.