MANABANANA · ANDROID GAME

Privacy policy

This policy applies to the Android app Der dunkle Turm (package org.deinewebsite.dunklerturm), including its Grimoire and Classic modes, and to this information page.

1. Controller and contact

Publisher: Marco Nannarone · manabanana.
For privacy questions and requests about your data, contact marco.nannarone@gmail.com.

2. Overview

You do not need a separate user account to play. The app contains no advertising and does not use an advertising ID. A local game does not send moves to the room server. Technical connections for updates and fonts are independent of this. Online play and voice chat are optional features.

The app does not access your address book, photos or GPS location. Google Play processes payment and account details for purchases, installations and promotional codes; the game does not ask for payment details.

3. Data on your device

The app stores settings such as language, volume and graphics, your chosen player name and randomly generated client identifiers in local app storage. These identifiers help you return to an online room after losing the connection. They are not Android advertising IDs.

This local data remains until overwritten or until you delete the app data. You can delete it through the app's storage controls in Android settings. Doing so may also remove your preferences and the association with your previous online seat. Deleting app data does not automatically delete data already sent to the server.

4. Online play and game statistics

When you join an online room, the app sends your chosen name, a client identifier, room and team assignments, connection status and game actions to our room server. The server calculates the shared game state and stores the lobby and game for play and reconnection. Other players see names, teams and the game events intended for them. Please use a nickname where possible.

For our own game statistics, the server also processes game mode, team composition, start, end, duration and outcome. In recorded games, participant identifiers are associated as hash values. These hashes are pseudonymous and are not treated as fully anonymous. Aggregate counters contain no player names and help us understand use of the game modes and how games progress.

The legal basis for the requested online game service is Article 6(1)(b) GDPR. Our game statistics support improvement and reliable operation of the game under Article 6(1)(f) GDPR. You may object on grounds relating to your particular situation; use the contact above.

5. Retention on the game server

• When all participants explicitly leave a room, its lobby and game state are reset. Empty lobbies without a running game are also reset when the last connection closes.
• If a connection is merely lost during a game, the state may remain available for reconnection. If nobody has been connected for more than 15 minutes since the last disconnection, the abandoned room is reset when someone next joins. There is currently no guaranteed scheduled deletion exactly after 15 minutes.
• Statistics retain at most the 100 most recent completed or abandoned game records. At the next cleanup triggered by completion or abandonment of a recorded game, or by an exclusion, records whose end was more than 24 hours ago are removed. Without such a subsequent event, records may remain longer. An active statistics association remains until the recorded end or exclusion.
• Aggregate game counters remain for longer-term analysis. They contain no names or individual participant identifiers. Technical exclusion identifiers stop having an effect after eight hours; stored expired entries are cleaned up at the next exclusion.

6. Optional voice chat

In Classic mode, you can enable voice chat. Microphone permission is requested only for this feature. Your voice is relayed live through the room server to other participants who have voice chat enabled. The application code does not store audio recordings; audio packets are processed only for immediate transmission. The transport connection is encrypted, but it is not end-to-end encrypted.

You can turn voice chat off or revoke microphone permission in Android. Processing is based on your consent (Article 6(1)(a) GDPR). Withdrawal applies to future processing. Other participants may repeat or record what they hear outside our control, so please do not share confidential information.

7. Hosting, updates and external fonts

Game servers, game files, updates and this page are provided through Cloudflare. Requests generate connection data such as IP address, time, requested resource and technical HTTP headers. Cloudflare processes data for delivery, security and operation of its infrastructure. Infrastructure and security data are subject to the relevant service-specific retention rules; the game-server deletion events described above do not automatically apply to this data. See the Cloudflare privacy policy.

At startup, the app checks for self-hosted game updates. A newer version may be downloaded and activated on a later app switch or restart. Transmission of statistics to Capgo is disabled in the update module's configuration.

Cards and the Grimoire Codex currently also load fonts from Google Fonts. As a result, Google receives technical requests including the IP address and headers sent by the browser. This transfer may occur without an online game. See Google Fonts and the Google privacy policy.

Technical delivery and protection of the requested features serve performance of a contract or our legitimate interests in a functional, secure game (Article 6(1)(b) and (f) GDPR). Providers operate international infrastructure, so data may be processed outside the European Economic Area, particularly in the United States. The linked provider information describes the respective transfer mechanisms and safeguards.

8. Contact, invitations and your choices

If you contact us by email, we process your sender address, message and any details you voluntarily provide to handle your request. Please do not send passwords, payment details or unnecessary personal information. Correspondence is retained as long as needed for the request or statutory retention obligations. Depending on the request, the legal basis is Article 6(1)(b), (c) or (f) GDPR.

If you share a room invitation through another app, you choose the recipients there yourself. The chosen service's privacy policy applies to its processing.

You can play locally without an online room and leave voice chat disabled. When an internet connection is available, technical update and font requests do not depend on joining an online game.

9. Access, deletion and other rights

Subject to the applicable legal conditions, you may request access, rectification, erasure, restriction of processing and data portability, and object to processing based on legitimate interests. You may withdraw consent for future processing. Send requests to marco.nannarone@gmail.com.

To identify an online game, it helps to provide the game mode, room, approximate time and nickname you used. We request additional information only as needed for safe identification. Because there is no user account, we cannot always associate anonymous data or data whose association has been lost with an individual. We delete identifiable data unless a legal exception applies.

You may also complain to a data protection supervisory authority, particularly the Austrian Data Protection Authority.

10. Age group and scope

The game is intended for teenagers aged 13 and above and adults. The applicable regional age rating must also be observed. Google Play, Google Groups, tester platforms and other external services you choose to use have their own privacy policies.

The separate browser game website may use additional visitor statistics. These website statistics are not part of the Android app build. This policy describes the Android app; this information-only page does not use its own analytics scripts, external fonts or cookies.