Privacy policy

Last updated: 12 July 2026

Disaster Draft operates this store, website, and mobile application (the "Services") to provide you with a curated shopping and gameplay experience. Our web store is powered by Shopify, and our mobile app is powered by Google Firebase.

This Privacy Policy explains how we collect, use, and disclose your personal information when you use the Services. By accessing or using the Services, you acknowledge that you have read and understood this Privacy Policy.

Contents

  • Privacy Policy for the Web Store
  • Privacy Policy for the Mobile App
  • AI Judging Services
  • Shared Sections (Children's Data & Safety, Security & Retention, Your Rights, Complaints, International Transfers, Changes, Contact)

1. Privacy Policy for the Web Store

When you shop on our website (powered by Shopify), we may collect:

  • Contact details: name, billing/shipping address, phone number, email.
  • Financial details: payment card information and transaction history. Card payments are processed securely by Shopify and our payment providers — we don't store full card numbers ourselves.
  • Account details: username, password, settings.
  • Shopping activity: items viewed, added to cart, purchased, or returned.
  • Device data: IP address, browser, and usage activity.

How we use it: to process and fulfil orders, provide customer support, personalise your shopping experience, send promotional messages (which you can opt out of at any time), prevent fraud, and meet our legal obligations.

Who we share it with: Shopify and trusted service providers for payments, shipping, IT, and analytics; legal authorities where required by law; and marketing partners only if you have opted in. See the Shopify Privacy Policy.

2. Privacy Policy for the Mobile App

When you use the Disaster Draft app (Google Play / Apple App Store), we collect only what's needed to run the game. You can play as a guest with just a nickname — no account or email required.

Information we collect

  • Account data (registered players): email, nickname, and optionally a first/last name and profile avatar image you choose.
  • Gameplay data: nickname, in-game character choices, session activity, results, and basic stats.
  • Age confirmation: if you enable 18+ game modes, your year of birth (to confirm you're over 18).
  • Technical data: IP address and device/app information, processed by Firebase as needed to run the service securely.

Camera & photos

  • Camera: used only to scan QR codes — the QR code on a physical scenario card, or a QR code a host shares so you can quick-join their game. The image is processed on your device to read the code; we don't record, store, or transmit camera footage.
  • Photos: accessed only if you choose to set a profile avatar. We open a photo only when you pick one; the selected image is uploaded as your avatar.

What we do NOT collect

  • No advertising ID, and no third-party advertising or analytics SDKs.
  • No location data.
  • No access to your contacts, no microphone, and no general photo-library access beyond the single avatar image you choose.

How we use this data

  • To run core gameplay and maintain your account and game sessions securely.
  • To show your stats and game history and personalise JANET's suggestions (you can turn personalisation off in your Profile).
  • To keep the app reliable and to check user-submitted content for safety (see AI Judging Services).

Third-party processing for the app

  • Google Firebase (Authentication, Firestore database, Cloud Functions, and Storage) securely manages accounts, game data, and avatar images. Firebase data is stored in Australia (Google's Sydney region).
  • Google Play and the Apple App Store handle app installs and crash reporting under their own privacy policies.

Your choices

  • Delete your account and data any time in the app: Profile → Danger Zone → Delete account, or via our Manage My Data page.
  • Turn off personalisation in your Profile.
  • Uninstall the app to stop further data collection on your device.

3. AI Judging Services

To provide AI-driven judging, moderation, and suggestions during gameplay, our app connects to OpenAI.

What is shared

  • We share only the minimum needed: your nickname, your in-game choices, and — for safety checks — content you submit such as a chosen name or avatar image.
  • We do not share your email, address, or payment details.

Purpose & safeguards

  • To generate AI judgments and roasts, keep suggestions relevant, and screen submitted content for inappropriate material.
  • Transmissions are secured and responses are used only within the game. OpenAI processes this data in the United States (see International Transfers).

4. Shared Sections

Children's Data & Safety

Disaster Draft includes a Kid-Friendly mode, and younger players may take part in the party game. We've built the app to protect them:

  • Adult content is locked by default. Our 18+ modes (NSFW and Unhinged) are hidden until an adult switches them on. Turning them on requires confirming a year of birth of 18 or over and, on a registered account, re-entering the account password — so a child on a shared device can't unlock adult content on their own.
  • Kid-Friendly mode is filtered. In Kid-Friendly mode, character suggestions and generated content are held to our strictest safety settings.
  • All player-created content is screened. Nicknames, character choices, and profile avatars are automatically checked by an AI moderation system before they are shown to others — with the strictest thresholds in Kid-Friendly mode and an absolute block on the most serious content at every setting.
  • Reporting and blocking. Players can report anything JANET says that seems inappropriate, and a game's host can remove or block another player from their game.
  • No ads or tracking. We show no third-party advertising, use no advertising ID, and include no tracking or analytics SDKs.

For any player — adult or child — playing as a guest we collect only a nickname and in-game choices; we never require an email, real name, or payment details to play as a guest. We recommend a parent or guardian set up and supervise play for younger children and choose Kid-Friendly mode. We do not knowingly collect personal information from a child beyond this minimal gameplay data; if you believe a child has provided us with more, contact us and we'll delete it.

Security & Retention

  • We use reasonable safeguards, but no system is completely secure.
  • Web store: we keep information as long as needed to fulfil orders and meet legal, tax, and accounting obligations.
  • App: we keep your account, game history, and stats until you delete your account or ask us to. Guest play leaves only a nickname and that session's choices. Limited safety records (content-moderation logs) may be kept longer to prevent abuse.

Your Rights & Choices

Depending on your location, you may ask to access, correct, delete, or receive a portable copy of your data, and manage your marketing preferences. You can action most of this yourself in the app (Profile) or via our Manage My Data page, or by emailing us using the details below.

Complaints

If you have a concern, please contact us first and we'll try to resolve it. In Australia you may also complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au. Outside Australia, you may contact your local data protection authority.

International Transfers

Your account and game data are stored on Google Firebase servers in Australia (Sydney). Content sent for AI judging and moderation is processed by OpenAI in the United States. Our web store runs on Shopify, which may process data in Canada, the United States, and elsewhere under the Shopify Privacy Policy. Where your data is handled outside your country, we take reasonable steps to ensure it is protected consistently with the Australian Privacy Principles.

Changes to This Policy

We may update this Privacy Policy from time to time. Updates will be posted here with a new "Last updated" date.

Contact Us

Email: DisasterDraftGame@gmail.com
Post: 39 Wharf St, Tweed Heads NSW 2485, Australia

Disaster Draft is operated by Octo-pi Pty Ltd (ACN 672 645 724) through its studio division Burnt Kernel Studio, trading under ABN 70 952 196 892. This entity is the data controller responsible for your personal information.