Privacy

1. Controller & contact

The controller responsible for processing personal data in DIZZY and on this website is:

This notice applies to the DIZZY party game app and the DIZZY website. The services you use to download or install the app also process data as independent controllers.

2. Playing on your device

You do not need a user account. For games played together on one phone, DIZZY stores the names you enter, random local player identifiers and colours, your favourites, sound, haptic and motion settings, and the number of completed local games on your device. This saved crew is not transmitted to our room server.

This storage enables the game functions you expressly choose and lets you reuse your settings. The legal basis is Article 6(1)(b) GDPR. The device storage access required for this takes place under section 25(2), point 2, of Germany's Telecommunications Digital Services Data Protection Act (TDDDG).

Local roles, answers and game states remain in memory for the current game. There is no permanent answer or voting history. You can remove crew members individually and change favourites and settings at any time. Other local app data remains until it is deleted; when you remove the app, your operating system's deletion and backup functions apply.

The Technical measurements section also applies to technical diagnostics in the current test version.

3. Shared online rooms

Lobby and reconnection

When you create or join a room, our server processes your chosen name, a random member identifier, your colour, the room code, the host assignment, game and round settings, and technical readiness and connection information. A nickname is sufficient.

Your device receives a random access token for reconnecting. We store only its cryptographic hash on the server. The room code, member identifier and token are stored in protected device storage in the native app and in the browser's session storage in the web preview.

A room expires 24 hours after it is created. The server clears expired lobby data approximately once a minute and when it restarts. When a member leaves or is removed, their lobby entry is deleted. The lobby is deleted when the last person leaves. See Hosting & security for information about backups.

You can remove the locally saved access credentials by leaving the room or selecting “Gespeicherten Zugang vergessen” (“Forget saved access”). They are not deleted automatically after a failed reconnection. On iOS, Keychain entries can survive uninstalling the app. Forgetting access on your device does not automatically delete a still-valid lobby on the server; it expires as described above.

Content of the current game

During an online game, the server processes roles, answers, votes, scores and, where applicable, statements entered by players. Other people in the same room see the content made available to them under the game rules. This includes, for example, player-written statements in “Zwei Wahrheiten” (“Two Truths”). Private roles and answers are shared only with the people authorised to receive them.

On our server, this game content is held only in memory and is not stored in Postgres. Returning to the lobby resets the game; expiry of the room or a server restart also removes the current game state. DIZZY does not provide built-in voice or video calls.

The legal basis for providing the online game you request is Article 6(1)(b) GDPR. The necessary room access credentials are stored on your device under section 25(2), point 2, TDDDG. We cannot provide online functions without connection data, a name and room access credentials; local games remain available.

4. Hosting & security

Our server is hosted by NovaCloud-Hosting (Tech Tide Portugal Unipessoal LDA, Portugal) in Frankfurt am Main, Germany. The DIZZY room database and this website are operated there.

Provider information: NovaCloud-Hosting.

Dokploy is the software used to manage our server. We use it to operate the room API, the Postgres database and this website. Establishing a connection involves technically necessary network data, in particular IP addresses, the time, the requested address and information about the connection or browser.

The room server keeps temporary counters in memory to limit excessive requests. They are cleared regularly after their time windows expire, within approximately one hour at the latest. Our application logs contain generic status and error messages; we do not log player names, game answers or access tokens there.

Cloudflare

We use Cloudflare in front of our server to deliver and protect connections. Cloudflare processes information including IP addresses and technical request data and, as a proxy, can also technically process the content transmitted through it. The provider is Cloudflare, Inc., USA. Processing may also take place outside the EU or EEA.

Cloudflare explains its processing and the safeguards it describes for international transfers in its Privacy Policy and Data Processing Addendum.

Logs and backups

The website service does not create its own access logs. Technical security logs in the upstream infrastructure are retained for as long as necessary to detect and investigate disruptions or attacks and to comply with legal requirements. Cloudflare describes these purpose-based retention criteria in its linked privacy policy.

No automatic database backups are currently configured for the DIZZY database in Dokploy. The website service has no database of its own and does not create backups of visitor data.

The technical provision of the requested services is based on Article 6(1)(b) GDPR. Security measures, troubleshooting and prevention of abuse are based on Article 6(1)(f) GDPR; our legitimate interest is a secure, reliably accessible service.

5. Technical measurements with Expo Observe

We use Expo Observe, provided by 650 Industries, Inc. (USA), to analyse the app's technical performance. Measurements include, in particular, startup times, session duration, device and operating system information, app and SDK versions, language, and power, network and performance data. They include random installation and session identifiers, so this data should not be understood as fully anonymous. We do not link the installation identifier to your DIZZY room memberships.

