Privacy

Who is asking

Doomsday Studio is run by Los Chiquitos SRL, which decides what is collected here and why. Questions about anything on this page go to the address at the bottom.

What is on file

• The beta sign-up. Your email address; the handle and the note, if you wrote them; the games you ticked and, for Toy Soldiers, the side you picked; the site's language; when you signed up; whether you confirmed the address; and whether we have sent your code.
• Where you came from. On your first visit the site writes down, in your own browser, the campaign tags in the link that brought you (utm_… and ref, and an ad click id such as gclid, fbclid or ttclid if there was one), the website that sent you if it was not ours, and the page you landed on. A later campaign link replaces it. It stays in your browser and reaches us only if you sign up, attached to the sign-up, so we know which post or ad worked.
• Your account. If you join the platform: your email address, your handle, your password (stored only as a salted hash; nobody can read it back), your language, the code you joined with, the games on your shelf with their limits, when you joined, last signed in and confirmed your address, and any note the studio adds to your account (for example, why it was suspended).
• What happens in the games. Each time you open a game: which game and build, when the sitting started and ended, how long the game was on screen and running, and whether you were on a computer, a phone or a tablet (worked out from your browser's user agent, which we do not keep). Each run: when it started and ended and the result the game reports, such as the stage reached, the time, the score and whether you finished. The events a game reports while you play, such as a stage started or a boss defeated. And your cloud saves.
• Mail. A log of every email we send you: the address, what kind of email it was, the subject and whether it went out.
• The contact form. If you write to us at /contact: your name, your email address, the topic, your message and the site's language. Your browser sends them to Web3Forms, which emails them to us; they are not stored in our database. They stay in our inbox, and the answer goes to the address you gave.
• Keeping the doors shut. Your IP address and, after a failed sign-in, the address that was typed, as short-lived counters that stop password guessing and form flooding. Sign-in sessions are kept as a hash of a random token. Password-reset and confirmation links work once.
• Requests. Like any website, our host receives the requests your browser makes, including your IP address and browser type, to serve the pages and to log errors.

We never ask for payment details or your location, and the platform does not allow pages to use your camera or microphone.

Why

To run the beta: let you in, send your code, keep your account, your progress and your saves, and stop abuse. To fix and tune the games: where players stop, fail or give up. To know which posts and ads bring people in: the first-touch note above and, if you allow it, Google Analytics.

Running your account and the games is the service you asked for. Keeping the doors shut and counting how the games are played is our legitimate interest in keeping the beta working. Google Analytics and the advertising tags run on your consent, which you can withdraw at any time.

Cookies, and what else is left in your browser

Set without asking:

• dd_lang — the language you picked. Site and platform. One year.
• dd_consent — your answer to the measurement question, shared by the site and the platform. 180 days, then we ask again. A copy is also kept in local storage as dd.consent.v1.
• dd_session — the platform only: keeps you signed in. Unreadable by scripts. 30 days, or until you sign out.
• dd_g_… and dd_pass — the platform and the games' own addresses: a pass that opens a game's files for the sitting you started. A few hours.
• dd.attribution.v1 — local storage, the site: the first-touch note described above. It stays until you clear the site's data in your browser.
• dd.ga.login — session storage, the platform: a flag that lets one sign-in be counted once. It only matters if you allowed Google Analytics, and it is gone when you close the tab.

Only after you press ALLOW:

• _ga, _ga_… — Google Analytics, site and platform: tells one visitor from another. Set on doomsdaystudio.com and its subdomains. 13 months.
• _gcl_… — Google Ads, the website only, when we are running Google ads: links a visit to an ad click.
• _fbp — the Meta Pixel, the website only, when we are running Meta ads.

Never a cookie:

• Vercel Web Analytics counts page views, the sites that sent visitors, countries and device types, and a few named clicks such as opening the sign-up, without cookies and without storing an identifier on your device. It runs whatever you answer.

Decline, or never answer, and neither Google's nor Meta's scripts are loaded. You can change your answer whenever you like with “Measurement” at the foot of the site's and the platform's pages, and at the foot of this one. Declining after allowing switches the tags off and deletes their cookies; it cannot unsend what was already measured.

