Privacy Policy

DASH

DASH has no account and no sign-in, and never asks for your email, phone number, contacts, photos or location. It has a world leaderboard, so that players can see how their runs compare. To make that work, the game sends your run results, a replay of each run so the score can be checked, a display name, and a randomly generated player number to our leaderboard service. It also sends an automatic crash report if it crashes, and counts anonymous play statistics. That is the whole list; the rest of this page explains each item.

This policy applies to DASH on iPhone and Android, from version 1.0.0.

What stays on your device

Most of what the game remembers never leaves the phone. It is kept in the app's own private storage, and we cannot see it:

• Your career stats, personal bests and the achievements you have unlocked
• Every run in Panels, Climb and Legacy: only the main mode, Dash, has a world leaderboard, so runs in the other modes are kept on the phone and never sent
• Your settings: the look, the sound pack (and your own Custom set), sound, haptics and reduce motion
• A run in progress, so leaving the app does not cost you the run
• A note of when the game last asked the store to show its rating card
• The most recent copy of the word list described below

Deleting the app deletes all of this. Your phone's own backup (an iCloud, Google or computer backup) may include the app's files along with everything else it backs up; that is between your device and your Apple or Google account, and we never see it.

The world leaderboard

The leaderboard runs on Google Firebase (Cloud Firestore). When you finish a run in Dash (the main mode; the other modes have no world leaderboard), the game submits:

• The run's result: the score, the enemies you cut, your best chain, the waves you reached, how many dashes you made and how long the run lasted.
• A replay of the run: the run's random seed and the flicks you made, with their timings. The replay is how a score can be checked rather than taken on trust. It describes what happened inside the game and nothing outside it: no location, no device details, nothing typed.
• A display name. The game makes one up for you, and you can change it in Settings. It is free text, up to 16 characters, so it says something about you only if you put it there. Other players see it, so it is checked against a word filter when you set it, and other players can report it.
• A player number: a random identifier created the first time you open the game, using Firebase Anonymous Authentication. It keeps your runs together on the board. It is not linked to your real identity, your email or any account, because there is no account. You can see and copy it in Settings.

If you change your display name, the game also keeps one small record on the server holding that name, so your runs on the board show it.

Other players can see your display name and your runs' scores. Each run entry is stamped with an expiry when it is posted and is deleted 90 days later. All of this is processed by Google as our service provider, under Firebase's data processing terms.

Taking part is on by default. You can turn it off with the Leaderboard switch in Settings. While it is off, the game submits no runs and no display name. It still signs in to Firebase anonymously when it starts, because that is where the player number comes from, but it sends nothing to the board. Crash reports and the anonymous play statistics below are separate from this switch.

Reporting a display name

If you report another player's name from the leaderboard, the report contains their player number, the name as you saw it, the time, and your own player number (so that misuse of the report button can be spotted). No player can read reports. They are used only for moderation.

Crash reports (Firebase Crashlytics)

The game uses Firebase Crashlytics, a Google service, so that crashes can be found and fixed. When the game crashes, Crashlytics sends:

• The stack trace: the line of code the crash happened on
• Your device model, operating system version and the app version
• The device's state at the moment of the crash: free memory and storage, orientation, and whether the device was jailbroken or rooted
• A randomly generated Crashlytics installation identifier. It is not linked to you and resets if you reinstall.
• A short log of the last game events before the crash, so the crash can be traced to what the game was doing. It describes gameplay only and never includes your name or anything you typed.

Crashlytics keeps these reports for 90 days.

Anonymous play statistics (Google Analytics for Firebase)

The game counts anonymous play events: that the app was opened, that a run started, which mode it was in (Dash, Panels, Climb or Legacy), how a run ended (its score, the enemies cut, the best chain, the waves reached, how long it lasted and whether it was a personal best), and whether a finished run placed on the world leaderboard. It also records the standard session information that service collects. These describe the game being played, not the person playing it. We use them for one thing: to see how the game is actually played so it can be improved.

Advertising-identifier collection and ad personalisation are switched off in the app's configuration, and the events never include your display name or player number. Google derives a general location (country, sometimes region) from a masked IP address so that the counts can be broken down by place; that approximate figure is all we see. The game never uses your device's location services and never asks for location permission. There is no separate in-game switch for these statistics in this version.

The word list

So that player names can be checked for offensive words, DASH downloads a public list of words from our website (bendigogames.com/moderation/name-filter.json) when it starts. The request sends nothing from the game: no name, no score, no identifier. As with any web page, the website's host, Cloudflare, sees the connection's IP address in order to answer it. We do not use it to identify you.

The connection itself

Whenever the game talks to Firebase (submitting a run, fetching the board, sending a crash report), Google's servers see your device's IP address, as any server sees the address of anything that connects to it. We never see or store it. Google processes it as our service provider, on servers that may be outside your country, under the data processing terms linked above, which include the EU's standard contractual clauses for international transfers.

Links, sharing and ratings

The Privacy, Support and Website links in Settings open in your phone's browser, which has its own privacy policy. The share button hands a short line of text about your run to your phone's share sheet; the game does not see where you send it. After a good run (a chain of ten) the game may ask the store to show its standard rating card; the store decides whether it appears, and the game never sees whether or how you rated it.

What we do not do

• No account, no email, no phone number, no contacts, no photos, no files
• No camera or microphone
• No location services, precise or approximate
• No advertising, no advertising identifier and no cross-app tracking, so the game never shows a tracking prompt
• No in-app purchases
• No notifications
• No selling or sharing of data with anyone other than Google, acting as our service provider for the purposes above

Summary

• Display name: sent to the leaderboard (unless the Leaderboard switch is off), linked to your player number
• Dash run results and run replays: sent to the leaderboard (unless the switch is off), linked to your player number, deleted after 90 days
• Player number (random): sent; pseudonymous
• Crash diagnostics and recent game events: sent to Crashlytics; not linked to you
• Anonymous play statistics: sent to Analytics; not linked to you
• Career stats, achievements, settings, and runs in Panels, Climb and Legacy: on your device only
• Email, phone, contacts, photos, location: never collected

Children

DASH is not directed at children under 13, and we do not knowingly collect personal information from them. The display name is the only free-text field. If you believe a child has put personal information in it, email us with the player number shown in Settings and we will remove it.

Your choices and your rights

• Stop sending leaderboard data: turn off Leaderboard in Settings.
• Change your display name: Settings, Player name.
• Delete what the server holds: email support@bendigogames.com with the player number shown in Settings, and we will delete every run entry and record under it. We cannot find you by name, and we do not need to.
• Delete what the device holds: delete the app.

Data-protection laws such as the GDPR and the CCPA give you rights to access, correct and delete personal data about you. The address above is how to use them.

Changes to this policy

If a version of DASH changes what it collects, this page is updated, with a new date, before that version is released.

Contact

DASH is made by Bendigo Games. Questions about this policy or about privacy in the game: support@bendigogames.com.

Last updated: 11 October 2026