Privacy Notice

1. Who we are

This Privacy Notice applies to Diggys ("Diggys", "we", "us", "our"), the operator and data controller of the Diggy Rollers game and website. If you have questions about this notice, contact us through the in-app support channel.

2. Data we collect

• Account data: username, email address, hashed password, and account creation date.
• Game data: your Diggy collection, coins, biome progress, friends list, trades, chats, and game state.
• Usage data: session timestamps, last-seen time, and presence ("is playing") flag.
• Device/technical data: IP address, browser type, and basic device information for security and fraud prevention.
• Payment data: handled by our payment provider (Paddle). We receive transaction confirmations but do not store full card details.

3. Why we use your data

• To create and operate your account (legal basis: contract).
• To provide game features such as battles, trading, chat, and leaderboards (legal basis: contract).
• To prevent fraud, abuse, and unauthorized access (legal basis: legitimate interests).
• To improve the game and fix bugs (legal basis: legitimate interests).
• To comply with legal obligations (legal basis: legal obligation).

4. Who we share data with

• Paddle.com — our Merchant of Record, which processes payments, calculates taxes, issues invoices, and handles billing support.
• Hosting and infrastructure providers that store our database and serve the app.
• Other players — your username, public profile, and in-game activity are visible to friends and players you interact with.
• Authorities where required by law.

5. Data retention

We keep your account data for as long as your account is active. If you delete your account, we delete or anonymize your personal data within a reasonable period, except where we must retain it for legal, tax, or fraud-prevention purposes.

6. Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict, port, or object to our use of your personal data, and to withdraw consent. To exercise any of these rights, contact us through in-app support. You may also have the right to complain to your local data protection authority.

7. Security

We use appropriate technical and organizational measures (encryption in transit, access controls, hashed passwords, row-level security in our database) to protect your data. No system is 100% secure, but we work to limit risk.

8. International transfers

Your data may be processed in countries other than where you live. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses.

9. Children

The game is not directed to children under 13 (or the minimum age in your country). We do not knowingly collect personal data from such children.

10. Cookies

We use only essential cookies and local storage required to keep you signed in and remember your game state. We do not use advertising cookies.

11. Changes

We may update this Privacy Notice from time to time. We will post the updated version on this page with a new "Last updated" date.