Dice Siege

Privacy Policy

This privacy policy applies to the Dice Siege app for mobile devices, together with any related services operated by Berishock (collectively, the "Application"). Berishock is the trading name of CK Guven, an individual developer, and is referred to here as the "Service Provider". For the purposes of data protection law, the Service Provider is the controller of the personal data described below.

Effective 24 October 2026. Contact: privacy@dicesiege.com.

Information Collection and Use

You are never asked to type an email address, name or password; the only account details the Application holds are the ones Google sends if you choose to sign in. On first launch the Application creates an anonymous player identifier, which is what backs up your progress and records your best result on each level. You can, if you choose, sign in with a Google account so that the same progress comes back after a reinstall or on a new phone. Signing in is optional and nothing in the game needs it; what it adds is described under Signing in with Google below.

Stored on your device. The Application saves your level progress, lives, settings and the state of an unfinished match in its private storage. A separate sign-in file there holds the account's sign-in tokens and, once you sign in with Google, the Google account's email address and the web address of its profile photo. The copy of the photo that the Application shows is kept in its cache. Deleting the Application deletes all of them from the device.

Backed up by Android. If backup is turned on in your device's settings, Android copies that private storage, including the sign-in file with its tokens and, once you have signed in, the Google account's email address and photo address, to your Google account, and puts it back when you install the Application again on a device signed in to the same Google account. Google holds that copy under its own policy, and the Service Provider cannot read or delete it. The cached photo is not part of that copy. You can turn backup off, or delete the copy, in your device's Google backup settings.

Sent to the Service Provider's servers. When the Application is online it syncs the following to a backend hosted by Supabase:

Signing in with Google. The home screen and the settings offer Sign in with Google. If you tap it, Google's sign-in sheet, which Google Play services shows on your device, asks which Google account to use and for your agreement, and then hands the Application a signed token for that account. The Application sends the token to the Service Provider's servers, which link your player account to that Google account and keep from the token: the Google account's email address, the name on the Google account, the permanent identifier Google issues for the account (a number that is not your email address and cannot be used to sign in anywhere), and the web address of its profile photo. The Application shows the email address and the photo in its settings and as the account button on the home screen; to show the photo it downloads it from Google and keeps a copy on the device. The name is kept because Google sends it with the rest; the Application does not show it or use it. Google learns that you signed in to Dice Siege and when, and sees your device's Internet Protocol address when the photo is fetched, under Google's own policy; the Service Provider sends Google nothing about how you play. Signing out, in the settings, needs a connection: the Application first sends your latest progress to the server, then clears the game from this device, the sign-in and the photo included, and starts a new game from level 1, as a new install would. The account, its link and its progress stay on the server, so signing in again on any device brings them back. Levels you play while signed out stay on this device under a new anonymous account, separate from the Google account's progress, and if you sign in again later with progress on both sides, the Application asks which of the two saves to keep. It asks the same whenever the Google account already holds Dice Siege progress and this device has progress of its own. If you keep this device's save, its level progress, lives and settings replace the Google account's, the Google account keeps its own match records and best results, and the device's anonymous account is deleted from the server with everything under it. If you keep the Google account's save, it comes onto the device and the device's anonymous account is deleted from the server with everything under it. Deleting the account, described under Data Retention, removes the link together with everything else. You can also withdraw the Application's access from your Google account's own settings for third-party apps, which stops future sign-ins but does not delete the account here.

Usage statistics. Unless you turn them off, the Application also sends anonymous usage statistics about how it is used, such as the screens visited and actions taken in the game. Each report carries only a random number created for one launch of the Application and forgotten when it closes, the week the Application was first used, the Application version and the device's operating system version. It does not include the anonymous account identifier or any other lasting identifier, and the Service Provider never links usage statistics to your account or your match records. The reports are combined into daily totals; a total that covers too few people to stay anonymous is merged with others or discarded. You can turn usage statistics off at any time in the Application's settings with "Share usage statistics", which stops sending at once and discards anything not yet sent. Where Google's consent form is shown, such as in Switzerland, they are sent only if you agree there to the Service Provider's own purposes (storing or accessing information on your device, measuring content performance, and developing and improving its services). If your device's region setting is Canada, they are off until you turn them on.

