Who we are
- controller
- SorkoPiko, Australia
- contact
- [email protected]
This policy follows the EU and UK GDPR, which also covers the Australian Privacy Principles.
What we keep, and for how long
| data | why | legal basis | how long |
|---|---|---|---|
| Steam ID, display name, role, date joined; saved levels, download history; when the account was last active in the game or on the website | your account and its features | contract | until you erase the account |
| levels, songs, descriptions; runs, replays and failed attempts; ratings; runs you share, and the runs you like | hosting and showing them; leaderboards, cheat checks, level statistics | contract; legitimate interests | until you erase the account, then without your name; a replay for 7 days, then while its run is shared or shown on a leaderboard |
| watches of shared runs: your account, or a hash of your IP address when you're signed out | counting each viewer once a day | legitimate interests | two days; then only the count |
| reports you send; bans, strikes and messages about your levels; copyright notices, with names, addresses, email addresses, phone numbers and IP addresses; dispute statements; the email we send about them | handling reports and notices; enforcing the terms | legitimate interests; legal obligation | as long as needed to handle the report or notice and any legal claim |
| purchases: order number, email, status and dates, and a hash of the key (never card details, which go to Lemon Squeezy only) | unlocking downloads and sign-up; refunds; Steam keys later | contract; legal obligation | as long as tax and consumer law require; the email goes when you erase the account |
| crash reports: game version, system and graphics details, the error, a stack trace and the end of the game log (no account or IP address) | fixing crashes | legitimate interests | 90 days |
| anonymous usage data from the game: a random install ID, the system it runs on, and when it's open and what you're doing in it (no account or IP address; see below) | knowing how many people play, for how long, and which systems to support and test on | legitimate interests | 90 days |
| sign-ins (time, IP address, browser or game); server logs | keeping you signed in; security | legitimate interests | a short time |
Levels stay after you delete them or erase your account, as the terms say. Songs removed after a final copyright takedown are deleted.
The game sends a crash report automatically when it crashes. In the game's settings you can switch that to ask first.
Anonymous usage data
While the game is open it sends us anonymous usage data, whether or not you're signed in. It's never linked to your account: the game doesn't send your sign-in with it, and we don't connect it to an account or keep your IP address with it. It's identified only by an install ID, a random number the game makes once for each account's folder on a computer and keeps beside that account's settings (so two accounts used on one computer have two install IDs). It isn't your account, your Steam ID or anything about your computer, and it's never synced to other computers; deleting it makes a new one. We keep it for 90 days.
Once a day, a system report with exactly these fields:
- the install ID;
- the game's version;
- the operating system, its version and the processor architecture (such as Windows 11, x86_64);
- the processor's model (on Linux single-board computers whose processor has no name, such as a Raspberry Pi, the board's model instead) and number of cores, and the amount of memory, in whole gigabytes;
- the graphics card's model, its driver and version, and the graphics API the game uses (Vulkan or Metal);
- the size in pixels and refresh rate of the monitor the game is on;
- the audio API the game plays through (such as WASAPI);
- the game's language.
When the game starts, every 2 minutes while it's open, and when it quits, a heartbeat with exactly these fields: the install ID, a session ID (another random number, new each time the game starts), whether the game is starting, still open or quitting, and whether you're in the menus, playing a level, in the editor or watching a replay.
Nothing else is sent: no names, user names, file paths, serial numbers, or names of your monitor or audio devices.
To stop it, turn off SHARE ANONYMOUS USAGE DATA under PRIVACY on the account tab of the game's settings. The game then sends nothing more; what we already have is deleted after 90 days. Because the data isn't linked to you, we can't find or delete it on request.
Steam gives us your public Steam ID when you sign in. The rest comes from you and from using the service.
Who sees it
- Everyone: your display name, your levels, and your runs with their replays when they are shared or shown on a leaderboard, with how often they're watched and liked.
- Our staff: everything above, to moderate the service.
- The uploaders of the levels, if you file a copyright notice about them: your name or organisation.
- A claimant, if you dispute their notice and our staff ask them to respond: your dispute statement, without your name or contact details.
- Our processors, who handle data for us under contract:
- cloud storage provider
- stores levels, songs and replays
- hosting provider
- runs our servers and database
- email provider
- sends our messages
- Steam (Valve)
- signs you in; it has its own privacy policy
- Lemon Squeezy
- sells the game as merchant of record: checkout, payment, receipts and keys; it has its own privacy policy
We are in Australia, so data of people in the EU and UK is processed there. Where the law requires it, transfers outside the EU and UK rely on standard contractual clauses.
Cookies
The site sets bl_session when you sign in, to keep you signed in, and removes it when you sign out. While you sign in with Steam it also sets bl_oid, which lasts a few minutes. Neither is used for tracking.
Your rights
You can ask us for a copy of your data, to correct it, to restrict how we use it, or to move it to another service. You can object to processing that rests on legitimate interests. Write to [email protected].
To erase your account, sign in and use "erase my account" on your account page. It removes your name, Steam ID, sign-ins, saved levels and download history. Your levels, runs and replays stay without your name. We cannot erase an account while a ban is in force.
Complaints
If you're unhappy with how we handle your data, contact us at [email protected] and we'll work to resolve it.
You also have the right to complain to a data protection authority.
Children
The service is for people aged 13 and over. If we learn that we hold data of a younger child, we delete it.
Changes
We post changes here with the date. For significant changes we tell players in advance where we can.