Privacy

Sudo Smash is made by DropDev AB, Sweden, which is responsible for the personal data the game handles. This page says what the game stores about you, why, who else handles it, how long it is kept and how to get rid of it.

What is stored, and why

• An account. A player id is made the first time you play, with no details from you. If you secure the account you also give an email address, or sign in with Apple or Google; we then store the address and which provider you used, so you can get the account back on a new device. With Apple we also keep a token Apple gives us, only so that we can revoke it if you delete your account. To provide the game (contract).
• Your game. Your name, emblem and title, the robots you own and how they are set up, your compute, patch progress, quests, friends, party and club, the players you recently played with and the players you blocked, and the matches you report. This is the game itself. To provide the game (contract).
• Purchases. For each purchase: the store's transaction id, the product, its price and currency and when it was made, so we can deliver it and keep our books. We never see your payment details. To provide what you bought (contract) and to keep accounts (legal obligation).
• What you write. Your name, club names and descriptions, club chat and nicknames you give friends (only you see those), kept so other players can read them, and reports you file, with what they quote. To provide the game (contract), and to keep it safe (legitimate interest).
• Notifications. A device token and your time zone, so notifications can reach you at a sensible hour. On iPhone and on Android 13 and later this only happens if you allow notifications; on older Android versions notifications are on by default, and turning them off in Settings removes the token. Your consent, which you can withdraw in Settings at any time.
• How you play. What happens in the game: matches and how they went, the screens you open and the menu buttons you press (never what you type), purchases and rewards, how long you play, frame rate, your phone's model, system version, language and screen size, and the country you play from (from the network; the address itself is not kept). It is tied to your player id and in-game name, never to your email, and used only to see how the game is played and to make it better. You can turn it off in Settings under Share usage data. Legitimate interest in improving the game; you can object at any time.
• Where you found the game. On iPhone and iPad, if the game was downloaded after an ad in the App Store's search, Apple tells us which of our ad campaigns and search words it was, and the day of the tap; it tells us nothing about you. It is asked once, only while Share usage data is on, and tells us which ads bring players who enjoy the game. Legitimate interest in spending on the right ads; you can object at any time.
• Crash reports. When the game crashes it sends what it was doing and where in its code it stopped, the next time it starts. Legitimate interest in fixing the game.
• Fair play. A secret key stored on your device, so your account cannot be taken over from another phone, and records of matches whose results did not add up. Legitimate interest in security and fair play.

This website

sudosmash.com asks before it sets any cookie. If you allow it, Google Analytics sets its cookies (_gaand _ga_ followed by an id) to count visits: the pages you open, how far you scroll, the films you play and how much of them, the store key you press and the FAQ answers you open, with your browser, device, language and the country and city the network places you in. Google Analytics does not keep your IP address, Google signals and advertising features are off, and the data is kept 14 months. If you say no, no cookie is set and Google only gets a cookieless note that a page was opened, with nothing that ties your visits together. Change your answer at any time under Cookies at the foot of every page; saying no removes the cookies. Your consent.

The films on the site come from YouTube, which is only contacted when you press play, through its privacy-enhanced mode (youtube-nocookie.com).

What is never stored

No advertising identifier, no location finer than the country, no contacts, no microphone or camera, and nothing you type on the game's keyboard beyond what you send. There are no ads. Nothing is sold, and nothing is shared with advertisers or data brokers.

Who else handles it

These companies handle data for us, under agreements that bind them to protect it as we do:

• Google Firebase holds the database (in the EU) and the sign-in.
• Vercel runs our servers and this website; every request from the game passes through it.
• PostHog, with its servers in the EU, receives the record of how you play and crash reports, for analytics.
• Google Analytics counts visits to this website, if you allow it, and YouTubeplays the films on it.
• Resend sends the emails with sign-in codes and account deletion links.
• Apple (Sign in with Apple, App Store purchases, notifications on iPhone and iPad) and Google (Google Play purchases, notifications on Android). A notification about a club message carries the message to your device through them.

Some of them are based in the United States and may handle data there. Such transfers rely on the EU-U.S. Data Privacy Framework or the European Commission's standard contractual clauses.

Other players see your name, emblem, title and compute (in the game's leaderboards too, unless you hide your record in Settings), anything you write in a club, and, if they are your friends, when you are online and what you are playing. Your email is never shown to anybody.

How long it is kept

• Your account and game: until you delete the account.
• Records of purchases: up to seven years, as Swedish bookkeeping law requires.
• Usage data: a year. Crash reports: a year after the crash was last seen. Both go with your account.
• Club chat: until it is removed, its club is closed or your account is deleted.
• Reports about behaviour: a year after a moderator handled them, so a pattern can be seen.
• Match claims that did not add up: a year.

Deleting your account

In the game, open Settings, then Manage account and Delete account. It goes at once and for good, with everything listed above except what must be kept as described. If you no longer have the game, ask for deletion here.

Your rights

You may ask for a copy of the data we hold about you, have it corrected, deleted or moved, restrict how it is used, and object to how it is used for analytics, security and fair play. Write to support@dropdev.se; we answer within a month. If you are unhappy with how we handle your data you can complain to the Swedish Authority for Privacy Protection (IMY, imy.se) or to the authority where you live.

Children

Sudo Smash is not for children under 13, and we do not knowingly keep an account for one. If you believe a child has an account, write to us and we will delete it.

Contact

DropDev AB, Sweden. support@dropdev.se. We answer within a few days, and within one day for anything about safety.