We do not send player names, room access credentials, secret roles, answers or votes to Observe as diagnostic events. There is no integration for advertising purposes. The web version and Expo Go do not use this Observe integration.

According to Expo, Observe data is retained for 90 days. On the device, the SDK keeps diagnostic records in a local database with a seven-day retention window; on iOS, records are cleared when the database is next opened. The random installation identifier is stored separately on the device.

Expo describes processing in the USA and safeguards for international transfers in its Privacy Policy. Retention information is available from Expo Observe.

6. This website

Our website provides information about DIZZY and a way to contact us. Its graphics, fonts and styling are served by our website. We do not embed analytics, advertising or social media scripts.

When you choose a language or appearance on the website, we save your choice in your browser's local storage (localStorage) so it is remembered on your next visit on the same device. Only the selected values are stored, without a visitor identifier. We use these preferences only to provide your chosen language and appearance, not for usage analytics or advertising. If you have not made a choice, we use your browser or system preferences as a starting point.

You can change your choice using the website controls at any time, or remove it by clearing this site's data in your browser. The locally saved preferences remain until then. The storage access required for this provides the preference function you request and takes place under section 25(2), point 2, of Germany's Telecommunications Digital Services Data Protection Act (TDDDG). Where personal data is processed in this context, the legal basis is Article 6(1)(f) GDPR; our interest is to provide your chosen language and appearance.

The contact form also uses a necessary security cookie with a validity period of 60 minutes and a one-time form token valid for 30 minutes. These protect the form against misuse and requests triggered by other sites. The cookie is restricted to the form's security function, is not available to website scripts and is not used for tracking. This storage access provides the secure contact function you request and takes place under section 25(2), point 2, TDDDG.

Visiting the website also involves the technical data described under Hosting & security. The legal basis is Article 6(1)(f) GDPR; our interest is to provide the website securely and accessibly. If you open an external information link, the respective provider's notices apply there.

7. When you contact us

You can reach us through the contact form or by email at cwcodes@icloud.com. The form requires your email address and message so we can handle your enquiry and reply. You may add your name and a subject voluntarily. We also process any information you choose to include in your message. Please send only information we need for your enquiry.

The contact form sends your information to our web server. It uses our iCloud Mail account over an encrypted SMTP connection to send the message to our mailbox at cwcodes@icloud.com. We use Apple’s iCloud Mail for sending and receiving email. The web server holds the message only in memory while processing and sending it; it does not create a contact database or persistent delivery queue and does not record message content or your email address in its application logs. The message is processed and stored by the email service and in our mailbox.

Our mailbox uses Apple's iCloud Mail. The provider for our location is Apple Distribution International Ltd., Ireland. Apple may also process data in the USA and other countries. Apple explains this processing and its safeguards for international transfers in its Privacy Policy. Its iCloud terms also describe the service.

To protect against spam and abusive submissions, the web server uses a hash derived from your connection's IP address and temporary request counters. These security records are kept only in memory for a 30-minute window and cleared after it expires. The raw IP address is not written to the contact service's application logs. The security cookie and form token described above also protect the form. A hidden form field helps detect automated submissions; we do not embed an external CAPTCHA service. The legal basis for these protective measures is Article 6(1)(f) GDPR; our legitimate interest is a secure and accessible means of contact.

Where your enquiry concerns using DIZZY under our service relationship or services prepared at your request, processing is based on Article 6(1)(b) GDPR. For other enquiries, the legal basis is Article 6(1)(f) GDPR and our interest in answering your enquiry. When fulfilling statutory data protection rights, Article 6(1)(c) GDPR applies together with the relevant legal obligation.

We delete correspondence once your enquiry has been fully resolved and further retention is no longer required to clarify follow-up questions, establish or defend legal claims, or meet legal obligations. Where these reasons require retention, we restrict further use to that purpose. The receiving email service's retention arrangements also apply. Without an email address and message, we cannot process an enquiry through the form; the other website and game functions remain available.

8. Your rights

Subject to the legal conditions, you have the right to access your data, have it corrected or erased, restrict processing and receive data portability (Articles 15–20 GDPR). Contact cwcodes@icloud.com to exercise these rights. We may need additional information to associate you with the relevant room or record and protect other people's data.

Where processing is based on your consent, you may withdraw it at any time with effect for the future. Withdrawal does not affect the lawfulness of processing carried out before you withdrew consent.

You may also complain to a data protection supervisory authority, particularly in the place of your habitual residence, workplace or the alleged infringement (Article 77 GDPR).

For our location in Hamburg, the competent authority is the Hamburg Commissioner for Data Protection and Freedom of Information.

DIZZY does not make decisions about you based solely on automated processing that have legal or similarly significant effects. There is no profiling for advertising.