| Language: |
Okay, now time for the important stuff - the Privacy Policy. We'll try to keep this simple as Privacy Policies are usually rows upon rows of boring fluff that distracts you from what's actually going to happen.
If you're under 13 (or the minimum age in your jurisdiction), we need parental consent before processing your personal data.
What We Collect
In terms of Personal Data:
- SteamID: We use this because it's required to access certain features of the game (contractual necessity.)
- Discord Access Token: If you Authorize us via the Discord app to connect our services with your Discord account, the Access Token is generated and encrypted before being stored on our servers. It's optional. You need to agree to this data to be stored with us (consent.)
- 'Last Seen Online': This is for use only in the "Rags To Riches" gamemode, and it's for matchmaking stuff (legitimate interest.)
How We Store These
SteamID
- Stored in various places over our databases, predominantly in leaderboards.
Discord Access Token
- In one table of our main database, which stores your SessionID and the Access Token, however it is ENCRYPTED - and does not have any relation to your actual Discord Account Token.
'Last Seen Online'
- In one table of our main database, which stores your current stats in the "Rags To Riches" gamemode.
All this data is stored on Heroku PostgreSQL databases, which are run with AWS Infrastructure - however our Heroku App is ran on Datacenters in the United States of America.
While exact server locations are abstracted from all Heroku-developed apps by design, this setup complies with GDPR.
How We Use These
SteamID
- To connect your stats across the game to our servers, your Steam, and (if applicable) Discord Account.
Discord Access Token
- To do various things such as load Discord Friends when inviting them to play Poly Beats: Real-Time.
- To update your Discord Rich Presence.
'Last Seen Online'
- In our "Rags To Riches" Matchmaking algorithm. It leaves you out if you haven't been online recently enough.
Are We Sharing Data?
We are not sharing any data with unrelated third-parties. By "Unrelated Third-Parties", I mean anybody but Valve Incorporated and Discord, who need various little bits of your data in order to play the game, since, for one, you're playing this game through Steam (hopefully), so obviously they'll need some data, and, two, Discord - because they need various parts of your data to log you into your Discord account in our game.
Aside from that, we might show off general stats, like how many players have beaten a map, or how many players are active, but none of that includes personal data.
How Long We Keep It
SteamID
- Until you tell us explicitly via Email, or through other means such as Discord, that you want to be removed from Poly Beats databases - this'll tell us that you want to remove all of your scores across maps, general rankings, and Rags To Riches rankings. This does not affect Steam Workshop (previously mentioned as the 'Poly Beats Marketplace' in the EULA), as for those, we have no control over.
Discord Access Token
- When you have been inactive for more than 28 days, we'll disconnect your SessionID from your encrypted Discord Access Token, and remove you from the database. To reconnect, just Authorize Poly Beats from the Discord app when starting up Poly Beats.
- Until whenever you *explicitly* disconnect it yourself from inside Poly Beats.
'Last Seen Online'
- Until you tell us explicitly via Email, or through other means such as Discord, that you want to be removed from Poly Beats databases (or for this specific case, "Rags To Riches" leaderboards). This will remove all of your rankings and statistics inside the "Rags To Riches" gamemode.
Also, in any cases where we're legally required to delete or anonymize some data, we'll be doing that too.
Keeping Data Up To Date
SteamID
- This isn't changeable unless you set up a new Steam Account, in which you're seen as a new player.
- In future, we can look into transferring account stats between Steam Accounts.
Discord Access Token
- This is updated every 7 days automatically on our servers as stated as reccommended in the Discord Developer Documentation, so you don't need to worry.
We try to keep this data accurate and up-to-date with our own systems, but if anything's inaccurate, just contact us. We'll try to sort it out.
What If You Don't Consent
SteamID
- You will not be able to use the leaderboards in Poly Beats, play "Poly Beats: Real-Time", or anything that requires the use of your SteamID.
Discord Access Token
- You will not be able to invite friends via Discord to play "Poly Beats: Real-Time" with you.
- You will not be able to update your Discord Rich Presence to show that you are playing Poly Beats.
'Last Seen Online'
- This is treated as "implicitly acquired" data - meaning it's implied you want to store this data when you consent to some other part of your data being used in Poly Beats (in this case, your "SteamID"), if you don't consent to your SteamID being used - this won't be, either, since it makes no sense to use.
GDPR Compliance
5th Step Games has team members worldwide, but for all user data purposes, it operates under UK jurisdiction.
So with that logic, 5th Step Games in the UK is the sole data controller for Poly Beats.
To Contact Us About Your Data
Contact us through developers@5thstepgames.co.uk about any of your personal data. Remember that you as the consumer have the right to access, correct, delete, and restrict processing - or object to your personal data. We understand you may be concerned about yourself, and that's okay. We're good to talk.
