Privacy Policy

This Privacy Policy explains how Third Act Sales AB ("we", "us", "our") handles information when you play the mobile game Dungeon Depths: Idle RPG (the "App"). Third Act Sales AB is the controller of the personal data described here.

What we collect, and why

1. Your anonymous player ID

The first time the App goes online, our game server (hosted by Supabase in the EU, in Ireland) creates a random player ID for your phone. It holds no name, email or phone number. Everything the App sends to our server, as described below, is stored under this ID.

2. Leaderboards and the world feed (public)

As you play, your hero is sent to the global leaderboard automatically and shown to other players: the hero name you type, and your hero's class, gender, level, gear score, equipped items, badges and achievements. If you join a friendly leaderboard, your hero's standing on it, and a record of any hero who fell there, are shown to its members.

Next to your heroes, the leaderboards also show a country flag. At first it is the country your phone is set to: on an iPhone the Region setting, and on Android the SIM card's country (or, with no SIM, the country in your language setting). The App does not use your location to find it. You can choose another flag, or no flag, at any time in the App's settings, and the leaderboards change with it.

The world feed shows notable moments, for example a hero falling or finding a rare item. When one happens to your hero, its name, class and level, the dungeon and any item involved are shown to other players for 14 days. There is no chat.

Because hero names are public and sent automatically, please do not use personal information as a hero name.

3. The Auction House

When you sell or bid at the Auction House, we store your listings, bids and the gold and items owed to you, so trades can be settled fairly between players. Other players see the item, its price and the seller's hero name.

4. Push notifications

If you allow notifications, your phone's push token is sent to our server and used, through Firebase Cloud Messaging (Google), to tell you about your Auction House sales and bids. Notifications for finished expeditions are scheduled on your phone and send nothing to us.

5. Reports

If you report another player (for example for an offensive hero name), we store the report, the reason you chose and any note you add, so we can review it.

6. Your email and your saved heroes (optional, from version 1.7.0)

You can choose to save your heroes, so you can load them again on a new phone. If you do:

• We store your email address with your player ID. We use it only to send you 6-digit codes: to confirm the address, to load your save on a phone, and to confirm an account deletion. We never show it to other players and never send you marketing.
• Your phone uploads a copy of your save (your heroes, their items, gold and progress, your blocked-player list and your Auction House messages) whenever it changes. We keep the latest copy, plus a short history of older copies for up to 7 days so we can help you if something goes wrong. Only you can load it, and only after entering a code from your email.
• We record when a save is loaded onto a phone, so we can keep loads to once a day.
• The code emails are sent by Resend, which stores the email address and message for delivery in the United States (see Transfers outside the EU).

If you do not save your heroes, the rest of this section does not apply, and your heroes stay only on your phone.

For every player, saved or not: when one of your heroes dies, we record that hero's ID (a random code) under your player ID, so that no save can ever bring a fallen hero back.

7. Crash and diagnostic data

The App uses Firebase Crashlytics (Google) to find and fix crashes. When the App crashes or hits an error, it may send a crash log, your device model, operating system and App version, and a random installation ID. This is not used to identify you or for advertising.

8. Purchases

The full game is unlocked with a single one-time purchase, handled entirely by the App Store or Google Play. We never see your card details or store account. To know whether the unlock is active on your phone and to restore it, we use RevenueCat, which receives the store's purchase receipt, an anonymous ID it creates for your installation, your platform, App version and store country. That ID is separate from your player ID, and we do not link the two.

9. Data stored only on your phone

Unless you save your heroes, your progress, heroes, items and settings are stored only on your phone (apart from the record of fallen heroes in section 6), and deleting the App deletes them. Game settings such as music stay on your phone either way.

Our legal bases

• Providing the game you asked for (performance of a contract): your player ID, the leaderboards and world feed, the Auction House, push notifications you allowed, and your saved heroes and email if you choose to save.
• Our legitimate interests in keeping the game working, fair and safe: crash diagnostics, reports, the record of deaths and save loads, and the short history of saves.

Who we share data with

We share data only with the providers below, who process it for us under data processing agreements. We do not sell or rent data, and we do not share it with advertisers or data brokers.

Transfers outside the EU

Some providers above process data in the United States. Those transfers are protected by the European Commission's Standard Contractual Clauses and, where the provider is certified, the EU-U.S. Data Privacy Framework.

How long we keep it

• Your player ID, leaderboard entries, Auction House records, reports, saved heroes and the record of which heroes died: while your account exists. Deleting your account deletes them, except for the two kinds of record below, which no longer name you.
• Finished Auction House sales: they stay after you delete your account, with your player ID removed and your name replaced by "Deleted player", because other players' purchases depend on them.
• The IDs of your heroes that died: they stay after you delete your account, with nothing else (no player ID, no name), so that a fallen hero can never come back.
• Older copies of a saved game: up to 7 days.
• The record of when your save was loaded onto a phone: 30 days.
• World feed entries: 14 days.
• Crash reports: for the limited period Firebase keeps them by default.
• Deleted data can remain in our hosting provider's backups for a short time until those expire.

Deleting your account

You can delete your account and everything our server holds about it (apart from the two records that no longer name you, under How long we keep it) at any time, from inside the App: open the Hero tab, scroll to Danger zone, and tap Delete my account. If your heroes are saved to an email, we first send a code to that email to make sure it is you. Anything you have for sale or bid on at the Auction House must finish first, so no other player loses gold or items.

If you can no longer open the App, email robot@thirdact.se. If you saved your heroes, write from the email address you saved them with. We will delete the account within 30 days and confirm when it is done. Your purchase is not affected: it belongs to your App Store or Google Play account and can be restored.

Your rights

Third Act Sales AB is based in Sweden and handles personal data under the EU General Data Protection Regulation (GDPR). You have the right to access the personal data we hold about you, to have it corrected or deleted, to receive a copy of it, and to object to or restrict certain processing. To use these rights, email robot@thirdact.se. If you have not saved your heroes to an email, include your hero name so we can find your entries.

You can also complain to your local data protection authority. In Sweden that is Integritetsskyddsmyndigheten (IMY).

Children

Dungeon Depths is not directed to children under 13, and we do not knowingly collect personal data from them. If you believe a child has given us personal data, contact us and we will delete it.

Changes to this policy

We may update this policy. When we do, we change the "Last updated" date above, and material changes are described on this page.

Contact us

Third Act Sales AB
Stockholm, Sweden
Email: robot@thirdact.se