Floe Market privacy notice
The short version
- Web game, not signed in: your game stays on your device.
- Web game, signed in with Google: your save, your first name and initial on the scoreboards (you can turn that off), and any report you send are kept with Google Firebase.
- Steam version: the game sends nothing to me. Steam keeps your saves and scores.
- No ads, no analytics, no tracking. I don't sell your data.
- To see or delete your data, email oran.dan@outlook.com.
Who I am
I make Floe Market on my own, as a sole proprietor in Israel, under the name ChefControl. In this notice “I” means me, Oran Dan. I decide what happens to your data.
Contact: oran.dan@outlook.com
The web game
The web game is at chefcontrol.github.io/floe-market.
If you don't sign in
- Your game stays on your device. The save, a backup, your settings and a few small notes (like which tips you've seen) are kept in your browser's storage. They never leave your device. Clearing the site's data in your browser deletes them.
- The website is hosted by GitHub Pages. When your browser loads the game, GitHub sees your IP address and browser, like any website. GitHub may keep these in its logs for security. I don't get them.
- The game connects to Google Firebase a few seconds after it starts, so sign-in opens fast, and when you open the scoreboard or the wall of shame. Google sees your IP address and browser when it does. Nothing about you is stored there until you sign in.
If you sign in with Google
Signing in turns on cloud saves, the scoreboard, the wall of shame and reports. To stay off the scoreboard and the wall of shame, open Settings, open Privacy and turn off Show me on the scoreboards. That takes your entries down at once and puts nothing new up, on every device you sign in on. Turning it back on puts you back. This is what's kept:
- What
- An account number, your Google name, email address and profile picture link, and when you signed in.
- Why
- To know which save is yours.
- Who sees it
- Me, and Google, who runs Firebase. Never other players.
- Kept
- Until you ask me to delete it.
- What
- Your game: progress, money, upgrades, look and settings, and when you saved. It syncs every 30 seconds while you play. It also keeps whether you show on the scoreboards.
- Why
- So your game follows you to any device.
- Who sees it
- Only you. I can see it as the owner of the project, but I don't look.
- Kept
- Until you ask me to delete it.
- What
- Your first name and the first letter of your last name, the most cash you've held at once, and the furthest stage you've reached.
- Why
- To show the best players.
- Who sees it
- Everyone who plays. It shows your Google name cut short, so “Pat Smith” shows as “Pat S.”. If that name looks like an email address, it shows “A player” instead.
- Kept
- Until you turn off Show me on the scoreboards, which deletes it at once, or ask me to delete it.
- What
- Your first name and the first letter of your last name, the most you've lost in one round at the casino, which game, whether it left you broke, and when.
- Why
- For fun, in the casino's bar.
- Who sees it
- Everyone who plays, the same way as the scoreboard.
- Kept
- The same as the scoreboard: until you turn off Show me on the scoreboards, or ask me to delete it.
- What
- How many reports you've sent in the last hour.
- Why
- To stop more than 20 reports an hour.
- Who sees it
- Me and Google.
- Kept
- It starts again each hour, and is deleted with your account.
Reports (Report a bug or idea)
Only signed-in players can send one. The report window lists what goes before you press Send.
- Always sent: your note, whether it's a bug or an idea, the game's version, your device type (graphics setting, frame rate, screen size, touch or not, browser, graphics chip and memory, and how often the 3D view stopped this visit) and the last few errors the game hit.
- Sent unless you untick it: two pictures of the game screen, and your game state (your save and where you are in the game).
- Never sent: your name or email. The report carries your account number only to keep to 20 an hour.
The report goes to Firebase. Then a script copies it into a private place on GitHub that only I can see, as a to-do item. There, you show up as a scrambled code, not your account number.
Kept: the pictures and your game state are deleted after 30 days. Your note, device type and errors stay with the to-do item for as long as they help me fix and improve the game.
Links to other sites
Settings has links to other websites, like Ko-fi and the credits for the game's sounds. They're plain links. If you open one, that site's own privacy policy applies.
The Steam version
- The game sends nothing to me. There's no Firebase, no Google sign-in and no server of mine.
- Saves are kept on your computer. If Steam Cloud is on, Steam copies them to your Steam account.
- Leaderboards and achievements are kept by Steam with your Steam account. Other players see your Steam name and score on the leaderboards.
- Reports are written to a file on your computer, with recent crash logs. The file only reaches me if you post it on the game's Steam forum or email it to me. Forum posts are public. I delete the pictures and game state in emailed reports after 30 days.
- What Steam tells me: sales and play totals, like how many people bought the game and in which countries, and the leaderboard entries everyone can see. Steam doesn't tell me who you are.
Steam is run by Valve. What Steam keeps is covered by Valve's privacy policy.
Why I'm allowed to use it
- Sign-in, cloud saves, the scoreboard and the wall of shame: to give you the features you turned on by signing in (GDPR article 6(1)(b)).
- Reports: you choose to send each one (article 6(1)(a)). You can ask me to delete it any time.
- The report limit and website logs: to keep the game working and safe from abuse (article 6(1)(f)).
Who else handles it
- Google runs Firebase, which keeps sign-ins, saves, scores and reports for the web game. Firebase privacy.
- GitHub hosts the website and the private place where reports end up. GitHub's privacy statement.
- Valve runs Steam, for the Steam version.
No one else gets your data. Google and GitHub may keep it in the USA or other countries, under the EU's standard contract terms and the EU–US Data Privacy Framework. I'm in Israel, which the EU recognises as protecting personal data well enough.
Your rights
You can ask me to:
- show you the data I have about you, and send you a copy;
- correct it;
- delete it: your sign-in, save, scoreboard and wall of shame entries, report count and reports (you can take your scoreboard and wall of shame entries down yourself, with Show me on the scoreboards under Privacy in Settings);
- stop using it, or use it less.
How to ask: email oran.dan@outlook.com. For the web game, say which Google account you sign in with. I answer within a month.
You can also sign out at any time from the ☁️ row in Settings. Signing out stops syncing but doesn't delete anything; ask me for that.
If you're unhappy with how I handle your data, you can complain to the data protection authority where you live, or to Israel's Privacy Protection Authority.
Children
Signing in, the scoreboards and reports are for players 13 and older, or older where your country's law says so (up to 16 in some EU countries), unless a parent agrees. Google and Steam set their own minimum ages for accounts. If you think a child has sent me data, email me and I'll delete it.
Changes to this notice
When this notice changes, the date at the top changes too. Every older version stays in the game's public code on GitHub.