Privacy Policy

GreenMind Media Inc., of Saskatchewan, Canada, is responsible for your personal information (its "controller", in European terms). Our privacy officer can be reached at greenmindmediagroup@gmail.com.

• Account information. When you create a GreenMind account we receive your email address, your name, and an identifier for how you sign in: with Google, or with your email address and a password, both through Google Firebase Authentication. We never receive your Google password, and a GreenMind password goes straight to Firebase, which keeps only a one-way hash of it. If you turn on two-step verification, Firebase also keeps the key your authenticator app shares with it; we do not.
• Public name. The name other players see: one you choose, or else your Steam name if a Steam sign-in gave us one, or else one we generate. Your email address and account name are never shown to other players.
• Game identities. When you play one of our games we receive identifiers from Epic Online Services and from the platform you play on, such as a Steam account. Each game's own policy lists what it holds.
• Friends. The friends you add, the friend requests you send and receive, and the players you block. We also hold your friend code, which is what you give someone so they can find you, and whether you accept friend requests.
• Status and presence. The status and status message you choose. While you are connected we also hold that you are online, which game or website you are connected from, and what the game says you are doing. That is held only while you are connected. When you disconnect we keep the time you were last connected, and nothing else of it.
• Direct messages. The messages you and your friends send each other, when each was sent, and how far each of you has read. Messages are stored on our servers in a form we are able to read: they are not encrypted from one end to the other. Each message passes through a word filter before it is stored, which stars out words it does not allow, so what we store is what your friend sees.
• Reports. When you report a player or a message, we keep who you reported, the reason you chose, and what you wrote to us. We also keep a copy of what there was to see at that moment: the name and status message the player was showing and, if you reported a message, that message and the few messages either side of it in your conversation. A report of a player copies no messages. If our staff restrict an account because of a report, we keep that they did, for how long, and why.
• Linked services. If you connect Discord, we store your Discord identifiers, username and profile images so the connection works.
• Apps you let in. Which apps and games you have allowed to sign in with your GreenMind account, and what you agreed to let each of them see.
• Legal acceptances. Which of our documents you accepted, which revision, and when.
• What you send us. Support and deletion requests: what you write, and the email address you give us for a reply.
• Changes you make as an administrator. When you manage an org, a project or one of its environments (its settings, config, roles, people, keys and the like), we record that your account made the change, what it was and when. The admins of that org or project can see the record, and so can our staff. It never holds a password, a key or a token, only that one was changed.
• Our Discord server. Our bot reads the messages posted in some channels of our Discord server and checks them against a word filter. When a message fails it, the bot deletes the message and keeps a copy for our moderators to review: what was written, the channel, and the sender's Discord name and identifier.
• Server logs. Ordinary logs of IP addresses, request times and error details, kept for security and to find faults.
• Website visits, if you allow them. If you turn on analytics in our cookie banner, our websites count your visits: the pages you view, the site that sent you, your browser, operating system, device type, screen size and language, and the country and city your IP address places you in. We count them on our own server, with no cookie and without keeping your IP address, and cannot link them to your account.

We do not use advertising trackers or build advertising profiles, and we do not collect your date of birth or payment details. Purchases happen in the store you buy through, under its own policy.

• To provide your account and our services: signing you in, keeping your progress and content, showing you your friends and delivering your messages, answering you. This is what our Terms of Service commit us to.
• To keep our services secure and working: stopping cheating and abuse, abusive messages in our Discord server included, protecting accounts, finding and fixing faults. This is our legitimate interest in running services that work and are safe to use.
• To meet legal obligations: keeping records we are required to, and answering lawful requests.
• To see how our websites are used, which pages people visit and how they find us, so we can improve them: only with your consent, which you can withdraw at any time (clause 5).
• To show content from other companies, such as YouTube videos, only with your consent, which you can withdraw at any time (clause 5).

We do not use your information for any other purpose.

We use service providers, which process data for us and on our instructions: Amazon Web Services hosts our servers and database; Google Firebase runs sign-in to your GreenMind account; Epic Online Services provides game identity and online features; and Discord, if you connect it. Visits are counted with Umami, software we run on our own servers, so no analytics company receives them. Each product's own privacy policy names the providers it uses and, for our games, what other players can see. The stores and platforms you buy or play through, such as Steam, Google Play and the App Store, deal with you under their own policies, not this one.