Google Analytics · only after ALLOW

Off until you press ALLOW. Until then Google's script is not on the page at all, and Google's consent settings start at “denied”, so declining, or not answering, sends Google nothing.

If you allow it, Google Analytics 4 receives: the pages you view, with their addresses cleaned first (invitation codes, reset and confirmation tokens, email addresses and account ids are removed; campaign tags are kept); the site that sent you; your language; how far down the home page you scroll, the trailers you play, the chapters you look at and the links you follow out; and the steps of signing up, with the games and the side you picked, and of signing in, never with your address or your handle. On the platform it also receives which games you open, the runs you start, your play time and how each sitting ended.

If you are signed in, Google gets a one-way code made from your account id, so your phone and your laptop count as one player. It cannot be turned back into the id, your address or your handle.

When a sitting at a game ends, the platform's server may report it to Google directly (stages reached, bosses defeated, runs, scores and play time), tied to the same browser; likewise the moment confirming your address issues your beta key (only that it happened). It only does that for browsers that allowed Google Analytics.

On the platform Google's advertising features stay off: Google signals and ad personalisation are disabled and ad storage is never granted. On the website, ALLOW also lets Google use the visit for its advertising features (Google signals and ad personalisation), which only matter when we are running Google ads. Google Analytics data is kept for 14 months; its cookies expire after 13.

Never measured by Google: Lattice and the Column (its page on this site and its cabinets on the platform), and the games themselves, which carry no third-party analytics and send their statistics only to us.

Advertising tags · the website only · only after ALLOW

When the studio is running ads, the website (never the platform) can also load Google Ads' tag and the Meta Pixel, after ALLOW and never before. They tell Google and Meta that a visit, or a beta sign-up, came from one of their ads, so we can tell which ads work. Meta is told that a sign-up happened and from which chapter, never your address.

Google and Meta handle what their tags collect under their own privacy policies, and may combine it with what they already know about you. If you decline, neither tag loads.

Who else handles it

• Vercel hosts the website, the platform and the games, and runs Vercel Web Analytics.
• Neon the database where sign-ups, accounts, runs, events and saves are kept, in the United States.
• Resend delivers our emails (confirmation links, codes, password resets). It receives your address and the email itself.
• Web3Forms delivers the contact form to our inbox. It receives what you write in the form and, like any website, your IP address.
• Google Google Analytics, site and platform, and Google Ads, website only: both only with your consent.
• Meta the Meta Pixel, website only: only with your consent, and only when we run Meta ads.

Each of them works for us under its own terms, and most are in the United States, so your data may be processed there. We do not sell your data, and nobody beyond the companies above receives it.

The links to our YouTube channel and our Instagram are plain links: nothing from YouTube or Instagram loads until you click, and after that you are on their sites, under their policies. The fonts and the trailers come from our own host.

How long it is kept

• Sign-ups, accounts, runs, events and saves while the beta runs, and until you ask us to delete them. Nothing deletes them automatically yet.
• Contact-form messages in our inbox, for as long as the conversation needs, and until you ask us to delete them.
• Sign-in sessions 30 days.
• Password-reset links 24 hours. Confirmation links: 72 hours.
• Anti-abuse counters about a day; old ones are cleared out as the forms get used.
• Google Analytics 14 months.
• Your measurement answer 180 days, then we ask again.

What you can ask for

Write to us from the address you signed up with and we will tell you what we hold about you and send you a copy, correct it, or delete your sign-up or your account with its runs and saves. You can change your handle and your language yourself on the account page, and your answer to the measurement question at the foot of any page.

If you think we handled your data badly, you can complain to the data-protection authority where you live; in Argentina, that is the Agencia de Acceso a la Información Pública.

Children

The beta is not made for children: the games are satires about the end of the world, with violence in them. If a child signed up, write to us and we will delete the sign-up or the account.

Changes, and how to reach us

If this page changes, the date at the top changes with it.

Los Chiquitos SRL — privacy@doomsdaystudio.com