Privacy policy

In short

• You can use the game without any account: your data then stays in your browser only and is never sent anywhere.
• Data leaves your device only if you choose to play with others remotely, to sign in (Google account or email address), or to take part in a ranked challenge.
• The Daily and Weekly Challenge standings are public: a nickname you choose and a score, nothing else.
• No advertising, no advertising cookies and no analytics tool are used. Until you tap “Sign in”, nothing is sent to Google — not even the fonts, which are hosted here.
• You can delete your account yourself, from the game's Settings: see Delete my account.

Data controller

The data controller is the site's publisher (see the legal notice). For any question about your data, or to exercise your rights: contact@theyamsapp.com.

What data, and why

Local mode (no account). Your preferences (theme, language, settings) and the games played on a single device are stored in your browser's local storage (localStorage). This data never leaves your device and is not sent to us.

Account (optional). If you sign in, the following is processed:

• if you sign in with Google, the information your Google account passes on: first name, last name and email address — the site keeps only the display name and the address;
• if you sign in by email, your email address alone: it is used to send you the sign-in link, then to recognise you from one visit and one device to the next. No password is created or stored;
• your games and playing statistics (scores, history, the player names you typed in);
• technical identifiers required for authentication (session tokens).

Technical device identifier. As soon as you play with others remotely, even without an account, an anonymous identifier is created and kept on your device. It holds no information about you: it only exists so that your own column is handed back to you if you leave a game and rejoin it. It disappears when you clear the site's data in your browser.

Purposes: making multiplayer possible, saving and syncing your statistics across your devices, and identifying you to the other players in a game. Legal basis: your consent and the performance of the service you request by signing in.

Playing together: online games and challenges between friends

When you create an online game or a challenge between friends, the score sheet stops being local: it is stored with Firebase so that every participant sees it live. No account is required for this mode.

What is stored. The player names you type in (often first names), the scores, the state of the game, and — for a challenge — the dice rolled.

Who can read it. Anyone who knows the game code, that is, the people you sent the link or QR code to. That six-character code is drawn at random by your browser: it cannot be guessed, and it acts as a password. Do not post it publicly on a social network or a forum unless you are happy for strangers to read the game.

Purpose: making remote play work. Legal basis: the performance of the service you request by creating or joining the game. Retention: see below.

The Daily Challenge and its public standings

The Daily Challenge gives every player the same grid each day and shows standings visible to the other participants. Submitting your sheet is a choice: nothing is published until you ask for it.

What is published. Only:

• a nickname you choose;
• your score for the day and your playing time;
• a mark showing whether you are signed in with an account (no further detail).

You are asked for the nickname before you start your game, and it is remembered from one day to the next: it is offered pre-filled next time, and stays editable. If you are signed in with Google, your account's first name is offered by default; if you signed in by email, a neutral nickname is offered — your email address is never offered nor published. You can replace it with anything you like before confirming. Neither your email address, nor your photo, nor your surname is ever published.

What stays private. The detail of your game — the sheet, the dice and your decisions — cannot be read by any other player. It can, however, be read by the person who administers the site, as for the Weekly Challenge below: they hold the database. That access is used to check a disputed score and to erase an entry on request.

Who has access. A day's standings can be viewed by the players who submitted their own sheet that day, then by everyone once the day is over.

Purpose: letting players on the same grid compare their scores. Legal basis: your consent, given when you submit and withdrawable at any time (see “Your rights”).

This mode requires an account — Google account or email address, your choice. The standings are worldwide, and an anonymous identity that can be renewed with one tap would drain them of all meaning. The account also keeps your streak and your progress across devices. The rest of the site still plays with no account at all.

The Weekly Challenge and its two standings

The Weekly Challenge runs from Monday to Sunday: everyone rolls their own dice, gets twenty games, and appears in two standings visible to the other participants — best sheet and best average.

What is published. Only:

• the same nickname as in the Daily Challenge, which you choose;
• the score of each of your games that week — your best score, your average and your number of sheets, which appear in the standings, are computed from them.

You are asked for the nickname before your first game, and it is fixed for the week as soon as you first submit. Neither your email address, nor your photo, nor your surname is ever published.

What stays private — with one reservation. How your games unfolded — every roll and every decision — cannot be read by any other player. It can, however, be read by the person who administers the site, and that is necessary: because the dice are rolled on your device, reading those logs is what makes it possible to check that a declared score matches the dice actually obtained, before medals are awarded. That access allows reading and deletion only: nobody can alter a submitted game.

Who has access. A week's standings can be viewed by the players who have a line in them, then by everyone once the week is over. The top three in each standing carry a medal next to their nickname during the following week, in both modes.

