Privacy policy.
The short version
This policy covers Artificial Environment Lab (AE//LAB), the game for Android and desktop, its online services, and the undeton.com website. They are run by Undeton.
- We collect what an account and online play need, and what you choose to send us in a problem report.
- Other players see your nickname. Nobody else ever sees your email address.
- The game shows no ads, contains no analytics or tracking code, and we do not sell or rent your data.
- You can delete your account, and the data kept with it, from the game or at undeton.com/account/delete.
What we collect
Your account
- Your email address and password. The password is stored only as a salted hash by our sign-in service.
- Your nickname, the public name other players see. It must not be an email address.
- Whether your email address is verified, and your active sign-in sessions.
Online play
- While you queue or play online, the matchmaker holds your account identifier, nickname, party, lobby and queue state.
- The game server you connect to records your connection's network address and port in its operational log.
Problem reports
- The title and description you write, and any contact information you choose to add.
- This device's recent logs, only if you tick Include this device's logs on that report. They contain the app's version, your device model and system version, and the errors the app met. Email addresses, credentials and network addresses are removed from every log line before it is written.
- If you are signed in, the report is linked to your account so you can follow it in the game.
The website
- Anything you post on undeton.com, such as comments and messages, and your profile.
- Your email address, if you sign up for the beta.
- Notifications we send you on the website.
Kept only on your device
- Your progress, missions, achievements and settings. No server holds them.
- The sign-in session that keeps you signed in between launches.
We do not collect your location, contacts, photos, files, microphone or camera. On Android the game asks for one permission: internet access.
How we use it
- To sign you in, keep your account secure, and verify your email address.
- To find you a match, and to show your nickname to the players you play with.
- To investigate and fix the problems you report, and to reply to you.
- To run the website features you use.
Your matches are not recorded to train the game's bots. The bots learn from matches they play against each other on our own servers.
Who receives it
Our sign-in service, matchmaker, game servers, database and file storage run on servers we operate. A few services come from other providers:
- GitHub stores problem reports, meaning the title, description and contact information you wrote, in a private repository only our team can read.
- Discord: our team chat is told a report's number and a link to it, and nothing else.
- Netlify hosts the undeton.com website pages, and Google Fonts serves the website's typefaces. Both receive your browser's network address when you load a page.
- Google Play distributes the Android game, under Google's own privacy policy.
We do not sell, rent or share your data for advertising.
How long we keep it
- Account data is kept until you delete your account.
- Problem-report logs are deleted automatically 30 days after they are sent.
- Problem reports are kept until they are resolved and no longer needed, or until you delete your account, if you filed them while signed in.
- Matchmaking state expires on its own within 24 hours.
- Game-server logs, including connection addresses, are kept for 14 days.
- Sign-in sessions end after 30 minutes without use, and after 10 hours at most. The game renews an active session while you play.
Deleting your account, and your rights
Delete your account in the game from Account → Delete account, or at undeton.com/account/delete. Deletion happens straight away and is not queued. It removes:
- your sign-in: email address, password, nickname and every session;
- everything you posted on the website, and your profile;
- the problem reports you filed while signed in, including their logs;
- your beta sign-up and your notifications.
It cannot reach what was never linked to your account. That means reports sent while signed out, game-server logs (which expire after 14 days), and what is stored on your device, which you can remove by uninstalling the game or clearing its data.
To see, correct or export the data we hold about you, or to ask us to delete a report you sent while signed out, email us at the address below.
Children's privacy
An account is for people aged 13 and over. We do not knowingly collect personal information from children under 13. If we learn that we have, we delete it.
Security
- Every connection to our services is encrypted with HTTPS/TLS.
- Passwords are stored only as salted hashes, and repeated failed sign-ins are slowed down.
- Email addresses, credentials and network addresses are removed from the game's logs before they are written.
Cookies and local storage
The website keeps your sign-in session and display preferences, such as language and colour theme, in your browser's local storage. It uses no advertising or tracking cookies. The game keeps its session and settings in its own storage on your device.
Signing out removes your sign-in session. Clearing the browser's storage, or the game's data, removes the rest.
Changes to this policy
When this policy changes, we update this page and its "Last updated" date. If a change affects what we collect or who receives it, we also announce it in the devlog.
Contact us
For questions about this policy, or a request about your data: