Who we are
- controller
- SorkoPiko, Australia
- contact
- [email protected]
This policy follows the EU and UK GDPR, which also covers the Australian Privacy Principles.
What we keep, and for how long
| data | why | legal basis | how long |
|---|---|---|---|
| Steam ID, display name, role, date joined; saved levels, download history | your account and its features | contract | until you erase the account |
| levels, songs, descriptions; runs, replays and failed attempts; ratings | hosting and showing them; leaderboards, cheat checks, level statistics | contract; legitimate interests | until you erase the account, then without your name; a replay while its run is shown on a leaderboard |
| reports you send; bans, strikes and messages about your levels; copyright notices, with names, addresses, email addresses, phone numbers and IP addresses; dispute statements; the email we send about them | handling reports and notices; enforcing the terms | legitimate interests; legal obligation | as long as needed to handle the report or notice and any legal claim |
| sign-ins (time, IP address, browser or game); server logs | keeping you signed in; security | legitimate interests | a short time |
Levels stay after you delete them or erase your account, as the terms say. Songs removed after a final copyright takedown are deleted.
Steam gives us your public Steam ID when you sign in. The rest comes from you and from using the service.
Who sees it
- Everyone: your display name, your levels, and your runs with their replays when they are shown on a leaderboard.
- Our staff: everything above, to moderate the service.
- The uploaders of the levels, if you file a copyright notice about them: your name or organisation.
- A claimant, if you dispute their notice and our staff ask them to respond: your dispute statement, without your name or contact details.
- Our processors, who handle data for us under contract:
- cloud storage provider
- stores levels, songs and replays
- hosting provider
- runs our servers and database
- email provider
- sends our messages
- Steam (Valve)
- signs you in; it has its own privacy policy
We are in Australia, so data of people in the EU and UK is processed there. Where the law requires it, transfers outside the EU and UK rely on standard contractual clauses.
Cookies
The site sets bl_session when you sign in, to keep you signed in, and removes it when you sign out. While you sign in with Steam it also sets bl_oid, which lasts a few minutes. Neither is used for tracking.
Your rights
You can ask us for a copy of your data, to correct it, to restrict how we use it, or to move it to another service. You can object to processing that rests on legitimate interests. Write to [email protected].
To erase your account, sign in and use "erase my account" on your account page. It removes your name, Steam ID, sign-ins, saved levels and download history. Your levels, runs and replays stay without your name. We cannot erase an account while a ban is in force.
Complaints
If you're unhappy with how we handle your data, contact us at [email protected] and we'll work to resolve it.
You also have the right to complain to a data protection authority.
Children
The service is for people aged 13 and over. If we learn that we hold data of a younger child, we delete it.
Changes
We post changes here with the date. For significant changes we tell players in advance where we can.