As little as possible. You play without an email address, without a password and without ads. This page says exactly what we do keep, why, and for how long.
Version 1, valid from [date of publication].
This is a translation. If it differs from the Dutch version, the Dutch version is the leading one.
In short
On first launch you get an anonymous account. You choose a name yourself, and it may be a nickname.
We show no ads, do not follow you outside the app and sell nothing on.
There is no analytics or tracking software from third parties in the app.
Your data sits on servers in Frankfurt, in the European Union.
You can download your data in the app and delete your account in the app, without emailing us.
Who we are
Borderline Case is a game by [company name], [address], registered with the Dutch Chamber of Commerce (KvK) under number [KvK number]. We are the controller for the processing of your data as described below.
Questions about privacy: stedenstrijd@bitma.nl. We answer within a month, usually much sooner.
What data, why and for how long
Each part states its legal basis under the GDPR. "Contract" means: needed to deliver the game you use. "Legitimate interest" means: needed for a fair and safe game, without outweighing your privacy.
Your account
What
A random account ID, the moment the account was created, and the session that keeps the app signed in.
Why
So that your games, friends and purchase belong to you.
Legal basis
Contract.
How long
Until you delete your account.
Your profile
What
Your player name, which city intros you saw and which release card you saw last. Your character and colour follow from your account ID and are drawn in the app; we store nothing of those.
Why
To show you at the table and to set the game up for your city.
Legal basis
Contract.
How long
Until you delete your account. You can change your name at any time.
A photo of your own, if you choose one
What
A square, scaled-down version of the photo you choose.
Why
As your avatar, instead of the character.
Legal basis
Contract. You choose to do this yourself.
Note
The photo sits at a public address. Anyone who knows that address can see it, even without the app.
How long
Until you remove it or delete your account.
Linking with Apple, if you do
What
The identifier of your Apple ID, the email address Apple passes on (often a relay address from Apple if you hide your address), and a token from Apple.
Why
To find your account again on a second device and to be able to have friends. The token is needed to end the link with Apple when you delete your account. We never send you email.
Legal basis
Contract.
How long
Until you delete your account.
Your games
What
Which tables you sat at, with which colour and name, your moves and the rolls of the dice, your secret mission, your street cards and headquarters, what you said at the table (a fixed phrase, or at a private table what you typed yourself) and the result.
Why
To play the game, show the replay, look into a complaint, and work out your standing and titles.
Legal basis
Contract.
How long
The moves 30 days. The board, your secret mission and your hand 90 days after the end of the game. The chat 90 days after the end of the game, or at once if you delete your account. The table and the result stay for the statistics; if you delete your account, you are called Oud-speler (former player) there. A table that never started disappears after 7 days.
Messages to friends
What
The messages you and a friend send each other, who sent them and when, and how far you read a conversation or the chat of a table. What you type first goes through a filter for swear words, addresses, links and phone numbers; what the filter refuses is not stored.
Why
To arrange a game with someone you have already played with.
Legal basis
Contract. The filter: legitimate interest, a safe game.
How long
90 days after sending, or at once if either of you deletes their account. If you are no longer friends or one of you blocks the other, neither of you sees the conversation any more.
Friends, invitations, blocking and muting
What
Who you are friends with, who invited whom, who you blocked and who you muted.
Why
To play together, to no longer be seated with someone you blocked, and to no longer read anything from someone you muted. Only you can see who you muted.
Legal basis
Contract.
How long
Until you or the other person undoes it or deletes the account.
Leaderboard, statistics and titles
What
Your level (a rating across all cities and per city), how it changed per game, and how many games you played and won.
Why
For the leaderboard and your title. Other players with an account see your name and level on the leaderboard.
Legal basis
Contract.
How long
Until you delete your account.
City of the day
What
For each day you play the City of the day: when you started and finished, whether you completed your mission, in how many rounds, and your seat at the table. The game itself is only on your phone.
Why
For your one attempt per day, the leaderboard of the day, your streak and your stamps. Other players with an account see your name and your number of rounds on the leaderboard of the day if you completed your mission.
Legal basis
Contract.
How long
Until you delete your account.
The vote
What
Which city you voted for.
Why
To count the result. Only you see your own vote; everyone else sees only the totals.
Legal basis
Contract.
How long
Until you delete your account.
Reporting
What
Who reported, who was reported, in which game, the reason, and the last ten lines of the chat at that table. If you report someone without a game attached, the last ten messages between the two of you.
Why
To be able to assess a report and deal with abuse.
Legal basis
Legitimate interest: a safe game.
How long
1 year. If someone deletes their account, the report stays without saying who it was.
Push notifications
What
Per device a subscription ID from OneSignal, which kinds of notifications you have switched on, and the notifications waiting to be sent.
Why
To let you know that it is your turn, that a game starts or ends, or that there is a new city.
Legal basis
Consent. iOS asks for it, and you switch it off again per device and per kind.
How long
A sent notification 7 days. The subscription until you switch notifications off or delete your account.
Your purchase
What
That you have the full version, since when, and whether it came through a purchase or through Family Sharing. Also a log of the messages RevenueCat sends us about purchases.
