Privacy Policy

Who This Covers

This policy applies to everyone who uses the Services, including players of any age. It does not cover Apple, Cloudflare, or other services the Services link to or run on. Their own policies apply to them.

What We Collect

Your pickle and game progress

Your pickle, its name, stats, coins, outfits, scores, and settings are saved on your device: in your browser's local storage on the web, and in the app's storage on iPhone and iPad. We do not receive them, except as described for the arena below. A .dill backup is a file you create and keep. It is encrypted on your device and is not uploaded.

Optional care reminders (web)

If you turn on reminders in the browser game, our server stores the push address your browser gives us, a one-way hash of its authorization secret, when the next reminder is due, and your time zone, so reminders respect quiet hours. It does not store your pickle's name or stats.

Brine Royale arena

When you join the online arena from the web or the app, the server receives your nickname (on the web, the name you type; on iPhone and iPad, your pickle's name), your pickle's look (brine, variety, and outfit), and your moves. It keeps your position, mass, score, and a random player ID while you play. Other players in the same room see your nickname, pickle, and score.

If your connection drops, a secret reconnect token lets you resume the same run for 30 seconds. To recover from server restarts, the room saves its game state, including nicknames and reconnect tokens, for as long as a reconnect window is open. It deletes that copy when the window closes or you leave.

The arena uses your IP address while you are connected to limit connections per address and the number of private rooms created per minute. It is not saved with game state or used to identify you.

Game Center (iPhone and iPad)

If you are signed in to Game Center, the app sends your arena and arcade scores and achievements to Apple's Game Center. Apple shows them to other players according to your Game Center settings. We do not receive your Apple Account details.

Messages you send us

If you email us, we collect your email address and whatever you include in the message.

Technical data

Cloudflare, which hosts the Services, may process request data needed to deliver and secure them: IP address, date and time, requested URL, user agent, and referrer. On iPhone and iPad, Apple may share crash reports and TestFlight feedback that you choose to send.

We do not collect:

• Real names, email addresses, phone numbers, or contact lists through the games
• Precise location, photos, health data, or biometrics
• Payment information. The Services have no purchases.
• Advertising identifiers, tracking pixels, or analytics profiles

How We Use What We Collect

• To run the arena: matchmaking, gameplay, leaderboards, reconnecting, and private rooms
• To send the reminders you asked for, at the times you allow
• To keep the Services available and secure, and to stop abuse such as connection flooding
• To reply to messages you send us

We do not sell personal information. We do not share it for targeted advertising. We do not use it for profiling or automated decisions with legal or similarly significant effects.

Third-Party Services

Cloudflare

The website, browser game, reminder server, and arena run on Cloudflare Workers and Durable Objects. Cloudflare may process data at locations outside New York. See Cloudflare's Privacy Policy.

Apple

The app is distributed through the App Store and TestFlight, and Game Center is provided by Apple. See Apple's Privacy Policy.

Push services

Web reminders are delivered through your browser maker's push service (for example Apple, Google, or Mozilla). The reminder contains no pickle name or stats.

Email

Mail to ryanyannelli@gmail.com goes to a Gmail inbox. See Google's Privacy Policy.

Cookies and Similar Technologies

We do not set tracking, advertising, or analytics cookies. The browser game uses local storage to keep your pickle and settings on your device, and that data stays there. Cloudflare may set strictly necessary cookies for security or bot management. Because there are no non-essential cookies, there is no cookie banner.

New York Residents

The Services are operated from New York. The Stop Hacks and Improve Electronic Data Security Act (N.Y. Gen. Bus. Law §§ 899-aa and 899-bb) requires reasonable safeguards for New York residents' private information and notice if it is accessed without authorization. We do not ask for the kinds of private information that law covers. If we come to hold any, we will protect it and give the notices the law requires.

You can email us to ask what personal information we hold about you, or to correct or delete it, without citing a statute.

Your California Privacy Rights (CCPA/CPRA)

If you live in California, you may have the right to know, delete, and correct personal information, to opt out of its sale or sharing, to limit the use of sensitive personal information, and to be free from discrimination for using these rights. We honor these requests whether or not the CCPA applies to us. We do not sell or share personal information and do not collect sensitive personal information, so there is nothing to opt out of or limit. See Your Privacy Choices for how to make a request. We aim to respond within 45 days.

Other U.S. State Privacy Rights

Other states give residents similar rights to know, correct, delete, and opt out of sale or targeted advertising. If a law that applies to us gives you additional rights, contact us and we will honor them. If we decline a request, you may reply to appeal and we will answer the appeal in writing.

Global Privacy Control (GPC)

We honor Global Privacy Control signals. Because we do not sell or share personal information for advertising, the signal has nothing further to turn off.

Data Retention

• Game progress: on your device until you reset the game, clear browser data, or delete the app
• Reminder records: deleted when you turn reminders off, when your browser reports the push address is gone, or after 30 days without a care visit
• Arena state: kept in memory during a match. Saved copies for recovery are deleted when the 30-second reconnect window ends or you leave
• Email: kept while the conversation is active, then only as long as needed or required by law
• Cloudflare request logs: kept under Cloudflare's retention for security and delivery

Data Security and Incidents

We use reasonable safeguards for a small game: HTTPS everywhere, hashed reminder secrets, secret reconnect tokens, connection limits, and established hosting providers. No method of transmission or storage is fully secure. If we learn of unauthorized access to personal information we hold, we will contain it and notify affected people and regulators when the law requires it.

Children's Privacy

little dill is a game for a general audience, and players of all ages may enjoy it. The games do not ask for real names, email addresses, or other contact details. The arena nickname is the only text players enter that others can see. We encourage younger players to choose a nickname that is not their real name.

We process only what is needed to provide the game and keep it secure, which is how we approach the Children's Online Privacy Protection Act (under 13) and the New York Child Data Protection Act (under 18). We do not sell anyone's information or use it for advertising. A parent or guardian who believes we hold information about their child can email us, and we will delete it.

International Visitors

The Services are operated from the United States and hosted on Cloudflare's global network. Information may be processed in the United States and other countries where our providers operate. If you are in the European Economic Area, the United Kingdom, or Switzerland, you may have rights to access, correct, delete, or restrict personal data and to complain to your supervisory authority. Contact us to use them. Where those laws apply, we rely on our legitimate interest in running and securing the game and on your request when you ask for reminders or join a match.

Changes to This Privacy Policy

We may update this policy. The "Last updated" date shows the current version. If a change is material, we will also say so on this website. The Services have no accounts or mailing list, so we cannot email every player.

Contact

Questions or requests to know, correct, or delete personal information: email ryanyannelli@gmail.com. We aim to respond within 45 days. New York law governs this policy, except where a mandatory consumer-protection law of your residence applies.