Privacy Policy

Data not collected

Under no circumstances does Lupus Assistant collect:

• ·name, surname, email address or telephone number
• ·geolocation data
• ·contacts, images, camera, microphone or files held on the device
• ·advertising identifiers or data used for commercial profiling

The only permission requested on Android is network access, required for the online rooms and for the usage statistics described below. The application provides for no accounts, uses no third-party authentication, and builds no user profile.

Data stored on the device

In order to allow an interrupted game to be resumed, the application stores in the device’s local memory:

• ·the game state: players, assigned roles, turn and log of events
• ·the player names entered manually by the storyteller
• ·the user’s preferences: selected language and consent to usage statistics

Such data is transmitted to no recipient. The controller has no access to it, does not receive it and is unable to recover it. It is retained until the game is reset within the application or the application is uninstalled.

The entry of player names is left to the storyteller; the application remains fully functional where pseudonyms are used instead.

Online rooms (optional feature)

Lupus Assistant allows a room to be opened, which players may join from their own device in order to view the role assigned to them. The feature is entirely optional: where a game is played on the storyteller’s device alone, it is never activated and no data leaves the device.

Where a room is opened or joined, the following is transmitted to the controller’s servers:

• ·the pseudonym chosen by the user upon joining
• ·the room code
• ·the assigned game role and the capacity of storyteller or player
• ·temporary technical identifiers relating to the connection

A session identifier is also stored on the device, used solely to restore the connection to the room in the event of a network interruption. It is of limited duration and is replaced each time a room is joined.

The data indicated above is temporary in nature: it is processed solely in order to allow the room to function, is not used for further purposes, is not combined with other data, and is not disclosed to third parties. The choice of pseudonym is left to the user, who is not required to provide their real name.

Deletion does not coincide with participants leaving: rooms that are no longer active are removed by an automated procedure, run several times a day. Data is not retained beyond that removal.

Anonymous usage statistics

In order to establish how the application is used — which roles are employed, how long games last, at which stage they are abandoned — anonymous statistics are collected by means of an analytics tool hosted on the controller’s own servers. The data is accordingly not disclosed to any third-party provider.

The events recorded concern the course of the game alone: opening role selection, starting and ending a game, roles in play, completed nights, abandoned games, consultation of a role’s guide entry, change of language and creation of a room. Each event carries numerical values and role codes only: number of players, current turn and winning side.

• ·no player name is transmitted in any case
• ·no user identifier is provided for: events are anonymous, aggregated by session, and cannot be traced back to a natural person
• ·no profiling is carried out, no advertising is present, and no disclosure to third parties takes place

Collection may be disabled at any time. On the application’s opening screen, under “Preferences”, the relevant control is available: where collection is disabled no event is transmitted, and the setting is retained.

Legal bases and retention

For users located in the European Union, processing is based on the following legal grounds (Regulation (EU) 2016/679):

• ·online rooms — performance of the service requested by the user (Art. 6(1)(b)). Data is retained until the automated removal of the room described above
• ·usage statistics — the user’s consent (Art. 6(1)(a)), which may be withdrawn at any time by means of the control available in Preferences. Aggregated data is retained for statistical purposes
• ·data held on the device — this does not constitute processing by the controller, as it is never transmitted beyond the device

Rights of the user

Users are entitled to access their data, to obtain its rectification or erasure, to object to processing and to withdraw any consent given. In practical terms:

• ·as regards data held on the device, it is sufficient to reset the game within the application or to uninstall it: the data is erased with it, and the controller retains no copy
• ·as regards usage statistics, it is sufficient to disable the relevant option in Preferences: collection ceases immediately
• ·as regards online rooms, it is sufficient to leave the room: the related data is permanently erased by the automated procedure within a few hours

Requests concerning the exercise of the rights set out above may be addressed to privacy@lupusassistant.com.

Users resident in the European Union are further entitled to lodge a complaint with the supervisory authority of their country.

Children

Lupus Assistant is not intended for children under the age of thirteen, nor does it provide for their use. The controller does not knowingly collect data relating to children; any data entered into an online room is in any event temporary in nature and is removed by the automated procedure described above.

Amendments to this policy

Where the functionality of the application changes, this policy is updated together with the date shown above. The version in force is at all times the one published at this address.