Purpose: letting players in the same week compare their scores, and checking that results are consistent. Legal basis: your consent, given when you enter the standings and withdrawable at any time (see “Your rights”).

This mode also requires an account (Google or email address), for the same reason as the Daily Challenge: worldwide standings mean nothing if an identity can be renewed with one tap.

The Android app

Yam's App is also distributed as an Android app on Google Play. That app displays this very site in a window without an address bar: it collects nothing more, and everything written on this page applies to it identically.

The only addition is what Google Play processes on its own side when installing and updating (store Google account, device, installation statistics). Those operations are Google's, under Google's own privacy policy.

Deleting your account works in the app exactly as on the site: see Delete my account.

Data hosting and transfers outside the EU

Online data is stored through Google Firebase (Realtime Database), in the europe-west1 region (European Union).

Authentication and some technical services are provided by Google (Google Ireland Limited / Google LLC). As a result, data may be processed outside the European Union, in particular in the United States. These transfers are covered by the safeguards provided for by the GDPR (standard contractual clauses and Google's certification under the EU–US Data Privacy Framework).

The message containing your sign-in link is composed by Firebase, then sent by OVH's mail server (France) from the address contact@theyamsapp.com. Your email address therefore passes through those two services, and no other.

The site itself is hosted by OVH (France) — see the legal notice. The server's technical logs (including the IP address) may be retained by the host for security purposes.

Note: the fonts are hosted on this site (not loaded from Google's servers), so displaying them sends no data to Google. Likewise, the “Sign in with Google” button only loads Google's code at the moment you tap it: a visitor who never signs in sends nothing to Google.

Cookies and local storage

This site sets no cookies of its own. It uses the browser's local storage (localStorage), strictly necessary for it to work, which requires no prior consent. It holds:

• your settings: theme, language, text size, dice sound and vibration, robot level;
• your games: the game in progress, your history and your local statistics;
• your sign-in, if you sign in: session tokens, and for email sign-in the address you typed, kept until you open the link you received, then erased as soon as you are signed in or when you sign out;
• a copy of standings already closed, kept so they can be reopened offline without downloading them again. That copy is capped, and the oldest days are dropped automatically;
• a copy of the site's pages, made by the service worker, so the game works offline.

If you sign in, Google sets the cookies needed for authentication on its own side. They belong to the service you request by tapping, and serve no advertising purpose.

No advertising or analytics cookie is set. You can erase everything at any time by clearing the site's data in your browser.

Retention period

• Local data: kept until you erase it (by clearing the site's data in your browser).
• Your account data: kept as long as your account exists. It is gone when you delete the account, and you can do that yourself (see Delete my account).
• Online games and challenges between friends: a game becomes unreadable to everyone 14 days after a participant last visited (15 days for a challenge between friends). Permanent deletion from the database happens during periodic clean-ups, and can be requested at any time.
• Daily Challenge: a day's standings and sheets are kept for 60 days, then erased. Your personal progress history stays on your device and — if you are signed in — in your account, until you delete it.
• Weekly Challenge: how the games unfolded is kept for 8 weeks, then erased — except for medal winners, kept so a disputed title can be reviewed. The standings themselves (nickname and score of each game) are kept with no time limit: they are the site's roll of honour. They can still be removed on request.

Deleting your account

You can delete your account yourself, from the game: Settings → Account → Delete my account. This erases your sign-in account and everything it holds — saved games, statistics, challenge history.

The lines already published in the standings (nickname and score) are not removed by that button: they are no longer attached to any account, but they stay on display. To have them removed, write to us — see Delete my account, which sets out how, and what happens to each piece of data.

Your rights

Under the GDPR you have rights of access, rectification, erasure, restriction, objection and portability, as well as the right to withdraw your consent at any time.

Removing an entry from the standings. You can ask at any time for your nickname and score to be removed from a Daily or Weekly Challenge standing: give the date of the grid (or the week) and the nickname used, and the entry is deleted.

To exercise these rights, write to contact@theyamsapp.com. You will get an answer within one month at most. You may also lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr).

Security

The site is served over HTTPS. Access to online data is governed by Firebase security rules, so that each person only reaches the data that concerns them or the games they take part in.

Children and teenagers

This is a family game, and it is played without an account, at any age.

Creating an account, however, assumes you are 15 or older. In France, below that age a parent's agreement is required alongside the child's. If you are under 15, ask a parent before signing in or submitting a sheet to a public standing.

No data is collected beyond what the game needs, and no published nickname is accompanied by anything that could identify a child. If you are the parent of a child who uses the site and want their data deleted, write to contact@theyamsapp.com: it is done, no questions asked.

Changes

This policy may be updated, in particular as the site evolves. The date of the last update is shown at the top of this page.