[PRIVACY.SYS]
PVP is run by Last Digit Games ("we"), who decide how your data is used and are the contact for any request. Email support@lastdigitgames.com. You do not need an email address or a password to play, and we collect as little as the game needs to work.
What we collect
- A device identifier and secret. A random id the app generates on your device, and a secret that proves later requests come from the same install. This is how a guest account stays yours.
- A generated player name and chosen avatar. Your name is assigned by the game, not taken from you.
- Gameplay data. Matches played and won, your answers and how fast you gave them, XP, level, achievements, owned cosmetics and your emote loadout. Opponents can see your name, avatar, level and achievements.
- Crash and error reports. If the app or our server fails, a report is sent with technical details such as device model, Android version and app version. We use Firebase Crashlytics in the app and Sentry on the server.
- Server logs. Our host records requests, including your IP address, for security and debugging.
We do not collect your name, email, contacts, location, photos or microphone data. We do not show ads or sell your data.
Why
To run matches and matchmaking, keep your progress, show your profile to opponents, prevent cheating and abuse, and fix crashes.
Who processes it
- Fly.io hosts the game server and its database (Frankfurt, EU).
- Google (Firebase Crashlytics) receives crash reports from the app.
- Sentry receives error reports from the server.
- Google Play handles purchases if and when the game sells them; we receive confirmation of what you bought, not your payment details.
Legal basis (EU/UK users)
We process your data to provide the game you asked to play (contract), and for our legitimate interests in keeping it secure, fair and working, such as preventing cheating and fixing crashes. We do not rely on consent for any of it.
Transfers outside the EU
Google (Crashlytics) and Sentry may process crash and error reports in the United States. Where they do, the transfer relies on standard contractual clauses or an adequacy framework those providers maintain.
How long we keep it
Account and gameplay data is kept until you delete your account. Crash and log data is kept for the retention period of the service that holds it, and is not linked to your player name.
Security
All traffic between the app and our server is encrypted (HTTPS). Your device secret is stored on your device and only a hash of it is kept on our server. No system is perfectly secure, so we cannot guarantee absolute security.
Cookies and tracking
The app uses no advertising identifiers, no cross-app tracking and no cookies. The pages on this site set none either.
Your choices
You can delete your account in the app (Profile, then Settings, then Delete account) or by following these steps. Deleting removes your player record, stats, achievements, cosmetics and purchases. Finished matches stay so your opponents keep their history; there your side appears as "UNKNOWN". If you are in the EU/UK you may also ask us for a copy of your data or to correct it, by email.
Under EU/UK law you can also ask us to restrict or stop using your data, or to move it elsewhere, and you can complain to your local data protection authority. Because accounts are guest accounts, we may need details only you would know before we act on a request.
Children
PVP is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child has an account, email us and we will delete it.
Changes and contact
If this policy changes we will update the date above. Questions: support@lastdigitgames.com.