In short
- No cookies and no analytics or tracking tools.
- No resources from external services: fonts, images and code all come from vrdesignlab.com.
- Without an account, the apps' saves and preferences stay on your device and nothing reaches the server.
- The V.R Design Lab account is optional and anonymous: a name is enough, no email, phone number or password. It is used to play online and to find your progress on another device.
- SubLens TGs name tournament players using what is public: the official broadcast and the tournament results. Players in age divisions appear only with their first name and the initial of their surname.
- No advertising and no data passed on to third parties.
Who the controller is
The data controller is Vito Ristallo, who signs his projects as V.R Design Lab. For any question about your data: info.vrdesignlab@gmail.com.
Server logs
Like every website, the server records the requests it receives: IP address, date and time, requested address, outcome, referring page and browser type. They are needed to run the site and to defend it from abuse, on the basis of legitimate interest (Art. 6(1)(f) GDPR). They are not used to profile anyone or combined with other data, and they are deleted automatically after 30 days. The online game service only notes the codes of matches and accounts (match started or finished, account deleted), never IP addresses or names, for the same period.
Data on your device
The apps save what they need to work in the browser's local storage, or in the installed app's storage: for Chancery, saved games, match history, statistics, progress, settings and blocked players; for MatchUp Pro, your team, your opponents and the settings, which can also be erased from the app (Settings → Reset); for RESONA, progress (stars, unlocked levels, Arcade record, seals, achievements, cosmetics, weekly commissions) and settings (audio, vibration, colour-blind colours, hints, language). Without an account this data never leaves the device. If you install an app from the site, the browser caches its code (page, scripts, fonts, images) so it opens without a connection: no personal data. You can erase all of this whenever you like from the browser settings, but your saves go with it; Safari on iPhone erases it by itself after 7 days without visits, unless the site has been added to the Home Screen.
If you have the account, your device also holds its pass: the account code, the name, the device key and, if the account was created there, the recovery code. In the RESONA Android app the pass is kept in the system's protected storage (Android Keystore). The pass is a secret: whoever copies it signs in as you. Keep the recovery code somewhere else: it lets you get the account back, and your save with it, on another device or after the browser data has been erased.
The V.R Design Lab account
It is a single account for the Lab apps that use it; today Chancery, for PVP (online matches) and for the save, and RESONA, for saving progress. You create it from either app by choosing a name, and it works in both. To create it you must be at least 14 years old; if you are younger, you need a parent's permission.
Account, matches, rating and save are processed to give you the service you ask for (Art. 6(1)(b) GDPR); the limits against abuse and the handling of reports on the basis of legitimate interest (point f).
What the server keeps, if you have the account
- The account: a random code that identifies it, the name you chose, and the dates of creation, last sign-in and last name change. They are used to recognise you, to show your name to your opponent and to limit name changes. They are kept for as long as the account exists; the account deletes itself after 2 years without sign-ins.
- The access keys: only the fingerprints (SHA-256) of each device's key, 5 at most, and of the recovery code; never the keys or the code themselves. They let you back in. Beyond 5 devices the oldest one is dropped.
- The Chancery save: the Arcade level reached and the app settings (language, nation, tilted board, rotation, capture preview, tutorial seen), with the time of the last change, so you find them on another device. It is kept for as long as the account exists.
- The RESONA save: stars for each level, unlocked level, Arcade record, Hz, remaining hints, seals and their charges, claimed achievements, cosmetics, weekly commissions, with the time of the last change, so you find them on another device. RESONA's settings stay on the device. The app sends the save at start-up and at the end of a level or game, never continuously. It is kept for as long as the account exists.
- The last 10 Chancery results, in any mode: date, mode, nations, outcome and Arcade level; for online matches also the clock, the opponent's name and code, and the rating change. The oldest one drops out when a new one arrives; if you delete a result from the app's history, it disappears from the server too.
- The last match: its moves, or its positions if it is an offline match, so you can replay and verify it. It is kept until another match ends, or until you delete it from the history.
- The online match in progress: the two players with name, nation and boosters, the clock and the moves with the server time, to play it and to resume it if the server restarts. Once finished, it remains only as the last match of the two players.
- The ranked rating: Elo rating, matches, wins, losses, draws, current and best winning streak, to pair you with players at your level. It is kept for as long as the account exists.
