DRONIODRONIODronio is a free multiplayer browser game. This page explains what data the game handles, why, who else sees it, and the choices you have. We collect as little as we can. Accounts are optional: you can play as a guest without one. There is no advertising, no usage statistics, no error reporting and no tracking cookies.
The controller of your data is the operator of Dronio. Contact: the address shown in the game's footer.
| Data | Purpose | Legal basis | Kept |
|---|---|---|---|
| Your nickname, your inputs in a match, and chat messages you send | Running the match you join and showing your name and messages to the other players in it | Providing the game you asked for (Art. 6(1)(b) GDPR) | Only while the match runs. Chat is relayed, not stored, except as below. |
| Your last ten chat lines in a room, a room's recent chat (every player's lines, up to 30) and its recent kills by player name, with offensive words masked | Giving context to a report a player files in that room | Keeping the game safe (legitimate interest, Art. 6(1)(f)) | In server memory only: your own lines while you play and up to 60 seconds after you leave; the room's lines and kills while the room runs, replaced as new ones come |
| Player reports: who reported whom, the reason, the reporter's own words if they wrote any, the room, and what the room held at that moment: the chat of the last five minutes (every player's lines, masked), the kills involving the reported player, and both players' ship, level, kills and deaths | Reviewing abuse and enforcing the terms | Legitimate interest (Art. 6(1)(f)) | In our database, up to 90 days after the report is filed (or resolved, if later), then deleted |
| Your IP address | Connecting your browser to the game; it is needed to send you any data at all | Providing the game (Art. 6(1)(b)) | Not stored by the game server. Our hosting and network providers may keep it in short-lived technical logs. |
| Game events: when you play (start and end of a visit, phone or desktop), each kill involving a human player (the ships, weapons and levels on both sides, damage, distance, time alive, who assisted) and, per life, the ship you flew, for how long and the damage dealt and taken | Balancing the ships fairly for fights between people, and spotting abuse such as two accounts feeding each other kills | Legitimate interest in a fair, safe game (Art. 6(1)(f)) | Recorded under your account id, or for a guest under a salted one-way code made from the random browser id (it cannot be turned back into the id). Kept 12 months; daily totals per ship, which hold no player data, are kept after that. |
| If you create an account: your email address, your unique name, which version of the terms you agreed to and when (and, with Google sign-in, your Google account id). We ask your month and year of birth only to check that you are 16 or over; we do not store them. Your password is stored by our sign-in service only as a one-way hash. | Signing you in, keeping your progress on every device, and the minimum age for accounts | Providing the account you asked for (Art. 6(1)(b)); the age check also to meet our legal duties toward children (Art. 6(1)(c) and (f)) | Until you delete the account. After deletion your name stays reserved for 30 days so no one can take it over at once. |
| With an account: your coins and every change to them (a ledger), the items you own and wear, your lifetime stats, your friends, blocks and parties | Running the store, the profile page, friends and parties, and resolving disputes about coins | Providing the game (Art. 6(1)(b)) | Until you delete the account, when all of it is deleted, the ledger included. The game events (below) are kept for balance statistics, with nothing that links them to you. |
| With an account: whether you are online or in a room (and which), and your party's membership; a guest in a party, under the salted code of the browser id | Showing friends where you are, with Join, and moving a party together | Providing the game (Art. 6(1)(b)) | Online status is overwritten as you play and is lost on a server restart; your friends don't see it while you "appear offline". Party history is kept until you delete the account. |
| As a guest: what your play in the public arena would have paid in coins, under the salted code of your browser id | Letting you keep it if you sign up soon after | Legitimate interest (Art. 6(1)(f)) | 30 minutes from your last play, or until claimed |
| Moderation: bans with their reason, and a log of every action an administrator takes | Enforcing the terms and keeping administrators accountable | Legitimate interest (Art. 6(1)(f)) | Bans until they end; the administrators' log for 24 months |
| Voice chat audio (only while you hold push-to-talk) | Talking to other players in your room (accounts only; guests have no voice or text chat) | Providing the feature you use (Art. 6(1)(b)) | Never stored. Audio goes directly between players' browsers, not through our server. |
The game sends no usage statistics and no error reports. We may add them later: anonymous statistics about which parts of the game people use (only with your consent, asked in the game), and crash reports that help us fix bugs. Before either starts, this policy will say what they collect, who receives it and for how long, and its version will change.
The game keeps these in your browser's local storage, on your device only: your settings and controls, your nickname, a consent choice if you made one, the number of matches you played, a random browser id used to reconnect you to your drone and to keep a kicked player out of a private room, as a guest the coins your visit would have paid, and, if you answered the sign-up age question under 16, the date until which this browser does not offer sign-up again (not your date of birth). Where accounts are not offered, your coins, items and loadout are kept there too, and clearing your browser's site data removes them.
If you sign in, the game sets two cookies that keep you signed in: a short-lived sign-in token and a token that renews it (30 days without use and it expires). They are strictly necessary for the account you asked for, are only readable by our server, and are not used to track you.
Our sign-in service and database run on our own servers listed above; no other company holds your account.
Cloudflare and Google may process data outside the EU under the EU Standard Contractual Clauses or the EU–US Data Privacy Framework. We do not sell data and do not share it with advertisers.
Dronio is intended for players aged 16 and over, and accounts are refused to anyone whose month and year of birth say they are younger. Guests have no text or voice chat. If you believe an account belongs to someone under 16, report the player in the game or contact us, and we will close the account and delete its data.
You can ask us for access to, correction of, or deletion of your data, ask us to restrict or stop processing it, and receive it in a portable format. With an account you can do the last two yourself: Account → "Download my data" gives you a file of everything we keep about you, and "Delete account" removes it, coins and their history included (the game events stay for balance statistics, with nothing that links them to you). If we start statistics, you will be able to withdraw consent at any time in Settings. You may also complain to your data protection authority.
When this policy changes in a way that matters, its version changes and the game asks for your choice again.