Effective 8 October 2026 · Notice version 2026-10-08-v2
Who is responsible?
Games People Play A/S, Oslo Gamehub, Torggata 13, 0181 Oslo, Norway, is responsible for the optional gameplay analytics in Devil’s Due. Contact contact@gamespeopleplay.co about this notice or your data.
Your choice
Sharing gameplay analytics is optional. We collect it with your consent, after you choose Yes in the game. You can play and view available community statistics without sharing. Change your choice under Settings → Gameplay analytics at any time.
Your choice applies to your Steam account on this installation. Withdrawal stops collection and clears uploads waiting on that installation. It does not remove records already received by the server. Use Settings → Delete my analytics to request their deletion, or contact us. Disable sharing on other installations too, so they do not upload more data. Deleting data also switches off sharing on the installation making the request.
Settings → Export my analytics saves your retained records as a JSON file. Export and deletion verify ownership through Steam. Declining or withdrawing has no effect on access to the game. Withdrawal does not affect processing that took place with consent before you withdrew it.
What we collect
- A Steam authentication ticket and Steam account identifier to verify the participant. We convert the verified identifier to a game-specific pseudonymous identifier before storing gameplay records. These records remain personal data; they are not anonymous.
- Challenge starts, progress, attempts and outcomes; enemy encounters, hell layers, turns and damage.
- Cheat offers, choices and activations; relic offers, affordability, purchases and turns when relics trigger.
- Session start and checkpoint times, active playtime, repeat runs after wins or losses, return visits and the last recorded game area or outcome when a session ends.
- Game/balance version and random run, session and event identifiers, to interpret results and avoid duplicate counting.
- Your consent choice, notice version and consent time.
Active playtime excludes pauses, background time, menus and inactivity after two minutes without input. We do not upload keystrokes, mouse movements, screenshots, chat, your Steam display name, friends list or profile contents. An interrupted connection can leave an unconfirmed session ending; it is not treated as proof of a crash.
Why we use it
We use these records to improve gameplay, balance and the first-time experience, understand whether players return, and provide combined community statistics in the compendium. We do not use gameplay analytics for advertising or sell it. It does not make decisions with legal or similarly significant effects about you.
Public statistics contain no participant identifiers. Statistics become available once at least 20 distinct participating accounts contribute to the relevant balance version; demo and full-game audiences are counted separately. After that threshold is reached, individual items, enemies and progress breakdowns may show smaller samples. The analytics page visibility setting only controls whether you see the pages; it does not grant permission to collect your gameplay.
Hosting and recipients
Games People Play A/S and our hosting provider Supabase process the analytics. The primary database is in the EU, in the eu-west-1 region. Supabase acts as our processor for stored gameplay records. Its Data Processing Addendum describes processing safeguards and international transfers, including Standard Contractual Clauses where applicable. Its subprocessor list identifies other providers involved. EU database hosting does not mean every support or infrastructure operation takes place only in the EEA.
Steam verifies authentication tickets. Steam’s own processing is described in Valve’s privacy policy.
Requests to the analytics service expose network information, including your IP address, to the hosting infrastructure. Operational and security logs help provide the service and prevent abuse. Our analytics code does not log raw identifiers, tickets or request payloads. Provider-managed infrastructure logs and recovery backups are separate from the gameplay records covered by the in-game export and deletion tools; their lifecycle is governed by the hosting service and its security and recovery requirements. Contact us for current hosting-retention details. See also Supabase’s privacy policy.
Retention and deletion
- Detailed gameplay events are removed after 90 days from receipt.
- Session summaries are retained for up to 365 days from session start, to identify the first tracked session and return visits.
- Minimal challenge progress and consent records remain while you participate, and are deleted after 365 days without an accepted analytics upload. Deleting the account’s analytics also removes its events, runs and sessions.
- Short-lived account rate-limit counters are removed after one hour.
- Pending local uploads expire after 30 days and are capped at 2,048 events. Withdrawal clears them immediately on that installation.
Automated cleanup runs hourly, so expiry can lag by up to an hour. A successful in-game deletion removes your retained records from the active analytics database and invalidates server summaries. Previously downloaded combined statistics can remain in other players’ caches. Backup copies are not used to provide public statistics; recovery must account for deletion requests before restored data is made available again.
Fetching public statistics does not send your Steam identity or gameplay data, and does not require analytics consent. It still makes a network request to the hosting provider.
Your rights and contact
Depending on the applicable conditions, you may request access, correction, deletion, restriction or portability of your personal data, and withdraw consent. Contact contact@gamespeopleplay.co; we may need to verify account ownership. You may complain to your data protection authority, including Datatilsynet in Norway.
Devil’s Due is not directed at children. If you believe a child has submitted analytics without the required authorization, please contact us.
If the scope of optional analytics changes, we update this notice and ask for consent to the new version before collecting under it.