Privacy Policy
Summary
disc.io ("the game") never asks for your name, email address or any other contact details, and the game itself does not track you. You can play against computer opponents or against a friend on the same device without going online. If you play online (ONLINE DUEL and the rankings), the game makes an anonymous online account, described under "Online play", which you can delete at any time. Some versions show an occasional ad between matches; what the ad services receive, and the choices you have, are under "Advertising".
The game is built with the Unity engine. To help us find and fix crashes and performance problems, the engine sends technical diagnostic data to Unity Technologies, which processes it for us. This data is linked to a random installation ID, not to your name. We do not sell personal data or use it for advertising. The details are below.
Information stored on your device
The game keeps your settings (for example sound and vibration preferences) and local progress on your device only. They are never sent to us or to anyone else. Deleting the game removes them. The Unity engine also keeps the random installation ID described below on your device.
Crash and performance diagnostics (Unity)
What is collected. While the game runs, the diagnostics built into the Unity engine send Unity:
- crash and error reports: stack traces, error and log messages from the game, the events leading up to a problem and, on Android 11 and later, "app not responding" events;
- session information: when each session starts and ends, and how long it lasts;
- performance information, such as memory use;
- technical details of your device and of the game: device model, operating system version, processor, graphics chip, and the game and Unity versions;
- a random installation ID that Unity creates for the game on your device. It is not an advertising ID, and it is not connected to your name, email address or any account. Google Play lists it as "Device or other IDs".
As with any internet connection, Unity's servers also receive your device's IP address when the data is sent. The diagnostics do not collect your name, contact details, contacts, photos, location or advertising ID.
Why. So that we can see when, and on which devices, the game crashes, freezes or runs badly, and fix it.
Who processes it. Unity Technologies ("Unity") processes this data on our behalf, as our data processor, to provide its diagnostics service to us and to maintain and improve that service. This is governed by the Unity Data Processing Addendum. Unity may process the data outside the UK, including in the United States; the Addendum covers these transfers with the UK's approved standard contractual clauses. Unity's privacy policy for game players and app users explains how Unity handles personal data. Are You Faster CIC is the data controller.
Legal basis. Our legitimate interest in keeping the game stable on the devices people use. The diagnostics are part of the engine, and the game has no setting to switch them off. Deleting the game stops them.
How long it is kept. Unity keeps diagnostic data linked to an installation ID for 90 days by default.
No advertising use, no tracking. We do not use diagnostic data for advertising, and it is not combined with data from other companies to track you across apps or websites. Versions that show ads are described under "Advertising".
Advertising (versions that show ads)
Some versions of the game show an occasional ad between matches, never during one. Google AdMob chooses each ad in an auction between Google and Unity Ads (Unity Technologies). To show ads, measure them, limit how often they appear and prevent fraud, these services receive information from your device: your IP address (from which they estimate your general location), device and operating-system details, identifiers for this app on your device, and how you interact with the ads. Each processes it under its own privacy policy: Google (how Google uses information from apps), Unity.
By age. The ads services are told only how to treat each request (for a child, a teenager or an adult), never your age or year of birth. For a player under 18, and for anyone who prefers not to say their age, every request is marked accordingly: the ads are not personalised, the game never asks to track you, and it does not use your device's advertising ID. For a player under 13 the ads are also child-safe. In the European Economic Area, the United Kingdom and Switzerland, these players see "limited ads", which use no personal data for advertising.
Adults' choices. In the European Economic Area, the United Kingdom and Switzerland, Google's consent form asks you before ads may be personalised, and you can change your choice at any time in SETTINGS › PRIVACY › PRIVACY CHOICES; without consent, the ads are not personalised. On iPhone, Apple asks whether ads may track your activity across other companies' apps and websites; saying no changes nothing in the game. On Android, you can reset or delete your advertising ID in the device's settings.
Legal basis. Your consent, given in Google's form, for personalised ads and for storing or reading information on your device for advertising (adults in the EEA, the UK and Switzerland); elsewhere, and for ads that are not personalised, our legitimate interest in keeping the game free.
Every ad request asks for content suitable for all ages.
Remove Ads. A one-time purchase that removes the automatic ads. Apple or Google processes the payment; we never receive your payment details. If you play online with an account, the fact that the account owns Remove Ads is recorded (with a one-way coded form of the store's purchase reference, never the reference itself) so that it works on your other devices. It is deleted with the account.
Reporting an ad. SETTINGS › ADS › REPORT AN AD opens an email to us with the ad service's name and the reference of the last ad you saw. Nothing about you is added, and you choose what to send.
App stores and your device
Apple (App Store) and Google (Google Play) process information such as downloads and purchases under their own privacy policies. If you have chosen to share diagnostics with app developers in your device settings, Apple or Google may give us aggregated, anonymous crash and performance statistics. We use these only to fix problems.
Game Center (iPhone). If you're signed in to Apple's Game Center, disc.io reports the achievements you earn and your level, online wins and campaign progress to Game Center, which shows them to you and, on its leaderboards, to other players, under Apple's privacy policy. The game never asks you to sign in to Game Center. To remember what it has already reported, it keeps on your device a code made from your Game Center player ID, never the ID itself.
