dawgin

Who we are

dawgin, at www.dawgin.com, is run by Degriz d.o.o., Gorica pri Šmartnem 45a, 3000 Celje, Slovenia (registration number 3595935000, VAT ID SI67287743). Degriz d.o.o. is the controller of the personal data described here. Our servers are in Slovenia.

Questions about your data, and every request below, go to [email protected]. We have not appointed a data protection officer, because the law does not require one of a company of this size that monitors nobody at scale; the address above answers instead.

What we keep, and why

Your email address, and your password stored as a one-way hash: to create your account, sign you in, and send you sign-in links and verification mail. We need these to provide the game.
A normalised form of your email address, to spot one person running several accounts. This is fair play for everyone else (legitimate interest).
If you sign in with Google: the account identifier Google gives us and your email address. We ask Google for nothing else.
When an account is created, we are notified by email that it exists, with its account number and how it was created but not your email address, so we can run the service (legitimate interest).
Your manager name, picture, the sex you choose for your picture, and country. Other players see them, because they are part of the game. Your manager profile and career page, which collects your record in every world you play in, are public by default. You can make them private in your profile. Public pages are cached for a few minutes, so a change can take that long to show for visitors who are not signed in.
Your date of birth, if you choose to give it. It is optional, and it is used only for a birthday greeting and for anonymous statistics by age; it is never shown to anyone, and nothing in the game reads it. If it gives an age under 15, the Slovenian age of consent for online services, we do not keep it. You can delete it at any time by clearing the field in your settings, and it goes when your account is deleted. It rests on your consent.
Security data: the IP address you registered from; keyed one-way hashes of IP addresses, of your browser and of a device fingerprint built from your browser and language; and when you last signed in. While you are signed in, your session also records your IP address and browser. We use this to keep accounts safe and to detect multiple accounts, collusion and abuse (legitimate interest).
What you do in a world: results, transfers, contracts and your career record. After you leave, the other players' interest in an accurate shared history is why it stays (legitimate interest).
The private messages you write and the reports you file.
Who invited you, and whom you invited, for invite rewards and to detect abuse (legitimate interest).
The counters we use to limit how many accounts one network can create in an hour: they hold a coded form of the network address, and are kept for 24 hours (legitimate interest, keeping the service secure).
Your settings, and, if you turn on notifications, the push address your browser gives us. Notifications rest on your consent, which you withdraw by turning them off.
If you ask for your morning report by email in a world, we send it to your email address on the days it is written. This rests on your consent: it is off until you turn it on, and every one of those emails has a link that stops them without signing in, as does Settings.

Who else receives it

NEOSERV, our hosting provider in Slovenia, runs the servers and the database.
NEOSERV's mail server sends your sign-in links and verification mail, and your morning report if you ask for it by email.
Cloudflare, Inc. sits in front of www.dawgin.com. Every page request passes through it, so it sees your IP address and the pages you ask for. It uses this to protect the site from attacks and to serve pages faster (legitimate interest, keeping the service secure). It acts for us under its data processing addendum, and may process data outside the European Economic Area under the EU standard contractual clauses or the EU-US Data Privacy Framework.
Google, only if you choose to sign in with Google.
Your browser's push service, for example Google, Mozilla or Apple, only if you turn on notifications. It receives an empty signal telling your browser to fetch the notice from us, and never the notice itself. Google and the push services may process data outside the European Economic Area under their own safeguards.
Other players see what the game shows: your manager name, your club, results and your career record. A private message is seen by the people it is sent to.
We use no analytics, no advertising and no error-tracking services, and we never sell data.

How long we keep it

Your account, reports, invites and settings: while your account exists. Your account stays until you ask us to delete it. We do not delete accounts for being inactive. If this changes we will tell you first. When it is erased, what it holds is deleted or anonymised, as the page linked below sets out.
The address you signed up from: 90 days. The coded forms of your addresses, browser and device, and the network your address belongs to, which we use to spot duplicate accounts: 180 days after we last saw them.
Private messages: 12 months. After that the text is cleared, and only who wrote to whom, and when, is kept.
Sign-in links: 30 days after they expire. Sessions: 30 days after you last used them.
Server logs: 14 days. Database backups: 14 days. A copy of your data prepared for you: 30 days.
Results, transfers and the audit trail that protects every player: for the life of the world, without your name once your account is erased.

Your rights

You may ask for a copy of your data, and have it corrected or erased. You may restrict or object to how we use it, and withdraw consent where we rely on it. You can download your data and delete your account yourself in Settings, or write to [email protected] and we answer within one month.

If a breach of security puts your data at risk, we tell the Information Commissioner within 72 hours, and we tell you without delay if the risk to you is high.

You may also complain to the Information Commissioner of the Republic of Slovenia (Informacijski pooblaščenec, Dunajska cesta 22, 1000 Ljubljana, www.ip-rs.si).

Age

dawgin is for people aged 15 and over. When you register you confirm that you are at least 15. Giving your date of birth is optional, and we do not use it to check your age.

Cookies, storage and fonts

When you open a page that has a form, such as sign-in or registration, or when you are signed in, we set a session cookie and a form-protection cookie. We need both for the site to work and for forms to be safe, including for visitors who are not signed in. They last up to 30 days. A short-lived third cookie binds an email sign-in link to the browser that asked for it. Pages without a form, such as this one, set none of them. All of these are strictly necessary, so we do not ask you to accept them; there are no tracking or advertising cookies.

Your browser also remembers, in its own storage, that you dismissed the install prompt, which one-time notices you have already seen, and where you were on a page when it reloaded. None of it identifies you and none of it leaves your browser.

Fonts, scripts and pictures are served from our own servers, and nothing on a page loads from another company. The one company between you and our servers is Cloudflare, described under who else receives your data. If it enables bot protection it may set its own security cookie, which we treat as strictly necessary too.

Pictures of people

The faces of players, staff and club presidents, the club crests and the pictures on achievement badges are generated by AI image software on our own computers. They show no real person, and no photograph of a real person went into them. They are therefore nobody's personal data.

Changes

If this policy changes we publish the new version here with its date, and tell signed-in managers about any important change.

Privacy policy