Privacy Policy

Who is responsible?

Chummer Kit and this website are provided under the brand Chummer.Dev by OneShot Studio Łukasz Skrzypiński, a sole trader registered in Poland's Central Registration and Information on Business (CEIDG).

The data controller for personal data processed for this website, app-related activities and support correspondence is Łukasz Skrzypiński, conducting business under the registered name OneShot Studio Łukasz Skrzypiński.

Business address: ul. Ossendowskiego 7, 93-228 Łódź, Poland
Tax identification number (NIP): 6692438648
Business registry number (REGON): 101665307

Privacy contact: privacy@chummer.dev
App support: support@chummer.dev

This policy covers the Chummer Kit Android app and the Chummer.Dev website at chummer.dev and www.chummer.dev. Google Play, Android backup providers and external websites also process data under their own policies.

Your game stays on your device.

Chummer Kit’s gameplay features work offline and do not require an account. The app stores dice pools, roll results and history, character profiles, selected spells and skills, preparations, spirits, sprites, related game values and interface preferences in private app storage on your device.

We do not receive your character data or roll history on a developer-operated server. We do not sell your app data, use it for advertising or profiling, or include advertising, analytics or third-party crash-reporting services that send gameplay data to us.

The app does not request your location, contacts, camera, microphone or SMS messages. Local saving uses private app storage. If you explicitly export or import a profile, you choose the file or destination through the system file picker; the selected destination’s privacy and backup settings apply.

Optional purchases & Google Play

All gameplay features are free. Cosmetic dice styles, cosmetic themes and voluntary support purchases are optional and are handled through Google Play Billing. Support purchases do not unlock gameplay features.

Google processes purchase and payment information under its own terms and privacy policy. We do not receive your full payment card details. The app processes purchase-related identifiers, product IDs, purchase status and purchase tokens as necessary to validate purchases, grant or restore cosmetic entitlements, prevent duplicate processing and handle pending purchases or refunds. Purchase and entitlement records may be stored locally separately from game profiles; Google retains its own transaction records.

Purchase-related processing is necessary to perform the purchase contract (Article 6(1)(b) GDPR). Fraud prevention and reliable entitlement handling may rely on our legitimate interests (Article 6(1)(f)); records that we must retain under law are processed under Article 6(1)(c).

Clearing app data does not cancel, refund or delete a Google Play transaction. For order history, refunds or Google account data, use Google Play’s account and support tools. See the Google Privacy Policy and Google Play refund information.

Backups, retention & deletion

Game data remains on your device until you reset it, clear app storage or uninstall the app. The ROLL recent-history view is limited to 50 entries; older results are replaced as you roll. The separate persistent activity LOG keeps recorded rolls and rerolls until you clear the relevant profile or delete app data.

To clear the current profile’s game data, use SETTINGS → PROFILE → CLEAR CURRENT PROFILE → CONFIRM, which leaves other profiles intact. To remove all local app data, clear Chummer Kit’s storage in Android settings or uninstall the app. Android’s clear-storage action removes all local app records, including cached purchase information.

Android system backups are enabled. Depending on your device and settings, Google or your device manufacturer may back up app data or transfer it to another device. We do not receive or control those backup copies. Manage and delete them with your backup provider; restoring a backup may restore saved data. Local purchase caches can be recreated from Google Play when purchases are restored.

The app has no user account to delete. App-data deletion does not delete correspondence you have sent us or records held independently by Google Play. Purchase records held by us, if any, are kept only as needed for entitlement handling, disputes or mandatory legal retention; contact us about records relevant to your request.

Visiting this website

This is a static website hosted and delivered by Cloudflare. Delivering and protecting it involves processing technical request data such as your IP address, requested URL, request time, browser information and security events. Cloudflare acts as a service provider for website delivery and security and may also process some information for its own purposes under its privacy policy.

Our purposes are to deliver the pages and prevent abuse, based on our legitimate interests in running a secure, reliable website (Article 6(1)(f) GDPR). We do not add advertising trackers, analytics scripts, embedded social feeds, remotely loaded fonts or tracking cookies. The site code does not use cookies, local storage or session storage. Cloudflare may use strictly necessary security cookies depending on the security features enabled.

We do not maintain a separate visitor database or export request logs for marketing. Cloudflare’s technical data retention depends on the hosting and security services enabled and its contractual terms. Contact us for information about logs relevant to a specific request. See Cloudflare’s Privacy Policy.

Email & support

If you email us, we receive your email address, message and attachments you choose to provide. We use them to reply and resolve your request. Do not send payment card details or unnecessary sensitive data.

Our email provider processes correspondence on our behalf. Responding to ordinary support and privacy inquiries relies on our legitimate interests (Article 6(1)(f) GDPR); pre-contractual or purchase support may rely on Article 6(1)(b), and statutory requests on Article 6(1)(c).

We retain correspondence only as long as needed to resolve your request and meet applicable legal obligations. After closure, messages are reviewed and deleted when no longer needed, unless an ongoing dispute or legal obligation requires retention. Contact us for the retention period applicable to your request.

Providing contact information is voluntary, but we need a reply address and sufficient details to respond. We do not make decisions with legal or similarly significant effects about you solely by automated processing.

External links & affiliate links

Following a Google Play, rulebook store or other external link takes you to a separate service. That service receives the information your browser normally sends and may use its own cookies or tracking under its own policy.

The app includes affiliate links to the Catalyst Game Labs store. Those links can contain an affiliate identifier, and we may receive a commission from qualifying purchases. Referral attribution and purchases are handled by the store and its service providers. We do not receive your full payment card details through those links. This website does not embed the store’s tracking scripts.

Recipients, transfers & security

Relevant recipients include Cloudflare for website delivery and security, our email service provider for correspondence, and Google for Google Play purchases and platform services. Authorities or professional advisers may receive information where legally required or necessary to establish, exercise or defend legal claims.

Providers may process data outside your country, including outside the EEA. Where we transfer personal data to a processor outside the EEA, the transfer must rely on an applicable adequacy decision or appropriate safeguards such as Standard Contractual Clauses. Contact privacy@chummer.dev for information about safeguards applicable to your data.

The website uses HTTPS when deployed. Android protects private app storage through its access controls. Access to correspondence is limited to what is needed for support. No storage or transmission method is completely secure; device and backup security also depend on your settings and providers.

Your privacy rights

Where GDPR or equivalent law applies, you may have rights to access, correction, deletion, restriction and portability of personal data. You may object to processing based on legitimate interests. Where processing relies on consent, you may withdraw that consent without affecting earlier lawful processing. These rights depend on the circumstances and applicable law.

Send requests to privacy@chummer.dev. We may ask for proportionate information to verify your identity. We normally respond within one month under GDPR; where a lawful extension is necessary, we will explain it. We cannot retrieve locally stored gameplay data from your device or delete copies controlled independently by a backup or app-store provider.

You may complain to your local data-protection authority. In Poland, this is the President of the Personal Data Protection Office (UODO). You can also contact the authority in the country where you live, work or believe an infringement occurred.

Children & policy updates

The app does not ask children to provide personal information for gameplay. If a child sends personal information in a support message, a parent or guardian can contact us to request review and deletion where appropriate. Purchases are subject to Google Play’s account, age and parental approval settings.

We update this policy when data practices or applicable requirements change. The date at the top shows the latest revision. Where law requires additional notice or consent, we will provide it before the relevant new processing.