Stercus - privacy

Who: Jakub Hošek, jakub.hosek@prihradka.cz. Stercus is a free hobby game:
nothing is sold, there are no accounts, no cookies, no ads and no analytics.

What we see and why

- This website and the matchmaking servers (coordinator, web bridge) log your
  IP address, port and the time of each request, to run online play and to
  stop abuse. Legal basis: legitimate interest (GDPR art. 6(1)(f)).
  Kept 7 days, then deleted.
- Update check: the desktop and Android game asks this website for the newest
  version at launch, which the website logs as above. Nothing else is sent.
  Turn it off in Settings > System > Updates: Off.
- Crash and error reports, only if you agree in the game (Settings > System
  > Reports: Ask, Always, Never; default Ask). A report holds the game
  version, your OS, CPU architecture, graphics driver and GPU name, your
  browser's user agent on the web, and the game's last log lines with IP
  addresses and your user folder blanked out. The server stores the report
  with the time it arrived, not your IP address. Legal basis: your consent
  (GDPR art. 6(1)(a)), which you withdraw any time by setting Reports to
  Never. Kept 90 days, then deleted.
- Arena trial runs, only when you press Submit on a won trial. The server
  stores the run file (your inputs and the player name you chose) and a tag
  derived from a random secret only your install holds, and shows the name,
  tag, time and replay publicly on the trials board. No IP address is kept. Legal basis: your consent; write to us and we take a run down.

What we do not see

- Chat messages, player names and drawn characters go straight between the
  players of one game. Our servers only pass them along and store none of it,
  except the name in a run you submit.
- Settings and characters are saved on your own device (in the browser:
  its local storage) and never sent to us.

Who else sees what

- Online play is peer to peer: the other players in your game see your IP
  address, as with any peer-to-peer game.
- Nobody else. We share nothing with third parties.

Your rights: access, erasure, objection and the rest of GDPR art. 15-21.
Write to the contact above. Since we keep no names, tell us your IP address
and the time you played so we can find your entries. You may complain to
the Czech data protection office, UOOU (www.uoou.gov.cz).