Donkey Trump 3D Privacy

Responsible publisher and operator: Jesper Bjerre. Contact and support.

Local play

There are no player accounts, advertising, purchases or cross-app tracking. Game content is installed on the iPhone. Sound, haptics and personal-best settings are stored locally. They are not sent with online requests.

Optional online highscores

If you choose to publish, the app sends a run ID, chosen name, score and level reached. Names and scores are visible to everyone reading the list. A random installation credential authorizes publishing and access to your own report receipts. The server retains a SHA-256 fingerprint, not the raw credential. This links your submitted results and reports within that installation for abuse prevention. It is not hardware identification, an account or proof of genuine gameplay.

Reports and moderation

A report contains its ID, the entry ID, a fixed reason and your installation fingerprint. A private snapshot of the reported name and its producer attribution lets the operator investigate even after the result leaves the top 100. Only the operator can inspect the snapshot. Only the reporting installation can read its private receipt. There is no free-text report or email/phone collection in the report form.

Retention

• Ranked names, results and producer fingerprints remain while ranked. Reports may retain a snapshot independently.
• Pending or acknowledged reports remain until the owner resolves them. Resolved reports expire after 30 days. Reports classified as spam lose their snapshot immediately; a minimal receipt remains up to 24 hours and may expire earlier when its bounded list is full.
• Removed result IDs remain until the service is retired or a separately controlled identity reset. Active blocked fingerprints remain until the operator explicitly unblocks them or retires the service. Unblocking does not republish removed results.
• Operator audit records expire within 30 days and contain actions, times and counts rather than reported names or credentials.
• A private migration backup is deleted after successful verification or expires after 24 hours. Backups must not be restored over removal/block records. Cleanup runs at startup and hourly while service and storage are available; outages delay physical deletion until recovery. Receipt expiry is enforced on reads.
• The iPhone keeps up to 20 generic report receipts: ID, time and status. They are excluded from backup, removed after an expired/not-found status check and removed on uninstall. The protected installation credential is excluded from backup and survives normal updates; reinstalling may create a new one. There is no background or deferred score/report upload queue.

Service providers and diagnostics

Microsoft Azure hosts the API and private Blob storage. Network providers necessarily process connection information such as IP addresses. Application diagnostics use request method, status, timing and counts, not player names, request bodies or credentials. Microsoft also processes service diagnostics under its Azure service policies.

Help, removal and privacy requests

Use the in-app report action for a public entry containing personal information or other offensive content. For other help or a privacy request, use the project contact channel and ask for private contact without publishing personal details. GitHub is a separate service with its own account and privacy practices. These pages themselves use no cookies or analytics.