Privacy notice
What DealCraft stores, why, where it is kept and for how long. It is written for two audiences: the businesses that run games and the people who play them.
What we hold
Every record the product writes about a person, and nothing we do not write.
| Record | Why we hold it | How long |
|---|---|---|
| Business owner account: name, email address, a scrypt hash of your password, whether the address is confirmed, failed sign-in counts. | To let you sign in, to protect the account from guessing, and to reach you about your plan and your games. | While the account is open, then deleted. |
| Player contact captured by a game: an email address, tied to the business that captured it. | The business collected it through its own promotion and is responsible for it. | Until the business deletes it or closes its account. |
| One row per play: the result and the reason for it, the time, the language, the IP address the play came from, the country (worked out on our own server from that address), the device type, browser and operating system with their versions, the device maker and model where the browser reports them, the screen size, a device cookie identifier, a hash of a browser fingerprint, a keyed hash of a shortened network address, how the game was reached (a link or QR code, the website pop-up, a page or an event), the website it was shown on and, for the pop-up, the path of the page it opened on, without its query string. | To enforce the limits you set, to make a game resistant to one person playing it a thousand times, and to be the record a dispute is settled from. | Kept as the record of what happened. The business that runs the game sees the IP address on its session page. |
| The reward code, what it is worth, which game and business issued it, when it was claimed and used, and the order value if the business sent one. | So a code can be checked and honoured, and so a business can see whether the promotion paid for itself. | Kept while a claim about it is possible. |
| The plan you are on, your Dodo customer and subscription identifiers, the current period, and lifecycle events Dodo sends us. | To run your subscription and apply the right limits. Card details never reach us. | Plan state while the account is open; the raw event log is deleted after thirty days. |
| Counter staff device: a hash of the device credential, a hash of the 6-digit PIN, lockout counters, when it was last used. | So a member of staff can mark a reward used without holding an account or seeing anything else. | Until the business revokes the device. |
| When something in the app breaks: the error, the page address with tokens removed, and your browser type. Never your name, email, cookies or what you typed. | To find and fix faults, through Sentry. | Thirty days, then deleted by Sentry. |
Who is responsible
DealCraft is operated by Dato Diasamidze, registered in Georgia, and can be reached at hello@dealcraft.io.
For a business owner's account and billing data we are the controller. For the data a business collects through its own games, that business is the controller and we process the data on its behalf under the Data processing agreement.
What we do with your network address
We store the IP address each play came from and show it to the business that runs the game, so it can check a disputed win or a suspicious run of plays. It is not shared with anyone else.
Address-based limits, which stop one person playing a game a thousand times, never read the address itself. They key on the address shortened to its network block and signed with a secret key held only on our server, and that signature cannot be turned back into an address.
Why we are allowed to hold it
Account and billing data: because we need it to provide the service you asked for (performance of a contract) and to meet our accounting and tax obligations.
Play, limit and anti-abuse data: because the business running the game and we have a legitimate interest in a game that one visitor cannot drain, and because the business needs a record of what happened.
We process personal data in line with the EU General Data Protection Regulation where it applies and the Law of Georgia on Personal Data Protection. Emails about your plan, limits and games are part of the service, not marketing. We do not send marketing email and we never sell anyone's data.
Where it lives
On an Oracle Cloud server in Abu Dhabi, United Arab Emirates, with the database on the same machine and backups in Oracle Cloud Object Storage in the same region. Every visit to the site passes through Cloudflare's network first, which filters out attacks before they reach the server.
Email is delivered through Resend in the United States, and Cloudflare, Inc. is in the United States too. For people in the European Economic Area, the United Kingdom or Georgia, these are transfers abroad; where the law requires safeguards, we rely on standard contractual clauses or another recognised mechanism. Write to us if you want a copy.
Who else sees it
The table below lists every company that handles personal data for us. Card details are taken by Dodo Payments and never reach us.
Country lookups use a database on our own server, so no address is sent to another company for that. The scheduler that triggers our background jobs receives no personal data. For visitor statistics we use Cloudflare Web Analytics: it counts page views with the page, the referring site, the browser and the country, sets no cookie, stores nothing on your device and builds no profile of you. There is no advertising network and no tracking pixel anywhere on DealCraft.
Cookies
A signed session cookie when a business owner signs in, and a separate one for a player. A device cookie on the game pages, which lets a per-player limit work for a visitor without an account. A device credential cookie on a staff screen.
All of them are strictly necessary for the service you asked for. There are no advertising or analytics cookies, which is why DealCraft shows no cookie banner.
How long we keep things
The table above lists the period for each record. In short: account data while the account is open, raw billing events for thirty days, rate-limit counters for minutes, and plays and rewards for as long as a dispute about a reward is still possible.
Backups are kept for five days on the server and for thirty days in Oracle Cloud Object Storage, so a deleted record can remain in a backup for up to thirty days after it is removed from the live database.
Your rights
You can ask for a copy of the data we hold about you, ask us to correct or delete it, ask for it in a portable format, or object to how we use it. Write to hello@dealcraft.io and we will reply within thirty days.
If you played a game run by a business, contact that business first: it decides what happens to the details you gave it. If you contact us instead, we will pass your request on.
You can also complain to the Personal Data Protection Service of Georgia or, if you are in the European Economic Area or the United Kingdom, to your local data protection authority.
Children
DealCraft is not meant for children. A business can put an age gate on a game, and where one is set the player must meet it. If you believe we hold data about a child, write to us and we will delete it.
Changes
If this notice changes in a way that matters we will tell account holders by email. The date at the top says when the text last changed.
Contact
hello@dealcraft.io. We answer in Georgian or English.
Subprocessors
Every company that processes personal data for DealCraft, what it does and where.
| Company | What it does | Data it handles | Location |
|---|---|---|---|
| Oracle Cloud | Hosting of the application, the database and the backups | All data the service stores | United Arab Emirates |
| Cloudflare | Protection of the site against attacks and delivery of its traffic | IP addresses and the content of requests to the site | Worldwide network; Cloudflare, Inc. is in the United States |
| Resend | Delivery of emails such as confirmations and claim codes | Email address and message content | United States |
| Sign-in with Google, only when a user chooses it | Name, email address and profile picture | United States | |
| Dodo Payments | Payments and subscriptions, as merchant of record (independent controller) | Business billing details and payment data | Several countries, as set out in the Dodo Payments privacy policy |
| Sentry | Reports of errors in the app, so they can be found and fixed | Error details, the page address with any tokens removed, and the browser type. No names, emails, cookies or form contents | European Union (Germany); Functional Software, Inc. is in the United States |