Deck & Dice has no accounts, no logins, no advertising, no profiling and no tracking. The games you play, the names you type and the scores you roll stay on your device — or, at a Bluetooth table, on the devices sitting next to it. The one thing that leaves your device is an anonymous crash report when the app breaks, so we can fix it.
Who we are
Deck & Dice is made by Code Unlimited, Sweden, which is the data controller for the limited processing described below. Questions, or a request about your data: contact.codeunlimited@gmail.com.
What is stored on your device
The app saves a few preferences locally, using your platform's ordinary preference
storage (Android SharedPreferences, iOS NSUserDefaults, desktop
preferences, or your browser's local storage on the web):
- the player name you type;
- up to five recently used player names, so they can be suggested again;
- your chosen theme and other app preferences;
- a random identifier for this installation, so that a player who drops out of a Bluetooth table can be given their seat back when they return. It is generated on the device, means nothing outside a table in progress, and is not sent anywhere else.
None of this is uploaded to us or to anyone else. We never see it. Deleting the app — or clearing site data in your browser — removes it.
Playing over Bluetooth
On Android and iOS, several phones can share one table over Bluetooth Low Energy. This is a direct, device-to-device connection: there is no server, and nothing is sent over the internet.
- While you host a table, your device advertises a table name made from your player name and the name of the game you are hosting. Any device scanning nearby can see it for as long as you are hosting, so pick a name you are comfortable showing.
- Devices that join exchange player names, seat numbers and the state of the game in progress.
- Connections use the operating system's own device identifiers. The app uses them only for the duration of the connection and never stores or transmits them elsewhere.
Android requires Bluetooth permissions for this. The app requests them only for finding and connecting to nearby players, and explicitly declares that it does not derive location from Bluetooth scanning. It does not request location access on modern Android versions and never collects your location.
Purchases
On Android and iOS the app offers optional paid unlocks and a subscription. Payment is handled entirely by Google Play or the App Store — we never see or receive your payment details.
To know what you have bought, the app uses a third-party purchase-verification service, which checks store receipts and tells the app which features are unlocked. What it receives is the store receipt and technical device information; what it does not receive is your player name, anything about your games, or any identifier of you — purchases are tied to an anonymous ID that the service generates. For the store side of a purchase, see the privacy policies of Google and Apple.
The desktop and web versions have no store and no purchase code at all.
Crash and error reporting
So that a bug can be found and fixed rather than merely suffered, the Android version sends a report to a third-party crash-reporting service when the app crashes or hits an unexpected error. This happens in the published app only; it is switched off in development builds, and the desktop, web and iOS versions send nothing at all.
A report contains:
- the error itself — the exception and the code path it came from;
- technical device and app information: device model, operating-system version, app version, language, memory and storage state, and whether the app was in the foreground;
- an anonymous installation identifier generated by the reporting service, so several reports from one broken install can be recognised as the same install. It is not your advertising ID and is not linked to you; reinstalling the app produces a new one;
- a short technical log of what the app was doing beforehand — things like “a game started”, “a connection dropped”, error codes and counts.
Those logs are deliberately kept free of anything personal. Player names, the contents of your games, table names, Bluetooth device addresses and purchase details are logged only to the local developer console, which never leaves your device, and are excluded by design from anything that is uploaded. We do not collect your location, your contacts, your files, or any advertising identifier, and crash data is never used for advertising, profiling or analytics about you — only to fix the app.
What we do not do
- No usage analytics or behavioural telemetry — we do not measure what you play, how long you play, or which buttons you press. The only thing reported is an error.
- No advertising, ad identifiers, or profiling.
- No selling or sharing of personal data — there is nothing to sell.
- No accounts, e-mail collection or newsletters.
The web version
The app at deckanddice.codeunlimited.se is served as static files by a third-party hosting provider, which keeps standard server request logs (including IP address) for security and operational purposes. The web version has no purchases, no Bluetooth and no crash reporting, so it stores nothing beyond the preferences listed above, in your browser's local storage. It sets no cookies.
Legal basis and retention
Where the GDPR applies, the limited processing described here rests on our legitimate interest in providing a working game and in diagnosing crashes so it stays that way (Art. 6(1)(f)) and, for purchases, on performing the contract you enter into when you buy something (Art. 6(1)(b)). We keep no database of our own: crash reports are held by the reporting service for a limited period — around 90 days — and then deleted, and store and receipt records are kept by the stores and the purchase-verification service under their own policies. Our providers may process data outside the EU/EEA; where they do, the transfer is covered by the European Commission's standard contractual clauses or an equivalent safeguard.
Your rights
You have the right to access, correct, delete, restrict or object to processing of your personal data, and to data portability. Because the app keeps your data on your own device, you exercise most of these directly: edit or clear your player name in the app, or uninstall it. Crash reports carry no identifier we can look you up by, so we may need details of the device and the time of the crash to find one. For anything held by a store, by the purchase-verification service or by the crash-reporting service, contact us at contact.codeunlimited@gmail.com and we will help. You may also lodge a complaint with your data protection authority — in Sweden, IMY.
Children
Deck & Dice is suitable for all ages but is not directed at children under 13. We do not knowingly collect personal data from anyone, children included: nothing in the app asks for personal details, and the crash diagnostics described above are about a device and a bug, not about a person. If you believe a child has provided personal data through the app, contact us and we will act on it.
Changes
If this policy changes, the new version is published on this page with a new effective date. Material changes will also be noted in the app's release notes.
Contact
Code Unlimited, Sweden — contact.codeunlimited@gmail.com