SLØVBAKKEN · NORWAY
Privacy Policy
This Privacy Policy explains how Sløvbakken handles personal information when you use the Android game The Dot, its public website and related support services. Sløvbakken is the publisher of The Dot and the controller for the processing described here.
1. Information we process
Google Play Data Safety categories
For clarity, the main data types used by the Android app map to Google Play's Data Safety categories as follows:
- Name: an optional username you choose for your public game identity.
- Email address: optional, and used when you choose to link or restore your player account with Google.
- User IDs: an internal account identifier used to operate and synchronise the player account and associate first-party product analytics with the correct player. It is not displayed to other players.
- App activity — app interactions: interactions with app screens and features used for internal product analytics, such as opening Home, pressing Play, viewing Rank, Profile or Replay, and using Share.
- App activity — other actions: gameplay and related app actions needed to score, validate, synchronise and improve The Dot.
Account and game identity
- A Supabase account identifier is created when the player account and live services are used so The Dot can operate and synchronise account-linked data.
- You may choose a username and profile dot. A chosen username can be visible to other players in Rank. If you do not choose a username, or if a username cannot be shown, The Dot uses a generated DOT number instead.
- If you choose optional Google account linking, we may receive your Google email address and basic account information needed for authentication, account linking and recovery. Your Google email, Google profile identity and internal account ID are not displayed to other players.
Gameplay and app activity
- Locked predictions, answer coordinates and other gameplay inputs needed to determine or verify a result.
- Scores, completed modes, Daily Four totals, streak-related progress and stored game history.
- Challenge information needed to validate or reproduce a daily level.
- App/client version and timestamps connected to gameplay records.
- Achievement unlocks and the profile dot you choose to equip.
We may use these gameplay and app-activity records for app functionality and for internal analytics and product improvement, for example to understand how the game is being used, identify defects, evaluate reliability and improve the experience. The current release does not use a separate third-party analytics or advertising tracking SDK for this purpose.
For first-party product analytics, The Dot may send bounded event records to its Supabase backend. These records can include the internal player account ID, randomly generated analytics session/event IDs, event name, product day or daily key, game mode, score or elapsed time where relevant, app version/build channel, timestamps and small event-specific properties. The analytics pipeline does not collect advertising identifiers, persistent device identifiers, location, contacts, photos, files, health data or free-text content.
Social Replay
If you complete today’s Daily Four, The Dot may let you compare your answers with another player who has also completed today. In a private league, members who complete today may see the exact Dot positions and round scores of other current league members who completed the same Daily Four.
Social Replay is limited to today’s compatible game boards. Your email address, Google identity and internal account ID are not shown to other players.
Daily reminder preferences are stored on the device and reminders are scheduled locally by the app.
Moderation, reports and safety
- Proposed public usernames may be checked by an automated moderation service before they can be shown.
- If a player reports a public identity, we may process the reported username/profile reference, report reason, moderation status and related technical information needed to investigate the report.
- Service providers may process IP addresses and technical request logs as part of operating, securing and troubleshooting their services.
Website forms
When you submit a website form, we process the information you enter. Depending on the form, this can include your name, email address, Android phone model, app version, feedback, account identifier, support context, and links you provide to screenshots or videos.
2. Why we use information
- Provide the Daily Four, scoring, Rank, Rewards, history, replay and synchronisation.
- Create, link, restore and manage player accounts.
- Show your chosen pseudonymous username and profile dot in Rank, or a generated DOT identity when a public username is not used.
- Enable Social Replay so eligible players can compare today’s Dot positions and round scores, including within private leagues.
- Validate scores and daily challenges, diagnose defects and maintain service integrity.
- Analyse gameplay and app activity internally to understand use, evaluate reliability and improve The Dot.
- Moderate public usernames, investigate reports, reduce abuse and protect players.
- Respond to feedback, support requests and privacy requests.
- Meet legal obligations and establish, exercise or defend legal claims where necessary.
The current release does not use third-party advertising SDKs, does not use personal information for targeted advertising, and does not sell personal information.
3. Legal bases in the EEA/UK
Where the GDPR or similar law applies, we rely on the legal basis that fits the specific purpose:
- Contract / steps requested by you: core gameplay, account operation, synchronisation, Rank, Rewards and account recovery.
- Legitimate interests: service security, fraud and abuse prevention, moderation, debugging, reliability, internal product analytics and improving the service. We balance these interests against player privacy.
- Consent: where we explicitly ask for consent, such as optional website-form processing or communications that require it. You can withdraw consent where consent is the legal basis.
- Legal obligation: where processing or retention is required by applicable law.
4. Public usernames and Player Rules
A chosen username is user-provided content because it may be visible to other players. Public usernames are subject to our Player Rules. We may reject, hide or replace usernames that violate those rules or our moderation standards. Players can report a public identity and can hide another player from their own view in-app.
Do not put sensitive personal information, contact details or another person's private information in a public username.
5. Service providers
We use service providers to operate The Dot. They may process limited information on our behalf only as needed to provide their service:
- Supabase — authentication, database storage and backend services.
- Google — optional Google account authentication/linking and Google Play distribution.
- Sightengine — automated moderation checks for proposed public usernames.
- Resend — operational email delivery and moderation/report notifications.
- Netlify — website hosting and website-form processing.
We do not share personal information with advertisers for targeted advertising. Transfers to service providers are limited to the purposes described above and are subject to the providers' contractual and security arrangements.
6. International transfers
Some service providers may process information outside Norway or the EEA. Where a transfer requires a legal safeguard, we rely on mechanisms made available under applicable data-protection law, such as adequacy decisions or standard contractual clauses, as appropriate.
7. Retention and deletion
Raw product analytics events have a maximum retention period of 90 days. A scheduled daily retention process is configured to delete raw analytics events once they are older than 90 days. Account deletion can remove account-linked analytics sooner.
Account-linked gameplay, profile, achievement and history data is retained while needed to provide The Dot and until the account is deleted, unless a limited longer retention period is necessary for security, fraud prevention, legal compliance or dispute handling.
Moderation and security records may be retained for a limited period where needed to avoid repeated abuse, investigate reports or protect the service. Website-form submissions are kept only as long as reasonably needed to respond to the request, investigate the reported issue or meet legal obligations. Temporary backup copies may remain for a limited period before being overwritten.
You can delete your account through Settings → Delete my data in the app or request deletion through our account deletion page. Account deletion is intended to remove the active player account and account-linked profile, username, gameplay, score, history and achievement data, subject to the limited retention described above.
8. Security
Data is transmitted over encrypted HTTPS/TLS connections. We use authentication, database access controls and server-side permissions intended to restrict data access to authorised operations. No online system can be guaranteed completely secure.
9. Your choices and rights
You can choose whether to set a public username and whether to link a Google account. Depending on where you live, you may also have rights to request access, correction, deletion, restriction, objection or a portable copy of personal information. You may have the right to withdraw consent where processing is based on consent and to object to certain processing based on legitimate interests.
If you are in Norway or the EEA and believe your data-protection rights have been infringed, you can also lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet).
10. Children
The Dot is not intended for children under 13, or below the applicable minimum age for using this type of online service in their country. We do not knowingly seek to collect personal information from children below that age.
11. Changes to this policy
We may update this policy when The Dot, its providers or legal requirements change. The effective date above will be updated when material changes are made.
12. Contact Sløvbakken
For privacy questions or rights requests, use the contact form. For account deletion, use the in-app deletion control or the account deletion page.