Privacy Policy

1. Who is responsible

CutEsy Holdings operates Smash Dash and is responsible for the processing described in this policy. Privacy and data requests can be sent to game-play@smashdash.io.

2. Information we process

Account and identity information

• A server-issued player name, player ID, friend/referral code, account-creation date, and account status.
• An app or device identifier used to create and restore a device account, plus authentication session tokens.
• If you choose Sign in with Apple or Google, the provider, the provider’s stable account identifier, and an email address when the provider supplies one.

Gameplay, profile, and social information

• Owned and equipped items, virtual currency, quests, rewards, cosmetics, season progress, ranks, win/loss records, kill streaks, and other gameplay statistics.
• Matchmaking and match records, including opponents, results, timestamps, duration, commands, and events needed to operate or replay a battle.
• Friends, requests, challenges, clans, clan roles and preset clan-chat messages, blocks, and player reports.
• Player-selected profile elements such as avatars, banners, army colourways, clan names, clan tags, and clan mottos.

Purchases and economy records

• Store platform, product, transaction or order identifier, purchase token or signed receipt data, granted items or currency, and refund or chargeback state.
• Apple and Google process your payment. We do not receive or store your full payment-card details.

Replay, export, network, and diagnostic information

• Battle input logs and match metadata used to provide in-game replays and player battle history, create player-requested video exports, investigate reported or suspected cheating, preserve fair play, diagnose service faults, and balance gameplay.
• Connection and service data such as IP address, request time, protocol version, connection quality, error details, and security events processed by us or our infrastructure providers.
• MP4 battle videos are rendered on your device. We do not receive a video merely because you export or share it through another app; the service you choose to share it with applies its own privacy terms.

Support and privacy requests

If you contact us, we process your email address, message, player identifier, and any diagnostic material you voluntarily provide so we can answer and verify the request.

3. Where information comes from

Information comes from your game client and actions, Apple or Google when you use their sign-in or store services, other players when they send a friend request or report, and our hosting and security providers when they operate the online service.

4. Why we use it

• Provide accounts, authentication, cross-device restore, matchmaking, battles, replays, profiles, social systems, leaderboards, clans, rewards, and customer support.
• Verify purchases, deliver paid content, process refunds, maintain the virtual economy, and prevent fraud or duplicate grants.
• Keep the game fair and safe, investigate player reports or suspected cheating through authorised administrator review of relevant battle playback, enforce rules, secure accounts, and detect abuse or service attacks.
• Diagnose performance and network faults, maintain availability, investigate service faults, and balance gameplay using aggregate or match-level service records.
• Comply with legal, tax, accounting, store-platform, and regulatory duties, and establish or defend legal claims.

Where applicable law requires a legal basis, we rely on performance of our agreement with you, our legitimate interests in operating and securing the game, compliance with legal obligations, and consent where we specifically ask for it. You may withdraw consent at any time, without affecting earlier lawful processing.

5. When information is shared

We disclose only what is reasonably necessary to:

• Service providers: infrastructure, delivery, security, storage, backup, and hosting providers, including Cloudflare, Fly.io, and Tigris Data.
• Platform providers: Apple and Google for optional sign-in, purchase verification, refunds, fraud prevention, and app-store services.
• Other players: your player name, player ID or friend code when you share it, avatar, public statistics, online status, account type or sign-in provider, cosmetics, clan information, and match results are visible where needed for multiplayer and social features. Email, device identifiers, session tokens, and purchase credentials are not public profile fields.
• Legal and safety recipients: authorities, courts, advisers, or affected parties when reasonably necessary to comply with law, protect players, investigate abuse, or defend rights.
• Business changes: a buyer, investor, or successor in connection with a merger, financing, reorganisation, or sale, subject to appropriate confidentiality and notice where required.

Access to stored battle playback is restricted to authorised personnel who need it for support, fair-play, security, or enforcement review.

We do not sell personal data. We do not share it for cross-context behavioural advertising.

6. International processing

Smash Dash is an online game. Information may be processed in the United States, Australia, the European Economic Area, and other locations where we or our providers operate. Where required, we use contractual safeguards or another legally recognised transfer mechanism.

7. How long information is kept

• Account, progression, social, and match-history records are generally kept while your account remains active and as needed to provide the service.
• Ordinary replay files rotate after approximately 30 days or earlier if storage limits are reached. A replay connected to a player report, suspected cheating, security incident, dispute, or enforcement action may be retained longer while the matter and any appeal are reviewed, then deleted or de-identified when no longer needed.
• Session tokens expire. Short-cycle service backups currently age out over approximately seven days, although deletion from a live system may take time to flow through an existing backup.
• Purchase, refund, anti-fraud, security, tax, and accounting records may be retained for the period required by law or reasonably needed to resolve disputes and protect the service.
• Support and privacy-request records are retained only as long as needed to complete the request and demonstrate compliance.

We may retain aggregated or de-identified information that can no longer reasonably identify you.

8. Your choices and rights

Depending on where you live, you may request access, correction, deletion, restriction, objection, portability, or withdrawal of consent, and may complain to your local data-protection authority. We may need to verify that you control the account before acting.

To delete a Smash Dash account and associated data, follow the instructions on our account-deletion page. You can also contact game-play@smashdash.io for another privacy request.

9. Children’s privacy

We do not knowingly use a child’s personal information in a way that requires parental consent without obtaining that consent. If you believe a child has provided personal information without required authorisation, contact us so we can investigate and delete it where appropriate.

10. Security

We use technical and organisational safeguards designed to protect information, including encrypted network transport, access controls, secret-gated service links, limited administrative access, backups, and monitoring. No online service can guarantee absolute security.

11. Changes to this policy

We may update this policy as Smash Dash or the law changes. We will publish the revised date here and provide additional notice in the game or through the app store when a change is material.