Email, gamertag and game records.
Store and RevenueCat processing.
Access, correction and deletion.
01Who is responsible for your data
This Privacy Policy explains the personal data processed when you visit the DotWars website, create an account, play, buy dots or contact us. The data controller is:
[LEGAL_OPERATOR_NAME]
[BUSINESS_POSTAL_ADDRESS]
[BUSINESS_REGISTRATION_DETAILS]
Privacy and account requests: [CONTACT_EMAIL]
“We”, “us” and “our” mean this operator. Apple, Google and some other providers also process information under their own privacy policies for purposes they determine themselves.
02What we collect and why
We receive information you enter, records created by your use of the game, technical information sent by your device and purchase confirmations from the relevant store and RevenueCat.
Account and login information
Email address, gamertag, account ID, selected country, authentication records and password-reset information. These let us register you, authenticate you, recover access and maintain your account.
Legal basis: performing our contract with you; legitimate interests in preventing unauthorised access.
Gameplay and dot balances
Boards you create or join, chosen sides, dot placements and captures, timestamps, results, rankings, streaks, rewards, and free and paid balances. These records keep shared battles consistent and calculate your progress.
Legal basis: performing our contract; legitimate interests in maintaining reliable game records and public competition features.
Invitations and referral activity
Your invite code, the code used when registering, the inviter–invitee link, and the activity needed to qualify for a reward. These let us operate referrals and prevent duplicate or fraudulent rewards.
Legal basis: performing the referral feature you choose to use; legitimate interests in preventing abuse.
Purchase records
Store transaction references, product and pack identifiers, purchase status and time, price and currency where supplied, and an identifier linking the purchase to your DotWars account. We use these to validate orders, credit dots, resolve purchase problems and understand purchase performance. Store checkout handles your payment credentials; we do not receive your full payment-card number from that checkout.
Legal basis: performing your purchase contract; legal obligations for required records; legitimate interests in fraud prevention and limited purchase reporting. Consent applies where legally required for optional tracking.
Technical and security information
IP address and connection/request information used by our infrastructure, including timestamps and rate-limit events. These help deliver the service and limit attacks, automated abuse and repeated login attempts.
Legal basis: legitimate interests in service security and reliability.
Support messages
Your contact details, the contents of your request and information needed to investigate it, such as a transaction reference. Do not send passwords, complete card details or unnecessary sensitive information.
Legal basis: performing our contract for service issues; legal obligations for rights requests; legitimate interests in resolving other enquiries and disputes.
Information needed to create an account, authenticate you or fulfil a purchase is necessary for those features. You can leave an optional invite code blank. Without required information, we may be unable to supply the related feature.
[ADDITIONAL_DATA_AND_SDK_DISCLOSURES]
03What other players can see
Boards, their sides, scores, dot patterns and completed results can be viewed by other people, including guests. Gamertags and relevant game statistics can appear in player rankings and game activity. Your chosen country is used for country-based statistics.
If you register through another player’s invite code, the inviter can see your referral entry and whether the qualifying activity has been completed. Your email address, login credentials and payment details are not part of the game’s public display.
Choose a gamertag that does not reveal information you want to keep private. A country or side choice is a game selection, not verified nationality or a declaration of real-world beliefs.
04Service providers and other recipients
Providers receive information needed for their role. They act on our instructions where they are our processors; independent processing, such as store billing, is governed by the provider’s own obligations and notices.
- RevenueCat: purchase validation, account-linked purchase records and purchase reporting. The SDK also processes technical information such as device type, operating system and last-seen activity. RevenueCat processes this end-user information on our behalf. See RevenueCat’s Privacy Policy.
- Apple App Store or Google Play: checkout, transactions, store receipts and refunds for purchases made through that store. See Apple’s privacy information and Google’s Privacy Policy.
- Resend: delivery of account emails such as password-reset messages, using your email address and the information needed to send the message. See Resend’s Privacy Policy.
- Hosting, database and website infrastructure: [HOSTING_DATABASE_AND_OTHER_PROCESSORS].
We may disclose relevant information to professional advisers and authorities when legally required or reasonably necessary to establish or defend a legal claim. A business transfer involving DotWars may also require a limited transfer of relevant records, with notice and safeguards where required.
