Privacy policy

This policy says what Broccolideck’s online service and image sharing keep about you, why, and for how long. It is part of the terms of use. The service is run by papermagicboomer (“we”). The app on your device keeps your settings, saved games and card images on the device itself and sends nothing about them anywhere.

What we keep, and why

Your account

When you sign in with Patreon or Google, we keep:

• the identifier that provider gives for you (not your password, which we never see), and the given name it reports, to start your displayed name;
• your displayed name, which other players and spectators see;
• for a linked Patreon account, your membership’s tier, kept current by Patreon’s notifications, to set your tier in the service;
• the version of the terms you accepted, when, and that you confirmed your age, with the build of the app you accepted from;
• your sessions: a token per signed-in device, and when it was created.

An email address is used only where you sign in with one at our own tester pool, and is not otherwise kept.

Your games

Each online game is kept as its record: the seats, the setup, every move, the clock, and the result, so that the service can play it, show it to the players and spectators, and record its result. Your ratings per game and your results are kept with your account. A game is kept for 45 days after its last move, and for seven days after it ends; replays you choose to keep stay until you remove them or your account goes.

Chat

Chat lines in an online game are kept with the game and go with it. A line you report, and the lines around it, are kept for up to 400 days so that reports can be looked at. Players you block are kept with your account, and with theirs, until unblocked.

Image sharing

When you turn on peer-to-peer image sharing, your device registers with the service so other players can find it: the games it has images of, your displayed name, and the network address it registers from. The service keeps the registration while your device keeps it alive (minutes after it stops), and counts registrations per address for an hour to limit abuse. Players connect to each other directly, so a device that shares or fetches images reveals its network addresses to the devices it connects with, as any direct connection does. The images themselves never pass through the service.

Image sharing needs no account and is kept apart from your account’s data.

Logs

The service logs each request’s route, timing and outcome, the version of the app that made it, and the address it came from, for operating the service and finding abuse. Logs are kept for 30 days.

What we don’t do

We don’t sell or share your data with anyone for their own purposes. We don’t track you across other sites, show advertising, or use analytics on this site or in the app. Your sign-in providers learn that you signed in to Broccolideck, as any sign-in with them does.

Where it is kept

The service runs on Amazon Web Services in the United States. Data is encrypted in transit and at rest.

Your rights

• See it: your account’s data is what the app shows you; ask through the Patreon page for a copy of anything else.
• Change it: your displayed name is yours to change in the app.
• Delete it: delete your account from the app’s online pane at any time. That deletes your sign-ins, memberships, ratings, sessions and blocks at once, forfeits your games in progress and names nobody in your seats of recorded games. The record of your terms acceptances is kept without anything that identifies you, as the legal history of the agreement.

Where the law where you live gives you other rights over your data, ask through the Patreon page and we will honour them.

Children

The service is not for children under 13, or under the age of digital consent where you live if that is higher, and the terms require you to confirm your age. If a child has made an account, tell us and we will delete it.

Changes

A change to this policy is a new version of the terms, which the app asks you to accept before you play online again. Each version is on this site with the date it came into force.

Contact

Questions about privacy go through the Patreon page named on this site.