Dub Together Privacy Policy

1. Data controller

The data controller responsible for the processing of your data is:

Banani, c/o Online-Impressum #7201, Europaring 90, 53757 Sankt Augustin, Germany

Email: support@dub-together.com

Banani is the name under which Dub Together appears on Steam. There is no data protection officer, as we are not required to appoint one.

2. Error reports

The game only sends an error report if you click SEND REPORT in the report dialog. If you click DON'T SEND, nothing is transmitted. The game offers the dialog on its own after a crash or when known problems occur, for example with the microphone or the connection, and at most once per session. You can open it yourself at any time via REPORT A PROBLEM in the settings.

Contents of a report

• Type of error and game version
• Operating system and version
• Hardware: processor, number of cores, RAM, graphics card and graphics driver
• Audio: selected input and output devices, sample rate and the names of all recording devices in Windows
• Your optional text in the WHAT HAPPENED field
• The game log of the current session and, after a crash, also of the previous session (at most 200,000 characters each)

The game log describes technical processes. It also records whether overlay or recording programs such as OBS, the Discord overlay or the Steam overlay are loaded in the game. After a crash, it additionally contains Windows events since the start of the crashed session. These include crash and hang reports of the game, blue screens, unexpected shutdowns and sleep mode. Restarts and shutdowns are also recorded together with the name of the program that triggered them, as are graphics driver failures.

Your Windows user name is removed before sending. However, the game log may contain your Steam name, the Steam IDs of your fellow players, lobby IDs and, if connected, your Twitch name. For connections without Steam, it may contain the IP address of the host you connect to.

Transmission and storage

The report is sent encrypted (HTTPS) to our server reports.dub-together.com. The server is located in a data center of Hetzner Online GmbH in Nuremberg, Germany. We store the report without your IP address and delete it after 90 days. After sending, the game shows you a report number.

Your IP address is necessarily transmitted when sending. The server keeps it for up to one hour in order to reject more than 5 reports per hour from the same address. In addition, the web server logs every request with IP address, time, request and program identifier (user agent), and in case of errors also in an error log. The server automatically deletes both web server logs after about 15 days.

Data of your fellow players

If a fellow player sends a report, their game log may contain your Steam ID and the lobby ID. For connections without Steam, it may also contain your IP address if you were the host. In that case, we receive this information from their report and not from you. We delete it together with the report after 90 days. To request access or erasure, or to object, write to support@dub-together.com and state your Steam ID.

Legal basis

• Report: your consent by clicking SEND REPORT (Art. 6(1)(a) GDPR). You can withdraw it at any time by email, and we will then delete your report.
• Data of your fellow players in the game log: our legitimate interest in finding and fixing connection errors between players (Art. 6(1)(f) GDPR).
• Short-term storage of the IP address and the web server logs: our legitimate interest in secure operation and in preventing abuse (Art. 6(1)(f) GDPR).

3. Steam

Dub Together runs on Steam, the gaming platform of Valve Corporation. On startup, the game connects to the running Steam client. It receives your Steam name (the display name of your profile), your Steam ID and your Steam language for the automatic game language. The Steam ID is a fixed number by which Steam identifies your account. Valve is responsible for the processing by Steam itself, and the Steam Privacy Policy applies.

Lobbies

If you play with Steam, every multiplayer lobby is a Steam lobby. For the duration of the lobby, Steam stores technical information such as the game version. In a private lobby, only players who join learn your Steam ID as the host. Anyone who joins sees the Steam IDs of all members. A private lobby is not shown in the game's lobby list, but owners of the game can technically find and join it via Steam's interface. The game shows your fellow players your Steam name and your Steam profile picture, which it retrieves from Steam.

Public lobbies

Every lobby starts as private: players can only get in via code, invitation or Discord. If you, as the host, set your lobby to public, it appears worldwide in the lobby list of all players. The lobby data then contains your Steam name, your Steam ID, game language, game mode, pack title and the number of free slots. Your Steam name appears in the list even when streamer mode is on. If you set the lobby back to private or close it, it disappears from the list and the game removes this information.

