Arcade Privacy Policy.
This policy covers the NexDam Arcade mobile app for Android. The main NexDam Privacy Policy covers the website and the technical services; this one explains only what the app does, because what a game app collects is very different.
The short version. You can play everything without an account, and in that case nothing leaves your phone. If you sign in, the app saves your game progress so it follows you across devices. There is no advertising, no analytics, no tracking, and nothing is ever sold or shared for marketing.
1. Who is responsible
NexDam is a personal software project operated under the NexDam name — not a company. For the data described here I am the data controller under the EU General Data Protection Regulation (Regulation 2016/679).
Email: contact@nexdam.it
Website: www.nexdam.it
2. Playing without an account
The app is fully playable as a guest. Every game, every level and every badge is available without registering.
In guest mode your progress, statistics, daily missions and audio preferences are stored only on your device, in the app's private storage. No personal data is transmitted, and no account exists. Uninstalling the app erases that data permanently — there is no copy anywhere else, and I cannot recover it.
The only feature unavailable to guests is the leaderboard, which by definition requires an identity to rank.
3. What the app collects when you sign in
The app has no registration form of its own. Signing in opens nexdam.it in your browser and the account is the same one used on the website — there is no separate Arcade account, and the data below is stored in the same database.
3.1 Account data
- Email address and username — to identify the account and to show you in leaderboards.
- Password — stored only as a secure hash, never in readable form, and never seen by the app.
- Phone number and company — optional, only if you filled them in when registering on the website.
- Profile picture — only if you uploaded one on the website. The app reads it, it cannot change it.
3.2 Game data
- Scores and levels reached in each game.
- Experience points, credits, games played, play time, day streaks.
- Badges unlocked and the counters that unlock them.
- Daily missions assigned and their progress.
3.3 Technical data
- Session tokens, held in the device's encrypted storage so you are not asked to sign in at every launch.
- Server logs kept by the infrastructure providers listed below, for security and abuse prevention.
4. What the app does not collect
- No advertising identifiers, and no advertising of any kind.
- No analytics or usage-tracking SDK.
- No location, at any precision.
- No contacts, photos, microphone, camera or files on your device.
- No payment data — the app sells nothing, and the in-game credits have no monetary value and cannot be purchased.
- No special-category data under Art. 9 GDPR.
5. Why, and on what legal basis
- Running your account and saving your progress — performance of a contract, Art. 6(1)(b) GDPR. Without this data the app cannot restore your game on another device.
- Showing leaderboards — performance of a contract, Art. 6(1)(b): appearing in the ranking is part of the service you sign in for.
- Keeping the service secure — legitimate interest, Art. 6(1)(f), limited to what abuse prevention requires.
6. Leaderboards are public
When you sign in and play, your username and your scores become visible to anyone using the Arcade, in the app and on the website. Nothing else is exposed: not your email, not your phone number, not your profile picture, not your identifier in the database.
If you would rather not appear, you can play as a guest — the leaderboard is the only thing you give up.
7. Who else processes the data
- Supabase — database and authentication. Data is stored on EU servers.
- Vercel — hosting of the website used for signing in.
- Cloudflare — the security check shown during sign-in, which prevents automated abuse.
Each acts as a data processor on documented instructions. The app itself contacts no other service: no advertising network, no analytics provider, no third-party game platform.
8. How long it is kept
- Account and game data — for as long as the account exists.
- Guest data — until you uninstall the app or reset progress from the profile screen. It never leaves the device.
- Server logs — for the limited period applied by the providers above, for security purposes.
Deleting your account deletes the game data along with it: progress, statistics, badges and leaderboard entries are removed, not anonymised and kept.
9. Your rights
Under the GDPR you may request access, rectification, erasure, restriction, portability, and object to processing based on legitimate interest. You can also lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).
Most of it you can do yourself: username, phone number and profile picture are editable from your profile, and progress can be reset from the app. For anything else — deletion included — write to contact@nexdam.it and I will reply within one month, as the GDPR requires.
10. Children
The app contains no content unsuitable for minors, but an account requires registration on the website. Where local law sets a minimum age for consent to data processing — 14 in Italy — an account should be created only above that age, or with the consent of a parent or guardian. Below that age, guest mode is the appropriate way to use the app: it collects nothing.
11. Changes
If this policy changes, the date at the top changes with it, and the updated text appears both here and inside the app. Changes that materially affect how your data is handled will be announced in the app before they take effect.
12. Contact
contact@nexdam.it — for any question about this policy or any request concerning your data.
See also: Arcade Terms of Service · NexDam Privacy Policy · NexDam Terms of Service