Why
To unlock the full version and to be able to answer a question about a purchase. Payment goes through Apple: we never see your payment details.
Legal basis
Contract, and for the log our legal obligation and legitimate interest.
How long
The log 1 year. Your right to the full version until you delete your account; the purchase itself stays with your Apple ID, and you get it back with Restore purchase.
Fair play
What
How often you joined as a guest this week, and how often you tried a code in quick succession.
Why
For the limit of the free version, and to slow down the guessing of codes.
Legal basis
Contract and legitimate interest.
How long
The counter 60 days, the attempts 1 day.
Technical data
What
Your IP address and the time of a request, in the log files of our servers and of the website.
Why
Security and fixing outages.
Legal basis
Legitimate interest.
How long
As short as our suppliers allow, and never longer than [retention period from the Supabase and Netlify plans].
Error reports from the app
What
If the app makes an error or freezes: the error message, where in the code it happened, the version of the app and the kind of device (iOS or Android), linked to your account ID. No name, no chat and nothing from your games.
Why
To find and fix errors, preferably before they bother you.
Legal basis
Legitimate interest.
How long
30 days, or until you delete your account.
How games go
What
After every online game: the city, the goal, how long it took, how many rounds, and per seat the place in the turn order, the mission, the result and how often a turn was missed or taken over. For a human your account ID is included, so that we can see whether someone comes back. After a practice game: the city, the level, whether you finished it and how long it took, without an account ID. No name and no chat.
Why
To see whether the game is fair and whether new players find their way, and to adjust the rules if not.
Legal basis
Legitimate interest.
How long
As long as the game exists. If you delete your account, your account ID is removed and only the game itself remains.
On your device
The app keeps your settings and your session on your own device. We do not have those.
What other players see
At the table: your name, your character or photo, your colour, your neighbourhoods and fighters, what you say at the table and the result. A message to a friend is seen only by that friend. Others see your secret mission and your street cards only afterwards in the replay, or never.
On the leaderboard: your name and your level, for players with an account.
On the leaderboard of the City of the day: your name and in how many rounds you completed your mission, for players with an account.
With an invitation link: the name of whoever invites, the city and how many seats are free. That page can be opened by anyone who has the link.
Who processes your data for us
We use a few suppliers. We have a data processing agreement with each. They may use your data only to deliver that service for us.
Supabase
Database, sign-in, storage and the server. Servers in Frankfurt (EU).
OneSignal
Sending push notifications. Based in the United States.
RevenueCat
Processing purchases from the App Store. Based in the United States. RevenueCat knows your account ID and your purchase, not your name.
Netlify
Hosting of this website and the invitation pages. Based in the United States.
GitHub
Keeps the nightly backup for 30 days. Based in the United States. The backup is encrypted before it gets there; GitHub cannot read it.
Google Fonts
The typeface of this website. Your browser fetches it from Google, which sees your IP address when it does.
When data goes to the United States, that happens on the basis of the EU-US Data Privacy Framework or the standard contractual clauses of the European Commission.
Apple is itself responsible for the App Store, payments, Sign in with Apple and delivering push notifications. Apple's privacy policy applies to those.
We do not give your data to others, unless the law obliges us to.
What we do not do
No ads, no advertising networks, no tracking across apps. That is why the app does not ask for permission to track either.
No profiling and no automated decisions about you. The AI players follow fixed game rules and use no data of yours.
No cookies on this website.
Age
Borderline Case is for players aged 13 and over, and that is what the App Store says too. If you are under 16, you play with the consent of a parent or guardian. The app does not ask your age and we do not store it. If you think a child under 13 has an account, let us know; we will then delete it.
Your rights
Access and portability. In the app, under Me, at Account: Download your data. You get a file with your data.
Correction. You change your name, photo and notifications under Me.
Deletion. In the app, under Me, at Account: Delete account. See below for what happens then.
Objection and restriction. You can object to processing based on legitimate interest via stedenstrijd@bitma.nl.
Withdrawing consent. You switch push notifications off in the app or in the settings of iOS.
Complaints. If you disagree with us, you can lodge a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens.
If you delete your account
In a game that is still running, an AI player takes over your seat, so that the others can carry on.
In finished games you are called Oud-speler (former player) from then on. The result stays without saying who you were.
Your profile, photo, what you said at the table, your messages to friends and theirs to you, friends, invitations, votes, statistics, leaderboard, your attempts at the City of the day and notification settings are deleted. Only lines and messages that were kept with a report stay until that report expires.
We end the link with Apple and have RevenueCat and OneSignal delete your data.
Your purchase stays with your Apple ID. With Restore purchase you get it back on a new account.
What is still in a backup disappears by itself within 30 days.
Security
All connections are encrypted. Every table in the database has rules that determine who may read which row, and what is secret (such as your mission and your hand) is kept apart, so that other players cannot get at it. The dice are rolled only on the server. The backup of each night is encrypted, and the key is not held by the party that stores it.
Map data
The maps are made with open data from CBS and Kadaster (PDOK), under CC BY 4.0. They contain no data about persons.
Changes
If something material changes in this statement, we announce it in the app before it takes effect. The date at the top says which version applies.