Privacy Policy – Oregrave
1. Who we are
Oregrave (the "game" or the "app") is a top-down horror mining game for Android, developed and published by Grinnox, an independent developer (a private individual) ("we", "us"). Grinnox is the data controller for the personal data described in this policy.
Contact: grinnoxgames@proton.me
This policy covers the Android app (package name com.grinnox.oregrave) and the online game
server that the app connects to for online play.
2. Summary
- You can play solo without sending any data to us. Your progress and settings stay on your device.
- The game has no user accounts, no ads, no analytics, no crash reporting and no tracking SDKs. It has no real-money purchases.
- If you choose online play, the app sends our game server the room code and the nickname you type, a random player ID, your suit colour and your gameplay (where you move and what you do).
- Your nickname, colour and gameplay are visible to the other players in the same room.
- Everything travels encrypted (HTTPS / WSS). Our server is hosted by Cloudflare, which also processes your IP address to deliver the connection.
- Your player data is kept in the server's memory only while you are connected. Server request logs are deleted within 7 days.
- We do not sell your data and do not share it with anyone for advertising or any other purpose.
3. Data stored only on your device
The app keeps the following in its private storage on your device (Android SharedPreferences):
- your game progress: level and experience, credits and premium tokens, researched items, the gear in your storage and loadout, and your miner's look;
- your settings, tutorial progress and which help screens you have seen;
- a saved expedition, so you can continue a solo run after closing the app.
None of this is sent to us. It is deleted when you clear the app's data or uninstall the app. If Android backup is turned on, Android may include this data in your device backup to your Google Account. That backup is handled by Google under its own terms; we have no access to it.
4. Data processed when you play online
Online play only starts when you open the ONLINE screen and join a room. From then on, the app sends the following to our game server:
| Data | What it is | Why |
|---|---|---|
| Room code | The code you type to join a room | To put you in the same mine as your friends |
| Nickname | The name you type (up to 18 letters and digits). Please do not use your real full name. | To show the other players who you are |
| Player ID | A random code the app makes for each session; it is not linked to your device or Google Account | To tell the players in a room apart |
| Suit colour | The colour of your miner | To draw your miner for the others |
| Gameplay | Your position and direction, and your actions (moving, digging, shooting, placing explosives) with the weapon or explosive used | To play the same mine together |
| IP address and connection details | Sent automatically by your device when it connects | To deliver the connection and protect the server from abuse |
Who can see it: the other players in the same room see your nickname, colour, position and actions.
How long we keep it: your nickname, player ID, colour and position are held only in the server's memory while you are connected and are gone when you leave. For each room the server keeps only the room code, the map seed and an action counter, so that everyone who joins the room plays the same mine; this contains no personal data. Cloudflare's request logs (which include the time, your IP address and the connection address with the room code, nickname and player ID) are kept for up to 7 days for operation and security, then deleted automatically.
Legal basis (EU/EEA General Data Protection Regulation): providing the online play you ask for (Article 6(1)(b)) and our legitimate interest in keeping the server running and secure (Article 6(1)(f)).
5. Service providers and sharing
- Cloudflare, Inc. hosts our game server and processes the data in section 4 on our behalf. See Cloudflare's privacy policy.
- Google Play distributes the app; Google processes data about your download under Google's privacy policy.
We do not sell personal data and do not share it with advertisers, data brokers or anyone else.
6. Purchases
The app has no real-money purchases. Premium tokens come from a free daily reward. If purchases are added later, they will be handled by Google Play's billing system and this policy will be updated first.
7. Permissions
The app only uses Internet access, for online play. It does not ask for your location, camera, microphone, contacts, photos or files.
8. Children
Oregrave contains horror themes, blood and violence against creatures. It is not directed at children under 13, and we do not knowingly collect personal data from them. If you believe a child has sent us personal data, contact us and we will delete it.
9. Your rights
You have the right to access, correct or delete your personal data, to restrict or object to its processing, and to lodge a complaint with a data protection authority. In Hungary this is the Hungarian National Authority for Data Protection and Freedom of Information (NAIH, naih.hu). Because the game has no accounts, we can only find online data from the room code, nickname and approximate time you give us. Write to grinnoxgames@proton.me; we answer within one month.
10. Deleting your data
- Data on your device: clear the app's data in Android settings, or uninstall the app.
- Online data: removed when you leave the room; logs are deleted automatically within 7 days. You can also ask us by e-mail.
11. Security
All online traffic is encrypted with TLS (HTTPS and secure WebSocket). Access to the server is limited to the developer.
12. Changes to this policy
If we change this policy, we publish the new version here and update the date at the top. Significant changes will also be noted in the app's release notes.