Privacy Policy

Last updated: 19 October 2026 (website visitor statistics and beta sign-up added)

Depthbound ("the game") is a single-player game for Android. This policy explains what the game, and this website, do with information about you. In short: your progress stays on your phone. The game sends play statistics only if you agree, and you can withdraw that at any time. Nothing is sold.

What the game stores, and where

Everything the game remembers is saved only on your device, in the game's private storage:

• the name and soul colour you choose for your profile (no real name is needed),
• your progress: souls, unlocked classes, blessings, cosmetics, achievements, codex entries, best depths and daily dungeon results,
• your settings (music, sound, vibration, narrator, tutorial hints, play statistics on or off).

There is no account and no login. If you uninstall the game or clear its data, all of this is deleted.

Play statistics (only if you agree)

The game asks you once whether you want to share play statistics. Nothing is sent unless you tap "Share play stats". You can change your answer at any time in Settings ▸ Share play stats.

What is sent. When you agree, the game creates a random identifier just for this purpose and stores it on your phone. It is not linked to your Google account, your device, your profile name or anything else about you. Under this identifier the game sends:

• for each play session: how many minutes it lasted, and the game version;
• for each dive: the class, the region, whether it was the daily dungeon, the depth reached, the hero's level, how it ended (made it home, fell, gave up or slew the region's final boss), what defeated the hero, how many minutes it took, and the game version.

The server adds the time the data arrived. The game does not send your profile name, email address, contacts, location, advertising ID, device model or any other data from your phone.

Why. To see how long and how often the game is played, and where players struggle, so the difficulty can be balanced.

Legal basis. Your consent (Art. 6(1)(a) GDPR). Storing the random identifier on your phone is based on your consent too (§ 25(1) TDDDG).

Where. The statistics are stored with our database provider Supabase (Supabase Inc.), on servers in Frankfurt, Germany (EU), under a data processing agreement. When the game sends data, your phone's IP address is transmitted as part of the internet connection. Supabase uses it only to deliver the request and keep the service secure, in short-lived server logs; it is not stored with the statistics.

How long. Statistics are deleted at the latest two years after they were sent, or as soon as you withdraw your consent.

Withdrawing. Turn off Settings ▸ Share play stats. The game then stops sending and deletes everything sent under your identifier from the server, and forgets the identifier. Settings ▸ Reset all progress does the same. Withdrawing does not affect the lawfulness of what was sent before. Because we cannot tell who you are from the statistics, we cannot find your data without the identifier on your phone. Please use the switch.

Share card

When you tap Share after a run, the game creates a picture of your result. On Android 10 and newer it is saved to your device's Pictures/Depthbound folder, and Android's share sheet opens. The picture is only sent anywhere if you choose an app to share it with; that app's own privacy policy then applies.

Advertising, analytics and tracking

The current version of the game contains no advertising and no tracking. Apart from the optional play statistics described above, it has no analytics, and it contains no third-party software development kits that collect data.

If a future version adds advertising (for example optional ads you can watch for a reward) or crash reporting, this policy will be updated before that version is released, and the game will ask for your consent where the law requires it.

Permissions

The game uses internet access only to send play statistics, and only if you agreed. It does not request access to your contacts, location, camera, microphone or account. Saving the share card uses Android's standard media storage.

Children

The game is not directed at children under 13, and it does not knowingly collect information from children.

This website

This website uses no cookies and loads no fonts or scripts from other companies: everything is served from this site.

Visitor statistics. To know how many people visit and where they come from, the site uses Vercel Web Analytics, a statistics service of our hosting provider that works without cookies and stores nothing on your device. For each page you open it records the page, the website that linked to it, a campaign tag if the link had one (for example utm_source=reddit), your country, and your browser, operating system and device type. To count a visitor only once a day, it uses a code calculated from your request that changes every day; your IP address is not stored, and we cannot recognise you across days or identify you. We only see totals. The legal basis is our legitimate interest in knowing how the website is used (Art. 6(1)(f) GDPR).

When you visit, the hosting provider (Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA) automatically records technical data such as your IP address, the date and time and the page requested, in server log files. This is needed to deliver the site and keep it secure (Art. 6(1)(f) GDPR). We do not combine these logs with other data. Vercel processes this data for us under a data processing agreement; it may be processed in the USA, for which Vercel is certified under the EU-U.S. Data Privacy Framework (Art. 45 GDPR).

If you write to us by email, we use your email address only to answer you.

Beta sign-up

If you sign up for the beta on this website, we store what you enter (your email address and, if you give them, a name, your phone model and a note), with the time of the sign-up, your consent, and, if the link you came through had a campaign tag (for example utm_source=reddit), that tag, so we know which posts bring testers. We use it only to invite you to the Depthbound beta on Google Play and to send you news about the beta. The beta page shows how many people have signed up in total, never who. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time by writing to the address below; we then delete your sign-up.

The sign-ups are stored with Supabase (Supabase Inc.), our database provider, on servers in Frankfurt, Germany (EU), under a data processing agreement. We delete a sign-up when the test ends, or earlier if you ask.

Your rights

Under the GDPR you have the right to access, correct and delete your data, to restrict or object to its processing, to data portability, and to withdraw your consent at any time with effect for the future. You also have the right to complain to a data protection authority. You can delete the play statistics yourself with the switch in Settings, and all game data on your phone with Settings ▸ Reset all progress, by clearing the app's data, or by uninstalling the game. For a tester sign-up or an email you sent us, write to the address below.

Changes

If this policy changes, the new version will be published at this address with a new date.

Contact

Responsible for this game and website: [your full name], [street and number], [postcode and city], Germany.
Questions about this policy: Benni0801@web.de