Privacy

[STUDIO NAME], [STUDIO ADDRESS], is the controller of your data. For anything on this page, write to support@doorstep.game with the subject “Privacy”.

• An anonymous account. The app creates one on first launch so your porch light, results and the Street are saved. If you choose Sign in with Apple, we also keep the identifier Apple gives us.
• Your age range. The app asks iOS for your age range (not your birthday) so it can apply the right protections.
• Your lines and results. What you type at each door, how the character read it, and the outcome.
• Purchases. If you buy Doorstep Pass, Apple handles payment. We receive a record of the purchase through RevenueCat, never your card details.
• Usage and crash data. Which screens you open and when the app crashes, through PostHog (EU) and Sentry. These events never contain the text of your lines.

We don't use Apple's advertising identifier and we don't track you across other apps.

Doorstep's characters are powered by AI. To understand your lines, Doorstep sends what you type, and nothing else, to OpenAI, with Mistral AI as a backup. Before anything is sent, the app removes email addresses, phone numbers, card and bank numbers it can spot. Your name, account and device identifiers are never included.

The app asks before the first line is sent. You can say no and play with chips only, or change your mind later in Settings. Players under 13 always play with chips only and nothing they type is sent.

Your lines are deleted from our servers after 30 days. Each provider may keep its own copy for up to 30 days for abuse monitoring [to be confirmed per provider].

• To run the game: save your progress, judge each door fairly and keep your porch light.
• To keep it fair: spot automated play and abuse.
• To fix and improve it: crash reports and usage counts.

Legal bases: [contract, legitimate interests, consent for sending your lines; counsel to confirm].

• The text of your lines and the characters' replies: 30 days.
• How each line was read (without the text) and your results: 13 months.
• Your account: until you delete it. [Inactive anonymous accounts: period to be decided.]
• Backups: deleted data ages out of backups within 30 days.

OpenAI and Mistral AI (understanding lines), Supabase and Fly.io (hosting and database), RevenueCat (purchases), PostHog (usage), Sentry (crashes) and Google (optional ads, if shown). Each works under a data processing agreement. [Locations and transfer safeguards to be listed.]

• Stop sending your lines at any time in Settings. The next line is chips only.
• Export your data from the Me tab.
• Delete your account from the Me tab. It removes your data from our systems; copies held by providers expire on their own schedule.
• You can also ask us for access, correction, deletion or a copy, or object to processing, at support@doorstep.game. You can complain to your local data protection authority.

Doorstep is rated 13+. Players under 13 play with chips only. Players under 16 only see non-personalised ads. [Age thresholds per country to be confirmed.]

If we change what is sent to understand your lines, for example by adding a provider, the app asks you again before sending anything. Other changes are posted here with a new date.