Other players see some of what your account holds. Anyone signed in can find you by the public name you chose, or by your friend code if you gave it to them. Your friends can see your public name, whether you are online, which game you are in and what you are doing there, your status message, and when you were last connected. If you choose Invisible you are shown as offline, and that time stops moving. A friend you message sees the message and whether you have read theirs. A player you block is not told that you blocked them. Your player id in each of our games you play (in Dawn of Irkalla, the product user id Epic Online Services gives you) is shown to your friends, to the other player on a friend request between you, to the other player in a direct message thread with you, and to a player who has blocked you, so that their game can recognise you among the friends their platform lists and invite you to a party. It is never shown in search results.

Our staff can reach stored messages, because they are on our servers. We read them only where that is necessary: to find a fault, to answer you, or to act on a report under our Terms of Service.

A report is read by our staff, who see the copy described in clause 2. The player you reported is not told that you reported them, and is not shown the report. Staff may remove a reported message from the conversation, or restrict the account that sent it from sending messages and friend requests for a time; a restricted account is told that it is restricted and until when. Our staff discuss reports in a private channel of our Discord server: what you wrote to us is posted there with the name of the player you reported, and the copied messages are not.

We do not sell or rent personal information, and we do not share it for advertising. We disclose it where the law requires, or where that is necessary to protect the rights, property or safety of our players, the public or GreenMind.

Our websites set only the cookies and browser-storage entries they need to work: to keep you signed in, and to remember choices you make. Those need no consent, and none of them tracks you across other sites. They are:

Counting your visits, and content from other companies such as YouTube videos and our Discord server's widget, happen only if you allow them. Our cookie notice explains what each is, what it sets, and how to change your choice at any time.

Our servers are in the United States and GreenMind is in Canada, so your information is processed in both, and by our service providers where they operate. Where the law of the place you live restricts sending personal data abroad, we rely on the safeguards it recognises: for data from the European Union and the United Kingdom, Canada's adequacy status, and our providers' standard contractual clauses or their certification under the EU-U.S. Data Privacy Framework.

• Your account, and what it holds, for as long as the account exists.
• Your friends, blocks and direct messages for as long as the account exists. We do not delete messages after a set time. Deleting a message removes what it said at once, for you and for the friend you sent it to. Deleting your account removes your friends, requests and blocks, and every message you sent. Messages your friends sent to you stay in their own view of the conversation, since those are theirs.
• Reports, and the copy kept with each, for as long as we need them to moderate our services. Deleting a message does not remove a copy of it that a report already holds. Deleting your account removes what you wrote from every report, whether you made it or it was made about you, along with your name on reports about you and any restriction on your account. The report itself stays, as a record that something was reported and what was done.
• Once you ask us to delete your account, we erase it within 30 days. How to delete your account lists what goes. What stays is a record, with nothing personal on it, of the terms you accepted and of your request.
• Support requests for as long as we need them to help you. Deleting your account removes your email address from them, and what you wrote.
• Copies of messages our Discord bot removed, for as long as we need them to moderate the server. If your Discord account is connected to your GreenMind account, deleting your account removes what you wrote from them, and who you are.
• Records of changes made as an administrator for 2 years. Deleting your account removes who made them, and anything they say about you; what was changed stays, as the org's record.
• Server logs for 30 days; database backups are overwritten within 7 days.
• Counted website visits for 24 months.

Wherever you live, you can ask us for a copy of your personal information, to correct it, or to delete it. Deleting your account is explained on our account deletion page. Depending on where you live you may also have the right to restrict or object to how we use it, to receive it in a portable form, and to withdraw a consent you gave, which for analytics and for content from other companies you can do yourself from Cookie settings.

Write to greenmindmediagroup@gmail.com. We answer within 30 days, or sooner where the law where you live requires it, we may first need to confirm the request is yours, and we do not charge for it.

You can also complain to a data protection authority: in Canada, the Office of the Privacy Commissioner of Canada; in the United Kingdom, the Information Commissioner's Office; in the European Union, the authority where you live. We would be grateful for the chance to put things right first.

Our services are not directed at children under 13, and a GreenMind account requires you to be at least 13, or older where a product says so. If you are under the age of majority where you live, a parent or guardian must accept our terms for you. We do not knowingly collect personal information from children under 13. If you believe a child has given us information, contact us and we will delete it.

Data is encrypted in transit and at rest, and only staff who need it to run the services can reach it. No service can promise perfect security, and we cannot guarantee it. Tell us promptly if you believe your account has been accessed without your permission.

We may update this policy from time to time. The effective date above changes when we do, and where a change materially affects how we use your information we will make reasonable efforts to tell you before it takes effect.

Questions about this policy, or a request about your data, go to our privacy officer:

GreenMind Media Inc.
greenmindmediagroup@gmail.com