This Privacy Policy applies to the Decoy mobile application (the "Service"). We respect your privacy and have designed the app to collect the absolute minimum data necessary to function.
We do not require you to create an account to use the Service. We do not sell, trade, or rent your information to others.
Purpose Limitation: We only use collected data for gameplay functionality, subscription validation, and anonymous analytics. We do not use it for advertising or profiling.
Device Identifier: When you first open the app, a random unique identifier (UUID) is generated for your device. This identifier is not linked to your name, email address, or any personal information. It is used to validate your "Decoy Pro" subscription status via RevenueCat and to associate anonymous gameplay analytics. It resets if you uninstall and reinstall the app.
Usage Data: We collect aggregated, anonymous metrics via PostHog Analytics to help us improve the app, including game mode played, number of players, game outcome, and basic app lifecycle events (e.g., when the app is opened or backgrounded). This data is not linked to your personal identity.
Display Names (Connected Play only): If you use the Connected Play feature, the room host may enter a name for each player. These names are stored only for the duration of that game session and deleted when the session ends. We recommend not using real names.
Player Answers (Connected Play — Gaslighter mode only): When playing Gaslighter in Connected Play, the text answers you type are stored temporarily on our servers so all players can see results simultaneously. These answers are retained for up to 30 days as part of the game session data, then automatically deleted. We recommend not including personal information in your answers.
Content Feedback: If you rate game content within the app (thumbs up/down on words or questions), we store the content you rated, your rating, and any optional comment you type. Comments are free text — please do not include personal information. This data is used solely to improve game content.
We share anonymous data only with trusted third-party service providers necessary to operate the app:
Game Session Data: Multiplayer game sessions (room codes, player roles, game events) are retained in our database for up to 30 days, after which they are automatically deleted.
Content Feedback: Ratings and comments submitted on game content are retained for up to 12 months to inform content improvements, after which they are automatically deleted.
Subscription Data: Your purchase history is retained by Apple (App Store) and is subject to Apple's privacy policy. RevenueCat retains purchase validation records subject to their privacy policy.
Local Data: Your anonymous device identifier is stored locally on your device. If you delete the app, this data is removed.
The app does not request access to your camera, microphone, location, contacts, photos, or any other device features. All functionality is available without granting any permissions.
Age Rating: 18+
We do not knowingly collect personally identifiable information from children under the age of 13. The app is designed for general audiences. Since we do not collect personal information from any user, no special handling is required. If a parent or guardian believes their child has submitted personal information (e.g., via a content feedback comment), please contact us immediately so we can delete it.
We use industry-standard SSL/TLS encryption for all data in transit. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
Since we do not collect personal accounts, we do not hold personal data such as names or emails.
Right to Delete: You may delete your local data by uninstalling the app. To request deletion of any content feedback comments you submitted, please contact us.
No Tracking: We do not track users across third-party websites or apps and do not use data for advertising or marketing purposes.
Do Not Sell: We do not sell your personal data.
GDPR: If you are located in the European Economic Area, you may contact us with any data-related requests. Because we process no personal data, most GDPR obligations do not apply.
We may update this policy from time to time. We will notify you of significant changes by updating the effective date above. Continued use of the app constitutes acceptance of the updated policy.
John McGuire
Email: support-decoy@theplace.au