Privacy Policy

The short version

• We collect only what the game needs to work: your account name, your progress, and the connection details needed to get you onto our server.
• We never store your password. We don't ask for your email address, real name or date of birth.
• No advertising trackers, no analytics, and we never sell your data.
• Voice chat is passed live to the players near you. It is never recorded.
• You can ask us for a copy of your data, or to delete your account, at any time.

Who is responsible

369Games ([legal name], [address], the Netherlands, KvK [number]) is responsible for the personal data described here. You can reach us at [email protected].

What we collect in DeadRooms, and why

What	Why	How long
Account name	To log you in and show you to other players.	As long as your account exists.
Password	We never store it. The server keeps only a salted, one-way hash (PBKDF2-SHA256), which is enough to check your password but can't be turned back into it.	As long as your account exists.
"Remember me" login token	If you tick Remember me, the server gives your device a login token so you don't have to type your password every time. It's kept on your device and on the server. It is never your password.	Until you log out on that device.
Game progress	To save your game: unlocks, characters and looks, loadout, your Fingers and Almond Water balances, stats such as kills and best round, and when your account was created and last used.	As long as your account exists.
IP address and connection logs	To connect you to the server, keep it safe, and deal with cheating and abuse. The server writes a short line when you log in, including your IP address.	[up to 30 days]
Voice chat	Your microphone audio goes through our server, live, to players near you in the game. It is never recorded or stored. You can mute your microphone or switch voice chat off in the settings.	Not stored.

Your settings (graphics, controls, volume, which server to connect to) are saved only on your own device.

What other players see

Other players can see your account name, your character, your party and lobby status, and your scores on in-game leaderboards. Players near you in a run can hear you when your voice chat is on.

Purchases

When you buy Almond Water, you pay through the store you're playing from ([Google Play and/or Steam]). The store handles your payment details; we never see them. We receive a purchase receipt (an order number, what was bought, and when) so we can check it's real and add the Almond Water to your account. Dutch tax law requires us to keep records of sales for 7 years. The store's own privacy policy applies to what you share with it.

Our legal grounds

• To give you the game you signed up for (performance of a contract, GDPR Article 6(1)(b)): your account, progress, voice chat and purchases.
• To keep the game safe and fair (legitimate interest, Article 6(1)(f)): connection logs, and handling cheating and abuse.
• Because the law requires it (legal obligation, Article 6(1)(c)): keeping records of sales.

Who else gets your data

We don't sell or rent your data to anyone. It is shared only with:

• other players, as described above;
• the store you buy from, for purchases;
• [the company that hosts our game server, if any];
• authorities, if the law requires us to.

Our game server is located in [the Netherlands]. We don't send your game data outside the European Economic Area.

Your rights, and deleting your account

You have the right to see the data we have about you, to have it corrected, to get a copy in a common format, to object to how we use it, and to have it deleted.

To delete your account: send a message to [email protected] with your account name. We may ask you to prove the account is yours, for example by logging in. We'll delete your account and progress within 30 days, except sales records we're required to keep. Any Almond Water and items on the account are lost when it's deleted.

We answer every request within one month. If you think we're handling your data wrongly, please tell us. You also have the right to complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or the authority in your own country.

Children

If you're under 16, please ask a parent or guardian before you make an account or buy anything. If a parent finds that their child gave us data without permission, contact us and we'll delete it.

This website

This website sets no cookies, runs no analytics, and loads no fonts, scripts or trackers from other companies. Like any website, our host may keep standard server logs (such as IP address, time and page visited) for security. Our host is [website host].

Changes

If we change this policy, we'll update the date at the top. If it's a big change, we'll also say so in the news and in the game.