Your age, and children
The game is for players aged 13 and over, and never asks anyone for personal details. After your first match it asks your year of birth, without saying what any answer changes (on an iPhone with iOS 26 or later, it may first ask Apple to share your age range; you or a parent can decline). It keeps only an age group on your device (under 13, 13 to 17, 18 and over, or not said), never the year, and never sends it anywhere; RESET LOCAL DATA erases it. The game is the same for every age. What changes is what the rules require: the ads (see "Advertising"), and, for a player under 13 or anyone who doesn't say, the optional gameplay statistics, which then cover only what keeps the game working and fair (sessions, performance, errors, connections, and match and campaign results), never anything else. The crash and performance diagnostics work the same way for every player and are used only to keep the game working.
Online play
This section applies once you play online, in version 1.0 and in the test versions we give to invited testers through Apple TestFlight and Google Play internal testing (1.0.0 (6) and later test builds). A device that has never played online never connects to these services.
- Your online account. The first time you play online, the game signs in as an anonymous guest with Google Firebase Authentication: there is no name, email address or password, just a random user ID, and its sign-in token is kept on your device. After that, the game signs in whenever it starts. Firebase App Check asks Google Play Integrity (Android) or Apple App Attest (iOS) to confirm that requests come from the genuine app. Sign in with Apple (iPhone, optional, SETTINGS › ACCOUNT) links that account to your Apple Account so your progress can follow you to another iPhone. disc.io asks Apple for no name and no email address, so Firebase keeps only the identifier Apple gives disc.io for your Apple Account, and the game keeps that identifier on your device to notice if you stop using Sign in with Apple for disc.io. Deleting your account ends the link and asks Apple to end Sign in with Apple for disc.io. Unity Authentication then gives the guest a Unity player ID. Unity's Multiplayer Services and Relay connect the two players of a match, which means handling both devices' IP addresses, and measure connection speed to choose the nearest server region. Unity Cloud Code checks each result and stores the match in Unity Cloud Save (the two player IDs, the score, the match length and combat totals). Your own online record is kept there too: your results, experience and level, a hidden skill rating used to find you fair opponents, your recent matches, your record against each opponent (kept under a one-way code made from their player ID, never the ID itself; the 30 most recent opponents plus any you mark as favourites), and the players you block (up to 100). The game compares both devices' view of each match to keep results fair. Your place on the rankings is shown with your generated name. Your opponent sees a generated name such as SwiftComet27 (DISC-1A2B in earlier versions); nothing you type is ever shown to other players.
- Reports and review. If you report a player, we keep your player ID, theirs, the match and the reason you chose, for review (at most 10 reports a day). Matches whose results don't add up, and matches the two players describe differently, are flagged for review with both player IDs. Nothing happens automatically because of a report or a flag.
- How long online data is kept. Match records are deleted 8 days after the match. Reports, review flags and the service's own health counts (which hold no player IDs) are deleted after 90 days. Your online record stays until you delete your account (below); its lists keep only the newest entries.
- Invite and challenge links. SHARE makes the image on your device and hands it to the app you choose. A link carries a match code or a generated name, nothing else. Opening one loads a page from Firebase Hosting, which handles your IP address like any web server; the page has no cookies or analytics.
- Operations settings. After signing in, the game downloads the current operations settings from Unity Remote Config (for example whether online play is available, or down for maintenance), sending its build number, platform and release channel (the store version or a test channel) with the Unity player ID.
- Optional gameplay statistics (1.0.0 (7) and later). Nothing is sent unless you tap SHARE STATS. Then Unity Analytics receives summaries of your matches (results, combat and control totals, a coarse grid of where you played in the arena, connection quality and frame rate); how each session went (how long the game took to start, how smoothly it ran, low-memory warnings and the device model); how online searches went (how long they took and how they ended); short error codes when something fails, such as a timeout; and, when we compare two versions of a feature, which one you saw. Unity also adds its standard details: device model, operating system, processor, graphics, memory, screen, battery level, device volume, language setting and app version; Unity installation, player and session IDs; and the identifier for vendor (iOS) or a hash of the Android ID. Unity works out your country from your IP address. Names, email addresses, precise location and advertising IDs are never sent. GAMEPLAY STATS in SETTINGS › PRIVACY turns this off at any time and asks Unity to delete what your device has sent.
- Why. To provide online play and the rankings, to keep them fair, to test game balance and performance, and to keep the online service running (for example by pausing it for maintenance). Online data and operations settings are needed to provide the online play you chose; statistics are sent only with your consent.
- Who processes it. Google (see Privacy and Security in Firebase) and Unity process this data for us as our processors.
- Deletion. SETTINGS › PRIVACY › DELETE ACCOUNT deletes your online account: your results, statistics and ranking, your Unity player and your Firebase account, and then everything the game keeps on your device. Without the game, you can ask us by email: Deleting your account explains both routes and what stays for how long. Match records keep the two players' IDs, which no longer lead to any account once it is deleted.
Future features
If the game gains features that use personal data in new ways, we will update this policy before they are released. Where the law requires it, the game will ask for your consent first.
Your rights
Under UK GDPR you can ask us for a copy of personal data about you, and ask us to correct or delete it, to restrict how we use it, or object to our use of it. Email us at the address below. We find your online account from your player name (see Deleting your account). Unity's tools let us find diagnostic data only by its installation ID, which this version of the game does not show you, so we usually cannot pick out your records; Unity deletes them after 90 days by default. You can also complain to the Information Commissioner's Office.
Contact
Are You Faster CIC, United Kingdom — partners@areyoufaster.com
Changes
We will post any change to this policy on this page with a new effective date.