Privacy policy
What the website, the launcher and the game Demolition Gods process, why, on which legal basis and for how long. In short: without your consent the game sends neither usage data nor crash reports. For online play the server needs your player name, your profile and your IP address. Replays and play logs stay on your PC.
1. Controller
[Company], Christoph Krassnigg, [address], Austria. E-mail: [e-mail]. More details are in the imprint.
We have not appointed a data protection officer because the law does not require one for us. Privacy questions go to the e-mail address above.
2. Website
The website loads no fonts, scripts or images from other servers, shows no ads and uses no trackers or analytics services.
Like any web server, ours sees your IP address, your browser and the address you request. It keeps the IP address only briefly in memory to fend off too many requests and does not write it to logs. Downloads and the referring site of a visit are only counted as daily totals, not linked to you.
The legal basis is our legitimate interest in a secure, working website (Art. 6(1)(f) GDPR).
4. Player account (optional)
You do not need an account to play. If you create one, we store your player name, your e-mail address if you give one, your password only as a one-way hash, when you registered and last signed in, and your game profile (level, experience, unlocks, statistics, rankings, playtime). Confirmation and reset mails are sent through [mail service].
The legal basis is providing the account you asked for (Art. 6(1)(b) GDPR). The data stays until you delete the account, which you can do yourself at any time on the account page or by e-mail to us.
5. Online play and the lobby server
When you play online (lobbies, quick play, rankings), the game connects to our lobby server. It processes: a random device key the game creates once, your player name, your profile (level, experience, characters, loadout, unlocks), ranking ratings per season, the lobbies you are in, and your IP address for the connection.
The server passes chat messages on to the other players in the lobby but does not store them. It limits lobby password attempts per IP address, in memory only.
Where possible, matches run directly between the players' computers; for technical reasons the other players in your match can then see your IP address. If that fails, our server relays the traffic. Player names, rankings and leaderboards are public on the website.
The legal basis is providing the online game you use (Art. 6(1)(b) GDPR) and, for spam and abuse protection, our legitimate interest (point (f)). Your profile is kept until you ask for its deletion [or: until it has not been used for [period]].
6. Usage data (only with your consent)
On the first start the game asks whether it may send usage data and crash reports. Until you say yes, none of it reaches us. In Settings > Privacy you can switch each of them on or off at any time; the change applies at once.
With your consent the game sends short events: at start the game version, operating system, graphics card and driver, processor, memory, resolutions, graphics settings and Java version; per match frame rate and frame times; session length and playtime in seconds, modes and maps played, waves, causes of death, weapons, whether an online match ran directly or through the server, and after wave runs a short summary (hero, mode, waves, damage, deaths, abilities). With it goes the random device key, stored on the server only as a hash. If you are signed in to the launcher, the playtime is credited to your account.
Not included: names, chat texts, positions in the game world, replays, play logs, files from your PC. If the server cannot be reached, a small queue waits on your PC and goes out next time.
Purpose: finding bugs, improving performance, balancing difficulty. The legal basis is your consent (Art. 6(1)(a) GDPR); you can withdraw it at any time with effect for the future.
7. Crash reports (only with your consent)
If the game crashes or hits an error and you have agreed, it sends a report with the error message, the place in the code, the game version and system details. Before that it removes user names from file paths and everything you typed into the settings. The legal basis is your consent (Art. 6(1)(a) GDPR).
8. Feedback and bug reports
If you send feedback through the form in the game or on the website, we store your text, the category, a contact detail if you give one, a screenshot if one is attached, your account if you are signed in, the game version, technical system details (cleaned like crash reports) and the device key as a hash. New reports are forwarded as text to an internal Discord channel so we see them quickly; Discord is a service of Discord Inc. in the USA (see section 12).
The legal basis is our legitimate interest in fixing bugs and handling your report (Art. 6(1)(f) GDPR). A report is deleted once it is dealt with, at the latest after [period].
9. What stays on your PC
Settings, progress, play logs and replays are stored only on your PC (on Windows in %APPDATA%\Gebes Entertainment\Demolition Gods). They are not uploaded. You can delete them by deleting that folder.
10. Discord status
If Discord runs on your PC, the game can show there what you are playing (menu, lobby, mode, wave, party size, duration) and, for open lobbies, a join button. For this the game only talks locally to the Discord app; what Discord does with it is governed by Discord's privacy policy. You can switch it off in Settings > Privacy.
11. Steam
If you buy and start the game through Steam, Valve Corporation (USA) processes the purchase, your account and Steam features under Valve's own privacy policy. The game then uses your Steam ID and Steam name for online play and may connect through the Steam network. We never see payment details.
12. Recipients and transfers outside the EU
We do not sell data and show no ads. We use service providers that process data only on our behalf (Art. 28 GDPR): [hosting provider], server location [country]; [mail service] for mails; Cloudflare, Inc. for delivering large download files to the launcher (the cdn address), which lets Cloudflare see your IP address.
Cloudflare and Discord are based in the USA. Transfers rely on the European Commission's adequacy decision for the EU-US Data Privacy Framework (Art. 45 GDPR) where the companies are certified, otherwise on standard contractual clauses (Art. 46 GDPR).
13. How long
Single usage events, crash reports and run summaries are deleted by the server after 90 days; only totals without personal reference remain, such as how often an error happened. Account and profile: until deletion. Feedback: see section 8. IP addresses: only in memory for the length of the connection.
14. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You can withdraw a consent at any time (Art. 7(3)); processing until then stays lawful. Write to [e-mail]. For data without an account, your device key or player name helps us find it.
You can also complain to a supervisory authority; in Austria that is the Datenschutzbehörde, Barichgasse 40-42, 1030 Vienna, dsb@dsb.gv.at.
15. Children
In Austria, consent to usage data and crash reports can be given from the age of 14 (Section 4(4) DSG). Younger players need a parent's agreement; without it, please choose no.
16. Changes
If what the game or the website processes changes, we update this policy. For new purposes that need consent, we ask you first.
Last updated: [date]