This page is part of the Qube accounts Privacy Policy. It lists what Qube accounts keep, why, and for how long. Records are removed automatically when their time is up.
You can see, download, or delete your family's information yourself at account.qubesoftware.com; Parent Rights explains how.
Your account
- Your email address: for sign-in codes, confirmations, and notices about your account. Kept until you change it or delete your account.
- Email codes (stored as one-way hashes): for signing in and confirming important actions. Each works for 10 minutes.
- Confirmations of important actions (which action, and on what): so that one action can go ahead. Usable for 10 minutes, then removed a day later.
- Sign-ins (an id, and when each began and was last used): to keep you signed in, and for your list of sign-ins. Kept until you sign out, or 30 days after you last use them.
- Recovery codes (stored as one-way hashes): for getting back in if you lose access to your email. Kept until they're used or replaced, or your account is deleted.
- A new email address waiting to be confirmed (with its code, as a one-way hash): for changing your email address or recovering your account. The code works for 10 minutes; both are removed a day later.
Profiles and devices
- Profiles (nickname, picture, and type): to know whose progress is whose. Kept until you delete the profile or your account.
- Device links (a one-way hash of the credential, the device's name, and dates): to let one device back up one profile in one game. A link stops working when you revoke it, after 90 days without use, or 180 days after linking. It stays on your device list until you delete the profile or your account, or withdraw consent.
- Link requests (the code, the device's name, and a one-way hash of its credential): to link a device. The code works for 10 minutes; the request is removed within a day.
- Notes on removed links (a one-way hash of the credential, the reason, and the time): to tell a device, when it next connects, that its profile was deleted or consent was withdrawn, so it removes its copy. Kept 180 days.
Child profiles aren't available yet. Before they open, this page will say how long a parental consent record is kept.
Game progress
- A profile's game progress (in Dragon Hatchery, its DiscoveryDex): for backup, and for playing on several devices. Kept until you reset that game for the profile, or delete the profile or your account.
- Receipts (one for each find counted, noting the match, card, and seat it came from and which linked device sent it): so that no find counts twice. Kept as long as the progress they belong to.
- Snapshots (up to five taken as you play, at least six hours apart, and up to five more taken before an import, a restore, or an update to the save format): for going back to an earlier book. Kept 30 days at most.
- Earlier finds a device offers to add (with a summary for your review): so that nothing is added without you. The finds are kept up to 30 days from the request: while you decide, and, if you add them, until the device adds them. The summary stays with the progress if they're added, so they can't be added twice; otherwise it goes after 30 days.
Security and operations
- Limit counters (kept against a keyed hash of an email address, IP address, device, or account, never the address itself): to stop code spam and guessing. Kept 48 hours.
- The safety record (what was deleted, withdrawn, reset, restored, revoked, recovered, or changed, the ids involved, and when; never an email address): so that a database restore can't bring back what you deleted, or undo a change. Kept 35 days after the action is done.
- Our error logs (what went wrong, never an email address, nickname, code, credential, or game save): for fixing problems. Kept 30 days at most.
- The database's history (kept by Cloudflare): for recovering from a failure. Up to 30 days.
When you delete something
Deleting a profile or your account, resetting a game, or withdrawing consent is written to the safety record first, then carried out in our database straight away. If anything interrupts it, it finishes automatically, and nothing new can be saved to that profile until it has.
Withdrawing consent deletes a child profile's backed-up progress, receipts, snapshots, and imports, and its device links. To remove the profile itself, delete it.
Deleted information stays in the database's history for up to 30 days, until that history moves past it. If we ever had to restore the database from that history, we would first close Qube accounts and redo every deletion, reset, revocation, and recovery made after the point we restored to, so nothing you deleted comes back. An email address changed in that time might need changing again; we would tell you.
After you delete your account, what stays for a while holds ids, hashes, and times rather than your family's information: the safety record (35 days), notes on removed device links (180 days), and limit counters (48 hours).
On your devices
Each linked device keeps its own copy of a profile's progress so the game can play offline. That copy is on the device, not with us, and the times on this page don't apply to it. Revoking a device doesn't remove it. Deleting a profile or your account, or withdrawing consent, removes it the next time the device connects, but we can't reach a device that stays offline. To remove it yourself, clear the game's site data in that browser.
Questions
Email Qube, LLC at admin@qubesoftware.com.