[ANALYTICS_ADVERTISING_AND_DATA_SALE_STATUS]
05Cookies, local storage and permissions
DotWars uses device or browser storage to keep the service working and remember choices, including your preference about confirming paid-dot spending on a particular battle. These preferences may be specific to your device.
[COOKIE_SDK_AND_PERMISSION_DETAILS]
Where an optional technology requires consent, it must remain off until you agree, and you must be able to withdraw that consent. Accepting the Terms and Conditions is not consent to optional advertising or analytics.
06International processing
Service providers may process data outside your country. The relevant processing locations and, where required, transfer safeguards are:
[PROCESSING_LOCATIONS_AND_TRANSFER_SAFEGUARDS]
For transfers from the EEA to countries without an applicable adequacy decision, we use a lawful transfer mechanism, such as approved contractual safeguards, with supplementary measures where required. You can contact us for information about the safeguards that apply to your data and how to obtain a copy.
07How long information is kept
Retention depends on the purpose and the records involved. We do not keep identifiable information indefinitely just because storage is available.
- Account and linked gameplay records: while needed to operate your account, followed by deletion or removal of account links when you delete it, subject to the limited exceptions below.
- Purchase and accounting records: for the period required by applicable tax or accounting law and, where necessary, to resolve a specific refund, fraud investigation or legal claim.
- Security records: for the period needed to identify and investigate abuse, followed by deletion or aggregation unless a particular incident requires longer retention.
- Support requests: until resolved and for a justified period needed for follow-up or applicable legal claims.
- Backups: until overwritten under the backup retention schedule. Retained backups are not used to reactivate a deleted account.
[RETENTION_PERIODS_AND_BACKUP_SCHEDULE]
Board dots may remain without an owner to preserve shared game state. Removing an owner reference alone does not automatically make every related record anonymous; any remaining personal data continues to be subject to this policy.
08Delete your account and data
You can request deletion even if you have uninstalled DotWars.
In the app: [IN_APP_DELETION_PATH]. The current account-deletion flow requires your password to confirm the request.
Without the app: email [CONTACT_EMAIL] with the subject “Delete my DotWars account”. Send the request from your registered email where possible and include your gamertag. We may take reasonable steps to verify that the account is yours. Never send your password.
Deleting the app alone does not delete your account. Account deletion ends access to your profile, game progress and balances. Placed dots remain on shared boards without an owner.
We delete associated personal data that is no longer needed and ask our processors to do the same. Limited records may be retained where required by law or necessary for a specific security issue or legal claim, as described above. Apple and Google may retain their own purchase records under their policies and legal duties.
We respond to GDPR requests without undue delay, normally within one month. Where the law permits an extension for complexity or the number of requests, we explain the reason and timing within that first month. This response period is not a promise that every legally retained record or backup is erased immediately.
09Your privacy rights
Depending on the law that applies, you may ask to access your data, correct it, erase it, restrict its use or receive eligible data in a portable form. You may object to processing based on legitimate interests and withdraw consent for consent-based processing without affecting earlier lawful use.
Contact [CONTACT_EMAIL]. We normally handle requests without charge and may ask for proportionate information to verify your identity. Rights have legal exceptions; if we cannot fulfil a request, we explain why and your options.
You may complain to your local data protection authority. In Poland, this is the President of the Personal Data Protection Office (UODO): uodo.gov.pl/en. You do not have to contact us before exercising your right to complain.
The game automatically calculates scores, outcomes, rankings, rewards and rate limits. [AUTOMATED_ACCOUNT_DECISIONS_STATUS]
10Children and younger players
[AGE_ELIGIBILITY_AND_CHILD_DATA_RULE]
If you believe a child has created an account contrary to the eligibility rules or supplied data without required parental authorisation, contact [CONTACT_EMAIL] so we can investigate and take appropriate action.
11Security and policy changes
We use access controls and other safeguards appropriate to the service, including controls against repeated login and registration attempts. No online service can guarantee absolute security. Keep your login details private and report suspected unauthorised access to [CONTACT_EMAIL].
We may update this policy when our processing or legal obligations change. The published version will show its effective date. We will communicate material changes and obtain consent before new processing where consent is required. A privacy-policy update alone does not authorise a new use of your data.