Privacy at Data Driven Decisions

Data Driven Decisions makes three Android apps: Brickography, Marble Codex and Fake News or Fact?. Each app has its own privacy policy, which says what that app does with your information: Brickography, Marble Codex, Fake News or Fact?. This page covers what applies to all three: who is responsible, what we keep and for how long, and your rights.

Who is responsible

The person in charge of the protection of personal information is the studio's owner. Write to support.datadrivendecisions@gmail.com with "Privacy" in the subject.

What we keep

None of the apps has accounts. Apart from the anonymous play statistics in Fake News or Fact? (below), none sends us anything by itself; we hold only what you choose to give us:

• Emails you send us: questions, bug reports, mistake reports, Marble Codex play logs and requests to test an app. They are kept in our support mailbox, which Google hosts (Gmail).
• If you test an app before its release: the email address of your Google account, on the app's tester list in Google Play Console, so that Google Play lets you install the test version.
• Fake News or Fact? reports: the text of your email, with names, email addresses, phone numbers and street addresses removed, in our private issue tracker on GitHub, under an anonymous code instead of your address.

Only the studio's owner reads them. Google and GitHub store them for us. We never sell or rent personal information, and we share it with no one else unless the law requires it.

Anonymous play statistics in Fake News or Fact?

Once a day the app may send us one small report of counts: how many cards were played and answered right, whether an ad or a streak freeze was shown, and the like, together with the day the app was installed and which of two ad placements the device uses. It holds nothing that identifies you or your device: no account, no advertising ID, no name, and our endpoint keeps no IP addresses. The reports are added up into totals, which help us see whether the game is worth playing and, later, show how many players got a card right. You can turn this off at any time in Settings › Share anonymous play statistics; in regions where we ask for ad consent, it is off until you turn it on. Because a report carries nothing that points to you, we cannot find or delete your reports if you ask; turning the setting off stops new ones and deletes any still waiting on your phone.

Before a report is sent, the app asks Google Play to confirm that it comes from the real app, installed from Google Play, on a genuine Android phone. We keep only the result, one word, with the report, and never use it to recognize a phone; Fake News or Fact?'s policy says what Google Play handles for the check.

Where it is kept

The statistics reports go to our endpoint on Cloudflare, which stores them for us. Like any web host, Cloudflare sees the IP address a report comes from; our endpoint uses it only to limit how many requests one address can send, and does not keep it. Google's, GitHub's and Cloudflare's servers may be outside Québec and outside Canada, for example in the United States, where the laws of that country apply to it. The ads in Marble Codex and Fake News or Fact? are shown by Google AdMob, which collects information for Google itself; each app's policy says what, and how to limit it.

How long we keep it

• Emails: two years after the last message in the conversation, then deleted. Sooner if you ask.
• Tester lists: until the test ends, or sooner if you ask to leave it.
• The anonymous Fake News or Fact? tickets: as long as the card they are about is kept, as the record of how it was checked. They do not identify you.
• The Fake News or Fact? statistics: each report, with the version of the app that sent it and the result of Google Play's check, for 10 days; after that, only the totals added up from the reports. Neither identifies you.

Your rights

You can ask us to show you what we hold about you, to correct it, to delete it or to stop using it, to withdraw a consent you gave, and to send you a copy in a common format you can reuse. Email us with "Privacy request" in the subject. We may ask you to write from the address the information is about, so that we only answer the person it belongs to. We answer within 30 days, free of charge.

Complaints

Write to us first: we would rather fix it. If you are not satisfied with our answer, you can complain to the Commission d'accès à l'information du Québec (cai.gouv.qc.ca) or, elsewhere in Canada, to the Office of the Privacy Commissioner of Canada (priv.gc.ca). Outside Canada, your own data protection authority can help.

If something goes wrong

We keep a record of every incident in which personal information we hold is lost, seen or used by someone who should not have it. If an incident risks causing serious harm, we tell the Commission d'accès à l'information and the people affected as quickly as we can, as Québec law requires.

Changes

If this page changes, the new version is posted at this address with a new effective date.