Dicey Dungeons

"We may share Your personal information identified in the above categories with the following categories of third parties: Service Providers, Our affiliates, Our business partners, Third party vendors to whom You or Your agents authorize Us to disclose Your personal information in connection with products or services We provide to You."

Personal information is shared with a broad range of third parties including affiliates and business partners, not just essential service providers.

"The Company will retain Your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use Your Personal Data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies."

No specific deletion timelines are provided, and broad exceptions like resolving disputes and enforcing agreements allow indefinite retention.

"We may update Our Privacy Policy from time to time. We will notify You of any changes by posting the new Privacy Policy on this page. We will let You know via email and/or a prominent notice on Our Service, prior to the change becoming effective and update the "Last updated" date at the top of this Privacy Policy. Changes to this Privacy Policy are effective when they are posted on this page."

While they mention email or prominent notice, changes take effect simply by being posted, with no mechanism for user consent to new terms.

"Usage Data may include information such as Your Device's Internet Protocol address (e.g. IP address), browser type, browser version, the pages of our Service that You visit, the time and date of Your visit, the time spent on those pages, unique device identifiers and other diagnostic data. When You access the Service by or through a mobile device, We may collect certain information automatically, including, but not limited to, the type of mobile device You use, Your mobile device unique ID."

Collection of unique device identifiers and mobile device unique IDs enables cross-service tracking and device fingerprinting across contexts.

"If You decide to register through or otherwise grant us access to a Third-Party Social Media Service, We may collect Personal data that is already associated with Your Third-Party Social Media Service's account, such as Your name, Your email address, Your activities or Your contact list associated with that account."

The policy permits collecting a user's entire contact list from linked social media accounts, which goes beyond what's needed for indie game functionality.