If you're under 13 (or the minimum age in your jurisdiction), we need parental consent before processing your personal data.
What We Collect
In terms of Personal Data:
- SteamID: We use this because it's required to access certain features of the game (contractual necessity.)
- Discord Access Token: If you Authorize us via the Discord app to connect our services with your Discord account, the Access Token is generated and encrypted before being stored on our servers. It's optional. You need to agree to this data to be stored with us (consent.)
- 'Last Seen Online': This is for use only in the "Rags To Riches" gamemode, and it's for matchmaking stuff (legitimate interest.)
How We Store These
SteamID
- Stored in various places over our databases, predominantly in leaderboards.
Discord Access Token
- In one table of our main database, which stores your SessionID and the Access Token, however it is ENCRYPTED - and does not have any relation to your actual Discord Account Token.
'Last Seen Online'
- In one table of our main database, which stores your current stats in the "Rags To Riches" gamemode.
All this data is stored on Heroku PostgreSQL databases, which are run with AWS Infrastructure - however our Heroku App is ran on Datacenters in the United States of America.
While exact server locations are abstracted from all Heroku-developed apps by design, this setup complies with GDPR.
How We Use These
SteamID
- To connect your stats across the game to our servers, your Steam, and (if applicable) Discord Account.
Discord Access Token
- To do various things such as load Discord Friends when inviting them to play Poly Beats: Real-Time.
- To update your Discord Rich Presence.
'Last Seen Online'
- In our "Rags To Riches" Matchmaking algorithm. It leaves you out if you haven't been online recently enough.
Are We Sharing Data?
We are not sharing any data with unrelated third-parties. By "Unrelated Third-Parties", I mean anybody but Valve Incorporated and Discord, who need various little bits of your data in order to play the game, since, for one, you're playing this game through Steam (hopefully), so obviously they'll need some data, and, two, Discord - because they need various parts of your data to log you into your Discord account in our game.
Aside from that, we might show off general stats, like how many players have beaten a map, or how many players are active, but none of that includes personal data.
How Long We Keep It
SteamID
- Until you tell us explicitly via Email, or through other means such as Discord, that you want to be removed from Poly Beats databases - this'll tell us that you want to remove all of your scores across maps, general rankings, and Rags To Riches rankings. This does not affect Steam Workshop (previously mentioned as the 'Poly Beats Marketplace' in the EULA), as for those, we have no control over.
Discord Access Token
- When you have been inactive for more than 28 days, we'll disconnect your SessionID from your encrypted Discord Access Token, and remove you from the database. To reconnect, just Authorize Poly Beats from the Discord app when starting up Poly Beats.
- Until whenever you *explicitly* disconnect it yourself from inside Poly Beats.
'Last Seen Online'
- Until you tell us explicitly via Email, or through other means such as Discord, that you want to be removed from Poly Beats databases (or for this specific case, "Rags To Riches" leaderboards). This will remove all of your rankings and statistics inside the "Rags To Riches" gamemode.
Also, in any cases where we're legally required to delete or anonymize some data, we'll be doing that too.
Keeping Data Up To Date
SteamID
- This isn't changeable unless you set up a new Steam Account, in which you're seen as a new player.
- In future, we can look into transferring account stats between Steam Accounts.
Discord Access Token
- This is updated every 7 days automatically on our servers as stated as reccommended in the Discord Developer Documentation, so you don't need to worry.
We try to keep this data accurate and up-to-date with our own systems, but if anything's inaccurate, just contact us. We'll try to sort it out.
What If You Don't Consent
SteamID
- You will not be able to use the leaderboards in Poly Beats, play "Poly Beats: Real-Time", or anything that requires the use of your SteamID.
Discord Access Token
- You will not be able to invite friends via Discord to play "Poly Beats: Real-Time" with you.
- You will not be able to update your Discord Rich Presence to show that you are playing Poly Beats.
'Last Seen Online'
- This is treated as "implicitly acquired" data - meaning it's implied you want to store this data when you consent to some other part of your data being used in Poly Beats (in this case, your "SteamID"), if you don't consent to your SteamID being used - this won't be, either, since it makes no sense to use.
GDPR Compliance
5th Step Games has team members worldwide, but for all user data purposes, it operates under UK jurisdiction.
So with that logic, 5th Step Games in the UK is the sole data controller for Poly Beats.
To Contact Us About Your Data
Contact us through developers@5thstepgames.co.uk about any of your personal data. Remember that you as the consumer have the right to access, correct, delete, and restrict processing - or object to your personal data. We understand you may be concerned about yourself, and that's okay. We're good to talk.