What we collect
FL7P collects only the data needed to run the game:
- Slack workspace ID and OAuth token: stored when you install the app, used to post messages to your workspace
- Channel ID: identifies which channel a game is running in
- User IDs and display names: used to show player names in the game UI
- Game state: cards, scores, and turn order for the current game
We do not collect email addresses, message content, or any data beyond what is listed above.
How we use your data
All data collected is used solely to operate the game. We do not use it for analytics, advertising, or any other purpose. We do not share it with third parties.
Data retention
- Game state: automatically deleted after 7 days via DynamoDB TTL. Finished or abandoned games do not accumulate.
- OAuth tokens: retained until you uninstall the app from your workspace. Uninstalling triggers immediate deletion.
Data deletion
To request deletion of your workspace's data at any time, email us at bartymcdougaldev@gmail.com. We will respond within 2 business days and confirm deletion.
Uninstalling FL7P from your Slack workspace automatically removes your OAuth token. Any active game state will expire within 7 days.
Security
All data is stored in AWS DynamoDB in the us-east-1 region. All communication between Slack and FL7P uses HTTPS. Every incoming Slack request is verified using HMAC-SHA256 signature validation.
GDPR
If you are located in the European Union or United Kingdom, the following applies to you.
Lawful basis for processing: FL7P processes your data on the basis of legitimate interest — specifically, to operate the game you have chosen to play. No data is processed beyond what is necessary for that purpose.
Your rights: You have the right to access, correct, or request deletion of your personal data at any time. To exercise these rights, email bartymcdougaldev@gmail.com.
International data transfers: FL7P is hosted on AWS in the United States (us-east-1 region). If you are located in the EU or UK, your data is transferred to and processed in the US. AWS maintains appropriate safeguards for international data transfers under its Data Privacy program.
Changes to this policy
If this policy changes materially, we will update the date at the top of this page. Continued use of FL7P after changes constitutes acceptance of the updated policy.
Contact
Questions about this policy? Email bartymcdougaldev@gmail.com.