Collected by advertising partners. The Application shows rewarded video ads, which you choose to watch in exchange for an extra life, through Google AdMob. The Application makes your device's advertising identifier available to Google, and AdMob also collects your IP address and general device information to serve and measure ads, as described under Advertising and Consent.

The Application does not collect your location, your contacts or the photos on your device, and the Service Provider does not process sensitive personal information. Unless you sign in with Google, it holds no identifier that the Service Provider could connect to you as a person. It sends no email and no marketing communications. The dicesiege.com website sets no cookies and runs no analytics.

Advertising and Consent

What Google AdMob collects. Rewarded ads are served by Google AdMob, whose software is part of the Application. When an ad is requested or shown, that software sends the following to Google, which is a separate controller of it: your device's advertising identifier and other device and app identifiers; your device's Internet Protocol address, from which Google estimates the general area you are in, no more precisely than a city; the actions you take in the Application, such as launching it and tapping an ad; and diagnostic measurements such as start-up time and battery use. Google uses them to select and measure ads, to produce aggregate statistics and to detect fraud and invalid traffic. The Service Provider never receives your advertising identifier or your location. Google may collect information about your activity over time and across other apps and websites, and may combine it with what it collects through the Application. What Google does with this data afterwards is governed by Google's own policy.

Whether ads are personalised. A personalised ad is one Google chooses using what it knows or infers about you. Which ads you get depends on where your device says you are:

Non-personalised ads are chosen from context, such as the app they appear in and your general area, rather than from a profile of you. Google still uses your advertising identifier and IP address for them, to limit how often you see the same ad, to measure ads and to detect fraud. Wherever you are, you can reset or delete your advertising identifier, or opt out of personalised ads, in your device's Google settings.

The Application and the dicesiege.com website do not respond to browser "Do Not Track" signals, which they have no use for: the Application runs in no browser, and the website tracks no one.

Legal Bases

Where Google's consent form is shown, personalised advertising rests on the consent you give in it. Elsewhere, showing ads rests on the Service Provider's legitimate interest in paying for a free game with them, and you can object to personalised ads through your device's Google settings. Progress sync, match records and the genuine-copy check rest on the Service Provider's legitimate interest in providing and protecting the game you installed. Linking your account to a Google account, and holding the Google account details that the link needs, rests on performing the Terms of Use at your request: you ask for it with the sign-in button, and the Service Provider cannot keep your progress under your Google account without them. It ends when you delete the account. Usage statistics rest on the Service Provider's legitimate interest in understanding how the game is played so it can improve it, which you can object to at any time with the switch in the settings; where Google's consent form is shown, they rest on the consent you give in it. Where processing is based on consent, you may withdraw it at any time without affecting processing carried out before withdrawal.

Third Party Services

The Application uses third-party services that have their own privacy policies:

The Service Provider may also disclose information as required by law, such as to comply with a subpoena or similar legal process, or when disclosure is necessary in good faith to protect the Service Provider's rights, your safety or the safety of others, to investigate fraud, or to respond to a government request.

International Data Transfers

The data the Application sends to the Service Provider is stored in the United States: Supabase hosts the backend on Amazon Web Services in Oregon (the us-west-2 region). The Service Provider's contract for that hosting is with Supabase Pte. Ltd. in Singapore, and Supabase's support staff work from several countries. Supabase is not certified under the EU-U.S. or Swiss-U.S. Data Privacy Framework, and no adequacy decision covers Singapore, so these transfers rely on the Standard Contractual Clauses in Supabase's data processing addendum. You can ask for a copy of the clauses at the contact address below. Google processes advertising and sign-in data in the United States and other countries under its own policy.

