Predsjedništvo: Dominion

Privacy Policy

Plain-language summary: The game uses anonymous Firebase authentication. It does not ask for an email address, password, payment information, contacts, camera, microphone, or precise location. Online rooms and reports are temporary. The service does not sell personal information, show targeted advertising, or use product analytics.

1. Operator and scope

Predsjedništvo: Dominion is an independently operated game project based in Washington State, United States (the “Service,” “we,” or “us”). This policy explains information handled when you visit the website, play locally or online, or send a report.

The Service is intended for a general audience aged 13 and older. It is not operated by, affiliated with, or endorsed by the government of Bosnia and Herzegovina, any political party, or any public official.

2. Information handled

  • Anonymous session: Firebase assigns an anonymous user identifier. We do not ask you to create a password or provide an email address.
  • Online rooms: Your chosen display name, room membership, seat and character choices, readiness and connection status, room administration data, and match state.
  • Security and abuse prevention: Short-lived rate-limit records derived from the anonymous identifier and a keyed, one-way network pseudonym. The game database does not store your raw IP address.
  • Bug and privacy reports: Category, summary, details, language, deployment identifier, timestamps, and—only if you opt in—basic device diagnostics such as screen, game mode, graphics preset, browser and operating-system family and major version, viewport, pixel ratio, and input type.
  • Local browser data: Language and display preferences, tutorial progress, local saved matches, and recent-room recovery information stored in your browser profile.
  • Provider records: Firebase and Google Cloud may process IP addresses, request metadata, operational logs, authentication records, App Check tokens, and reCAPTCHA Enterprise assessments to provide and secure the Service.

Reports do not intentionally include screenshots, files, full URLs, room or invite credentials, game state, raw user-agent strings, or Firebase user identifiers. Automated filtering removes common credentials, email addresses, links, and room or invite values, but you should still avoid submitting personal or sensitive information.

3. Why we use information

We use the information only to operate online rooms, synchronize matches, reconnect players, save local preferences, prevent abuse, diagnose failures, respond to privacy requests, maintain security, and improve the game. We do not use it for targeted advertising or cross-site tracking.

Where data-protection law requires a legal basis, we process room, session, and match information to provide the Service you request and administer these Terms; security, abuse-prevention, reliability, and limited troubleshooting information for our legitimate interests in operating a safe and functional Service; optional report diagnostics with your consent; and information when necessary to meet a legal obligation. You may withdraw consent for future optional diagnostics by leaving them disabled or changing your report choice before submission.

4. Sharing and service providers

The Service uses Google Firebase and Google Cloud for hosting, anonymous authentication, Realtime Database, Cloud Functions, App Check, reCAPTCHA Enterprise, security, and operational logging. Those providers process information under their own applicable terms and privacy commitments.

For customer data covered by its terms, Google acts as a processor or service provider under the Firebase Data Processing and Security Terms, which describe security measures, subprocessors, assistance with requests and incidents, and transfer mechanisms.

We do not sell personal information. We do not share personal information for targeted advertising. We may disclose information when reasonably necessary to comply with law, protect users or the Service, investigate abuse, or complete a business transfer subject to appropriate protections.

5. Retention

  • Lobby rooms are scheduled for deletion 24 hours after creation.
  • Once play begins, room and match data may remain for up to seven days from room creation. The host may delete the room sooner.
  • Application rate-limit and quota records are scheduled for deletion after approximately 24 hours.
  • Bug and privacy reports are scheduled for deletion after 90 days.
  • Local browser data remains until you clear the site’s data or use an available in-game deletion control.
  • Firebase and Google Cloud operational or security logs may follow separate provider-controlled retention periods and may be kept longer where needed for security, reliability, or legal compliance.

6. Your choices and requests

You may play locally without opening an online room. Optional diagnostics in the report form are off by default. You can clear local data through your browser. A room host can delete an online room from the lobby.

For a privacy question or request, use the Privacy or data request form. Keep the reference shown after submission. To request early deletion of a previous report, include only that report’s br_… reference. Do not send passwords, email addresses, room codes, invite links, government identifiers, health information, financial information, or other sensitive data. The form is the Service’s current official electronic contact channel.

Because stored reports deliberately contain no Firebase user identifier and the Service does not maintain a traditional named account, we may be unable to link a request to records without the applicable report reference or host-controlled room access.

Depending on the law that applies to you, you may have rights to request access, correction, deletion, restriction, portability, or an objection to certain processing; to withdraw consent without affecting earlier lawful processing; and to complain to a competent privacy or data-protection authority. Some rights are conditional and may not apply to anonymous, deleted, legally retained, or unverifiable information. We will not discriminate against you for exercising an applicable privacy right.

7. Children

The Service is for a general audience aged 13 and older and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 supplied personal information, submit a privacy request so we can investigate and delete covered information where appropriate.

8. Security and incidents

We use access controls, server-side validation, App Check, rate limits, limited retention, encrypted transport, and data minimization. No system can be guaranteed completely secure. If a security incident affects information protected by law, we will investigate and provide legally required notices.

9. International users

The Service is operated from Washington State, United States, and is intended to be available internationally where the Service and its providers can lawfully operate. Information may be processed in the United States and other countries whose laws may differ from those where you live.

When applicable law restricts an international transfer, we and our providers rely on an available lawful mechanism described in the applicable provider terms, which may include an adequacy decision, a recognized data-protection framework, or standard contractual clauses. Mandatory rights under applicable local law are not waived by this policy or by the Washington governing-law provision in the Terms.

10. Changes and contact

We may update this policy when the Service or law changes. We will change the date above and provide additional notice when required. Submit questions through the Privacy or data request form.