Privacy Policy

TDC is operated by an independent solo developer based in Germany. The controller responsible for the processing of your personal data within the meaning of Art. 4(7) GDPR is:

We have not appointed a Data Protection Officer, as we are not legally required to do so. For any privacy-related request, contact us using the details above or via our Support page.

• To play with an account we store your e-mail, username and game progress. Your password is never stored in plain text — it is securely hashed by our authentication provider.
• We use your data to log you in, save your progress, run leaderboards, secure the game and recover accounts — nothing else.
• We do not sell your data, do not run advertising, and do not use tracking or marketing cookies.
• You can access, correct, export or delete your data at any time, and lodge a complaint with a supervisory authority.

Depending on how you play, we process the following categories of data:

Account & authentication data

Game progress & statistics

When you play with an account, your progress is saved to the cloud so you can continue on any device. This includes:

• Experience, levels, prestige and rebirth state
• Relics and unlocked content
• Achievements and bestiary progress
• Gameplay statistics (e.g. words typed, accuracy, elite kills)
• Your in-game settings and preferences

Purpose: providing the core service — persistent cloud saves and character progression.

Leaderboard data

If you appear on a leaderboard, your username and the relevant ranking value (all-time level, weekly level gain, or elite kill count) are stored and displayed publicly to other players. Do not use a username you are not comfortable showing publicly.

Guest accounts

You may play as a guest without registering. Guest progress and settings are stored locally in your browser. A guest session is not linked to an e-mail address and cannot be recovered if your browser data is cleared. Guests do not appear on cloud leaderboards unless and until they create a registered account.

Technical & security data

Like virtually all online services, our backend and hosting provider may automatically process limited technical data needed to deliver and secure the game — for example your IP address, timestamps, and basic request/error logs (“server logs”). We also keep minimal anti-cheat / integrity records to detect manipulation of scores or progress.

Purpose: security, abuse and fraud prevention, server functionality and stability.

Cookies & local storage

We use only strictly necessary and functional storage (authentication, session and settings). We do not use advertising or tracking cookies. See our Cookie Policy for details.

We process personal data only where the GDPR allows it:

We keep your account and game data for as long as your account exists. When you delete your account, the associated personal data (e-mail, username, progress, statistics and leaderboard entries) is deleted or anonymised, except where we are legally required to retain certain information for a defined period.

Residual copies may persist for a short time in routine backups before being overwritten. Server and security logs are kept only as long as needed for their purpose and then deleted.

We do not sell your personal data and do not share it for advertising. We rely on a small number of service providers who process data strictly on our behalf under data-processing agreements (Art. 28 GDPR):

International transfers

Some providers may process data outside the European Economic Area (e.g. in the United States). Where this happens, transfers are safeguarded by appropriate mechanisms such as the EU Standard Contractual Clauses or an applicable adequacy decision. Confirm the exact region and safeguards for your chosen providers and update this section: Standard Contractual Clauses (SCCs) per Art. 46 GDPR.

Under the GDPR you have the right to:

• Access the personal data we hold about you (Art. 15)
• Rectification of inaccurate or incomplete data (Art. 16)
• Erasure — “the right to be forgotten” (Art. 17)
• Restriction of processing in certain cases (Art. 18)
• Data portability — receive your data in a portable format (Art. 20)
• Object to processing based on legitimate interests (Art. 21)
• Withdraw consent at any time, where processing is based on consent (Art. 7(3))

To exercise any of these rights, contact us at support@typingdungeoncrawler.com. You can delete most of your data yourself by deleting your account in the game; for anything else we will respond within the statutory time frame.

We take reasonable technical and organisational measures to protect your data, including:

• Encrypted connections — all traffic is served over HTTPS/TLS
• Secure authentication handled by Supabase Auth
• Password hashing — passwords are stored only as secure hashes, never in plain text
• Server-side validation and database access rules to protect progress and scores
• Anti-tamper checks to detect manipulation of accounts and leaderboards

No online service can guarantee absolute security, but we work to keep your data safe and to respond quickly to any issue.

TDC is not directed at young children. You must be at least 16 years old to create an account, or have the consent of a parent or legal guardian where required by local law. If you believe a child has provided us with personal data without appropriate consent, contact us and we will delete it.

As TDC is in active Early Access, this policy may change as features are added. We will update the “last updated” date above and, for significant changes, provide a notice in-game or by e-mail. Continued play after changes take effect constitutes acknowledgement of the updated policy.

For any question about this policy or your data:

Sven Kraus
Kanalstraße 12, 86502 Laugna, Deutschland
support@typingdungeoncrawler.com