NullByte — Privacy Policy
NullByte ("the app", "the game") is an asynchronous multiplayer strategy game developed by Ralf Behnke ("we", "us"). This policy explains what personal data the app processes, why, and the rights you have. We keep data collection to the minimum the game needs to work.
Who is responsible
Ralf Behnke
Contact for privacy requests: ralf.behnke@gmx.net
What we process and why
- Game Center player identifier (a pseudonymous ID Apple assigns to you for this app). We use it as the key for your game account. We cannot use it to learn your Apple ID, real name, or email.
- Game Center display name / nickname. Shown to other players on the in-game leaderboard and in attack history. Publishing it to other players is an inherent part of a competitive ranking game.
- Game Center identity verification signature. When you sign in, the app sends a one-time signature to our server, which verifies it against Apple's servers to confirm the player ID is really yours. The signature is used for that check only and is not stored.
- Game progress and state: your hardware component levels, in-game currency and currency cap, researched software, defensive state, power score, protection status, and the timestamps the game logic needs (account creation, last activity, last income collection). Needed to run and persist your game.
- Attack history: for each resolved attack we store the attacker and defender player IDs, a timestamp, the outcome, the amount of in-game currency transferred, and both final scores. Needed to compute combat results and show attack history. No real money is ever involved.
- Session token. After sign-in our server issues a signed session token that your device stores locally and sends with each request. It contains your player ID and display name and nothing else.
- Connection data. Our hosting provider (Cloudflare) processes standard request metadata such as your IP address for the time needed to route the request and to protect the service against abuse and attacks. We do not build profiles from it.
What we do NOT do
- No advertising and no ad identifiers.
- No third-party analytics, tracking or marketing SDKs.
- No access to your contacts, photos, precise location, microphone, camera, health or payment data.
- No sale of personal data. No sharing beyond the processors named below.
Legal basis (GDPR)
Processing of your player ID, display name and game state is necessary to provide the game you asked for (Art. 6(1)(b) GDPR — performance of a contract). Processing of connection data for security is based on our legitimate interest in a working, abuse-free service (Art. 6(1)(f) GDPR).
Processors and international transfers
- Apple Inc. — Game Center authentication and identity verification. Governed by Apple's privacy policy.
- Cloudflare, Inc. — our server (Cloudflare Workers) and database (Cloudflare D1). Data may be processed on servers outside the EU/EEA, including in the United States, under Cloudflare's data processing terms and EU Standard Contractual Clauses.
Retention
Your account row and attack history are kept while your account exists. If you ask us to delete your data, or stop playing and ask for deletion, we remove your player row and the attack-history rows that reference your player ID. Because the only identifier we hold is the Game Center player ID, include it in your request (you can find it in the app).
Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability, and objection, and the right to lodge a complaint with a data protection supervisory authority. To exercise any of these, email ralf.behnke@gmx.net.
Children
NullByte is not directed to children under 13, and we do not knowingly process their data.
Changes
We will post any changes to this policy at this URL and update the date above. Material changes will be announced in the app.