SLØVBAKKEN · NORWAY
Privacy Policy
This Privacy Policy explains how Sløvbakken handles personal information when you use the Android game The Dot, its public website and related support services. Sløvbakken is the publisher of The Dot and the controller for the processing described here.
1. Information we process
Google Play Data Safety categories
For clarity, the main data types used by the Android app map to Google Play's Data Safety categories as follows:
- Name: an optional username you choose for your public game identity.
- Email address: optional, and used when you choose to link or restore your player account with Google.
- User IDs: an internal account identifier used to operate and synchronise the player account. It is not displayed to other players.
- App activity — other actions: gameplay and related app actions needed to score, validate, synchronise and improve The Dot.
Account and game identity
- A Supabase account identifier is created when the player account and live services are used so The Dot can operate and synchronise account-linked data.
- You may choose a username and profile dot. A chosen username can be visible to other players in Rank. If you do not choose a username, or if a username cannot be shown, The Dot uses a generated DOT number instead.
- If you choose optional Google account linking, we may receive your Google email address and basic account information needed for authentication, account linking and recovery. Your Google email, Google profile identity and internal account ID are not displayed to other players.
Gameplay and app activity
- Locked predictions, answer coordinates and other gameplay inputs needed to determine or verify a result.
- Scores, completed modes, Daily Four totals, streak-related progress and stored game history.
- Challenge information needed to validate or reproduce a daily level.
- App/client version and timestamps connected to gameplay records.
- Achievement unlocks and the profile dot you choose to equip.
We may use these gameplay and app-activity records for app functionality and for internal analytics and product improvement, for example to understand how the game is being used, identify defects, evaluate reliability and improve the experience. The current release does not use a separate third-party analytics or advertising tracking SDK for this purpose.
Daily reminder preferences are stored on the device and reminders are scheduled locally by the app.
Moderation, reports and safety
- Proposed public usernames may be checked by an automated moderation service before they can be shown.
- If a player reports a public identity, we may process the reported username/profile reference, report reason, moderation status and related technical information needed to investigate the report.
- Service providers may process IP addresses and technical request logs as part of operating, securing and troubleshooting their services.
Website forms
When you submit a website form, we process the information you enter. Depending on the form, this can include your name, email address, Android phone model, app version, feedback, account identifier, support context, and links you provide to screenshots or videos.
2. Why we use information
- Provide the Daily Four, scoring, Rank, Rewards, history, replay and synchronisation.
- Create, link, restore and manage player accounts.
- Show your chosen pseudonymous username and profile dot in Rank, or a generated DOT identity when a public username is not used.
- Validate scores and daily challenges, diagnose defects and maintain service integrity.
- Analyse gameplay and app activity internally to understand use, evaluate reliability and improve The Dot.
- Moderate public usernames, investigate reports, reduce abuse and protect players.
- Respond to feedback, support requests and privacy requests.
- Meet legal obligations and establish, exercise or defend legal claims where necessary.
The current release does not use third-party advertising SDKs, does not use personal information for targeted advertising, and does not sell personal information.
3. Legal bases in the EEA/UK
Where the GDPR or similar law applies, we rely on the legal basis that fits the specific purpose:
- Contract / steps requested by you: core gameplay, account operation, synchronisation, Rank, Rewards and account recovery.
- Legitimate interests: service security, fraud and abuse prevention, moderation, debugging, reliability, internal product analytics and improving the service. We balance these interests against player privacy.
- Consent: where we explicitly ask for consent, such as optional website-form processing or communications that require it. You can withdraw consent where consent is the legal basis.
- Legal obligation: where processing or retention is required by applicable law.
4. Public usernames and Player Rules
A chosen username is user-provided content because it may be visible to other players. Public usernames are subject to our Player Rules. We may reject, hide or replace usernames that violate those rules or our moderation standards. Players can report a public identity and can hide another player from their own view in-app.
Do not put sensitive personal information, contact details or another person's private information in a public username.
5. Service providers
We use service providers to operate The Dot. They may process limited information on our behalf only as needed to provide their service:
- Supabase — authentication, database storage and backend services.
- Google — optional Google account authentication/linking and Google Play distribution.
- Sightengine — automated moderation checks for proposed public usernames.
- Resend — operational email delivery and moderation/report notifications.
- Netlify — website hosting and website-form processing.
We do not share personal information with advertisers for targeted advertising. Transfers to service providers are limited to the purposes described above and are subject to the providers' contractual and security arrangements.
6. International transfers
Some service providers may process information outside Norway or the EEA. Where a transfer requires a legal safeguard, we rely on mechanisms made available under applicable data-protection law, such as adequacy decisions or standard contractual clauses, as appropriate.
7. Retention and deletion
Account-linked gameplay, profile, achievement and history data is retained while needed to provide The Dot and until the account is deleted, unless a limited longer retention period is necessary for security, fraud prevention, legal compliance or dispute handling.
Moderation and security records may be retained for a limited period where needed to avoid repeated abuse, investigate reports or protect the service. Website-form submissions are kept only as long as reasonably needed to respond to the request, investigate the reported issue or meet legal obligations. Temporary backup copies may remain for a limited period before being overwritten.
You can delete your account through Settings → Delete my data in the app or request deletion through our account deletion page. Account deletion is intended to remove the active player account and account-linked profile, username, gameplay, score, history and achievement data, subject to the limited retention described above.
8. Security
Data is transmitted over encrypted HTTPS/TLS connections. We use authentication, database access controls and server-side permissions intended to restrict data access to authorised operations. No online system can be guaranteed completely secure.
9. Your choices and rights
You can choose whether to set a public username and whether to link a Google account. Depending on where you live, you may also have rights to request access, correction, deletion, restriction, objection or a portable copy of personal information. You may have the right to withdraw consent where processing is based on consent and to object to certain processing based on legitimate interests.
If you are in Norway or the EEA and believe your data-protection rights have been infringed, you can also lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet).
10. Children
The Dot is not intended for children under 13, or below the applicable minimum age for using this type of online service in their country. We do not knowingly seek to collect personal information from children below that age.
11. Changes to this policy
We may update this policy when The Dot, its providers or legal requirements change. The effective date above will be updated when material changes are made.
12. Contact Sløvbakken
For privacy questions or rights requests, use the contact form. For account deletion, use the in-app deletion control or the account deletion page.