Privacy policy
In short: to play you need no email and no password. We use no cookies, no tracking and no advertising. We keep what the game needs – your player name and what you do in the world – and nothing to sell.
1. Controller
DIE ANTWORT · Büro für Informationstechnik GmbH, Obere Weißgerberstraße 4, 1030 Vienna, Austria (imprint). Privacy questions: team@die-antwort.eu.
2. This website (brickbrag.com)
- Server logs: when you open a page, our web server notes your IP address, the time, the page, your browser's name and where you came from. We need this to run the site and keep it safe (Art. 6(1)(f) GDPR) and delete the logs after 14 days.
- No cookies, no tracking: no analytics, no advertising, no social media plugins. Fonts and videos come from our own server.
- Player count: to show how many play right now, your browser asks the game server (s1.brickbrag.com) – that request is logged like any other (section 3).
3. The game
What we process
- Your account: the player name you choose, how your figure looks, a secret key that identifies your browser (kept in your browser's local storage, we keep only a fingerprint of it), when you joined, whether you are an admin.
- What you do in the world: where your figure stands, the bricks you place, your land, inventory, coins, gifts, trades, lap times and messages the game leaves for you.
- Chat: messages go to the players near you and are not stored.
- Your IP address: used while you are connected, to keep out floods of new accounts and attacks; it is not saved with your account. The web server's logs (14 days) and the game server's system log (limited in size, a few weeks at most) note connections and joins with the player name.
Why and on what basis
- To run the game for you – your account, your world, your progress (Art. 6(1)(b) GDPR, our terms of use).
- To keep the game safe and fair: stop cheats, floods and abuse (Art. 6(1)(f) GDPR, our legitimate interest).
- The key in your browser's local storage is strictly needed for the game to know you (§ 165(3) TKG 2021); no consent is needed for it.
What others see
Other players see your name, your figure, what you build and say, and your lap times. Choose a name that does not give away who you are.
Notifications to us
When someone joins, the server sends us a short push message with the player name (through the push service ntfy.sh) so we can say hello and look after the game (Art. 6(1)(f) GDPR). It contains no other data about you.
Feedback
In the game's settings you can send us feedback. We keep your message with your player name and the time, and – only if you enter it – your email address, so we can answer you. We use it to improve the game and to reply (Art. 6(1)(f) GDPR; for the email, because you asked for an answer). Only we read it in our admin view; the push message we get about it carries only your player name, never the text or your email. We delete feedback once it is dealt with, at the latest after 12 months, and at once if you ask us.
How long
For as long as your account exists. Write to us with your player name and we delete it; worlds may also be reset (see the terms). Safety copies of the game's database, made before each update, are kept for a limited time and then deleted.
4. Sponsors
Businesses that ask to sponsor a space give us their website, sponsor texts, colors, their email address and – in the payment checkout – their billing details. The payment runs through our payment provider Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Dublin 2, Ireland, under its own privacy policy. Details are in section 10 of the sponsor terms. A sponsor's name, icon and website are public: in the game and on our sponsoring page.
5. Who else gets data
- Hosting: DigitalOcean, LLC (New York, USA) runs our servers as our processor; they stand in Frankfurt, Germany. Where data could reach the USA, the EU's standard contractual clauses apply (Art. 46 GDPR).
- Push messages: ntfy.sh (section 3), only player names.
- Email: our email provider, when you write to us.
- We sell no data and use none for advertising.
6. Your rights
You may ask for access, rectification, erasure, restriction, data portability, and object to processing based on our legitimate interest (Art. 15–21 GDPR) – write to team@die-antwort.eu; please name your player name so we find your account. You may complain to the Austrian Data Protection Authority (Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna, dsb.gv.at). There is no automated decision-making.