- Name reports: who reported whom, in which match and when, in order to remove offensive names: after reports from 3 different people within 30 days the name becomes "Player" followed by a number. They are deleted after 30 days, or earlier if the name is removed or either account is deleted.
When you look for a match, the app also sends the list of players you have blocked, so the server does not pair you with them. Your IP address is used to limit abuse, such as accounts created in bulk or attempts on the recovery code: it stays only in the service's memory and is never written anywhere.
Who sees what
- During an online match your opponent sees your name, nation, boosters and, in ranked play, your rating at the start. After the match they find it in their history with your name and your account code.
- Only you can see your save. There are no public leaderboards and no profiles that others can look up.
- The controller can read the server's records in order to run the service.
Deleting the account
- From the Chancery app: Settings → V.R Design Lab account → Delete account.
- From the RESONA app: Settings → delete account, which opens the page below.
- From the website, whichever app you use, with the recovery code: vrdesignlab.com/account/elimina.
A match in progress is lost by resignation. Account, keys, rating, Chancery save, results, last match and reports made and received are deleted immediately, and the RESONA save within one hour; in your opponents' results the match remains without your name or your code. The server's backups are kept for 30 days: for that time the deleted data may still be there, then it disappears from the backups too. The data on your device stays: you erase it yourself from the browser or app settings.
Players in SubLens TGs
SubLens covers competitive game tournaments. The TGs name players as they appear in the official broadcast and in the tournament's public results: name, country, placement, results, deck and short remarks made on stream. The sources are listed at the bottom of each TG. Texts and translations are written by an artificial intelligence, starting from the commentary. The processing is based on the legitimate interest in reporting public events (Art. 6(1)(f) GDPR), and the TGs remain in the site's archive.
- Players in an age division (Junior, Senior and the like), or who are minors in any case, appear only with their first name and the initial of their surname, with no age and no family ties.
- No private life, even if mentioned on stream: work, family and relationships are left out, only the game counts.
- If you are named and want your name removed or shortened, write to info.vrdesignlab@gmail.com: the TG is corrected in every language, PDF sheets included.
MatchUp Pro
MatchUp Pro, in the browser and in the Android app, has no account and sends no data to any server: the calculations run on the device, where team, opponents and settings stay. No analytics, crash reporting or advertising tools. The Google Play button leads to the Play Store, an external site with its own privacy policy. The Android app is free and has no purchases.
RESONA
RESONA is played in the browser and in the Android app, distributed by Google Play. Without an account it sends no data to any server: progress and settings stay on the device and are erased from the browser settings, or by uninstalling the app or clearing its data from the Android settings. With the optional V.R Design Lab account, progress is also saved on the server, as described above. No analytics, crash reporting, advertising or purchases. If you share a seal, the app creates a temporary image on the device and hands it to the app you choose to send it with: from there, that app's policy applies.
While the Android app is in closed testing, to install it you join a Google group and opt in to the test on Google Play. The group and the test are run by Google, under its privacy policy; the controller sees the Gmail address of those who join and uses it only to manage the test, to give you the service you ask for (Art. 6(1)(b) GDPR). You can leave the group and the test whenever you like, and your address disappears from the list.
If you write to the Lab
If you write to info.vrdesignlab@gmail.com, your address and your message are used only to reply to you and are kept for as long as it takes to follow up your request. The mailbox is a Gmail account: the mail is held by Google, under its privacy policy.
Where the data is
The site, the account and the online game run on an IONOS virtual server, in a data centre in the European Union. All traffic between the apps, the site and the server travels encrypted over HTTPS (TLS). IONOS processes the data on behalf of the controller, as a processor, and the site's data does not leave the European Union. Emails, however, go through Gmail: Google may process them outside the European Union as well, with the safeguards required by the GDPR and described in its policy. To write the SubLens TGs the commentary goes through an artificial intelligence service provider, which may process it outside the European Union as well, with the safeguards required by the GDPR; the provider's name and information on the transfer safeguards are available from the controller on request.
Your rights
You can ask to access your data, correct it, erase it, restrict its processing, object, and receive it in a readable format (Arts. 15–21 GDPR), by writing to info.vrdesignlab@gmail.com. Much of this you can do yourself from the app: you change your name once a day, delete results from the history, delete the account. If you believe the processing breaches the GDPR you can lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali.
Changes
If the site or the apps change the way they handle data, this page is updated first, with the new date at the top.