Data Retention

The Service Provider keeps the account, anonymous or signed in, and everything held under it, including your progress, settings, match records and, for a signed-in account, the Google account details listed above, until you delete it or until no one has opened the Application on it for 36 months, when it is deleted automatically. Opening the Application, or signing in, resets that clock. Signing in with Google changes what an uninstall does, not how long data is kept: a signed-in account is meant to outlive the device, so that signing in again brings the progress back, and the 36-month clock is what removes it if you never return. A match record keeps the data needed to replay the match (its dice seed and moves) for 12 months; after that the replay data is removed and the rest of the record stays with the account. Usage statistics are deleted within 7 days of arriving, once they have been combined into daily totals; the totals are anonymous and are kept. Data required for legal compliance is kept as long as the law requires. You can end the account yourself from inside the Application: Settings, "Delete my data", confirm. The server record, the link to your Google account included, is deleted first and the device is cleared only once the server has confirmed; dicesiege.com/delete-account describes the same steps. Google keeps its own record that you once signed in to Dice Siege, under its own policy. Deleted data can remain in the hosting provider's daily backups for up to 7 days, until those backups are replaced. The hosting provider's connection logs, which hold IP addresses, are kept for at most 7 days. The hosting provider's sign-in service also keeps a log of sign-ins, which can include your IP address; it is kept for 180 days to investigate faults and is removed when you delete the account. Uninstalling the Application stops further collection and removes the local data, but not the server copy or a copy Android has backed up, so delete the account before uninstalling if you want the server copy gone. If the Application is already gone, the contact address under Your Rights is the fallback, and for a signed-in account an email from that Google account's address is enough to find it.

Your Rights

Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal data, to object to or restrict its processing, and to withdraw consent. Deletion needs no request and no reply: Settings in the Application, "Delete my data", confirm, and the account and everything held under it go at once, apart from the backup and log copies described under Data Retention, as dicesiege.com/delete-account describes. To exercise any other right, or to delete when you can no longer use the Application, email privacy@dicesiege.com. An account you have not signed in to is anonymous. Settings in the Application shows the account identifier and copies it to the clipboard, and the display label the server assigns is never shown. A request that cannot use the in-app route must quote that identifier, name the device you played on and say roughly when you installed the Application and when you last played it. If you signed in with Google, sending the request from that Google account's email address identifies the account instead. A request with neither cannot be actioned. The Service Provider will act on the request within the time required by applicable law, and in any case within 30 days. Deleting from inside the Application, where the request carries the account itself, remains the certain route. Usage statistics carry no identifier, so they cannot be found or deleted for one person; the switch in the settings is how to stop them. If you are in Switzerland, the European Economic Area or the United Kingdom, you also have the right to lodge a complaint with your local data protection authority.

United States state privacy laws (including California's CCPA/CPRA). You may have the right to know what personal information is collected, to delete it, to opt out of its sale or sharing for targeted advertising, and not to be discriminated against for exercising these rights. The Service Provider does not sell personal information for money. The Application makes your device's advertising identifier available to Google, which may use it for personalised advertising; California law may count that as "sharing". To opt out, delete your advertising identifier or opt out of personalised ads in your device's Google settings, as described under Advertising and Consent. To exercise any of these rights, use the contact address above.

Children

Dice Siege is made for teenagers and adults. It is not directed at children under 13, it does not ask players their age, and the Service Provider does not knowingly collect personal data from children under 13. In Quebec, players must be at least 14. Every ad the Application asks for is limited to content Google rates as suitable with parental guidance or milder. If the Service Provider learns that a player is under 13, it deletes that player's account and everything held under it from its servers. If you are a parent or guardian and believe a child under 13 has used the Application, contact privacy@dicesiege.com, with the account identifier from the Application's settings if you can, and the Service Provider will delete the account. You can also delete it at once from the device: Settings, "Delete my data", confirm.

Security

Connections to the backend are encrypted and its data is restricted to the account that owns it. No transmission over the internet or storage technology is completely secure.

Data Breach Notification

If a data breach affects your personal data, the Service Provider will notify you in accordance with applicable legal requirements, including, where required, the nature of the breach and the steps taken to address it.

Changes

The Service Provider may update this policy, and announces material changes by posting the updated policy at this address with a new effective date and, where the law requires it, by seeking your consent before they take effect.

Contact

Questions about this policy or the Service Provider's practices: privacy@dicesiege.com.

Adapted from a policy generated by App Privacy Policy Generator.