Connection between players

Game data between host and guests is transmitted via Steam Networking. Based on your Steam setting, Steam decides whether the connection runs directly or via Valve's relay servers. Relay servers forward the data so that your fellow players do not see your IP address. With a direct connection, your fellow players' PCs see your IP address. Under Steam > Settings > In Game > Steam Networking, you can choose with whom Steam shares your IP address. With “Never”, the connection always runs via the relay servers.

Invitations

For the invite list, the game reads your Steam friends who are currently online and shows them only to you. An invitation is only sent to the friend you click on.

Steam Workshop

• Uploading your own packs: optional, in the Pack Creator. Title, description, content, preview image and tags go to the Steam Workshop and are linked to your Steam account. Depending on the visibility you choose, they are public.
• Automatic subscription: If you join a lobby whose pack comes from the Workshop, the game subscribes to this pack in your Steam account. In public lobbies, it cancels newly created subscriptions again when you leave. In private lobbies, they remain until you unsubscribe yourself.

Legal basis

We process this data to provide you with the game features you use (Art. 6(1)(b) GDPR).

4. Multiplayer: voice recordings and fellow players

Your voice recordings only go to the fellow players in your lobby, never to our server. When you submit your recordings in a round, the game sends them in compressed form to the host. The host passes them on to all other players.

• Recordings: The game only keeps them in memory and discards them at the next round or when the connection ends. It deletes temporary files immediately after compressing them.
• Exports by fellow players: At the end of a round, every player can save a video with the voices of all players on their own PC. What they do with it afterwards is up to them.
• Player list: All players in the lobby receive the name, Steam ID, ready status, progress and vote of each fellow player.
• Voting: Only who you vote for is transmitted. The host distributes this with the player list to all fellow players. The game only shows whether you have voted and, at the end, the overall result.
• Packs: If a guest does not have the selected pack, the host sends them the pack files directly. The guest keeps them in the game's data folder (see section 7) until they delete them there.
• Kicking and banning: If a host bans a player, the game stores the banned player's Steam ID, name and the time of the ban on the host's PC. The ban remains in effect until the host lifts it.

Playing without Steam

If Steam is not running or you connect by entering an IP address, the PCs connect directly. Host and guests then see each other's IP addresses.

Legal basis

The transmission to fellow players is necessary so that you can play together (Art. 6(1)(b) GDPR). The ban list serves the host's legitimate interest in keeping disruptive players out (Art. 6(1)(f) GDPR).

5. Discord

If you play with Steam and Discord is running on your PC, the game connects to the Discord app on startup (Discord Social SDK). You do not need to sign in to Discord in the game for this. The game reads neither your Discord name nor your friends list.

• Game status: When you are in a multiplayer lobby, Discord shows your status: in the lobby or in a round, plus the current and maximum number of players. Discord assigns this status to the account signed in to the Discord app. Your Discord friends and members of servers you share can see it.
• Joining via Discord: As long as slots are free, the game transmits a join identifier containing the lobby ID. This lets friends join via Discord. If streamer mode is on for you or for the host, the game sets your group in Discord (the party) to private. Then only people you invite yourself in Discord can join.
• Launch command: Every time the game starts with Steam, it registers a launch command in your Windows user account via the Discord interface, even if Discord is not running at the time. This allows an accepted invitation to start Dub Together via Steam.

Turning it off

You can turn off the Discord integration in the game's settings. The game then no longer connects to Discord and removes the launch command again. If you only turn off activity sharing in your Discord settings, others will no longer see your status. However, the game will continue to report it to your Discord app.

For players in the EU, Discord Netherlands BV is responsible for the processing by Discord. Discord's Privacy Policy applies.

Legal basis

We process this data based on our legitimate interest in enabling invitations and joining via Discord (Art. 6(1)(f) GDPR). You can object at any time by turning off the integration in the game.

6. Twitch

The Twitch integration is optional. It lets your viewers in Twitch chat take part in the voting. You connect it in the settings and, to do so, sign in directly to Twitch in your browser.

• Access: The game receives your Twitch name and an access token that only allows it to read your chat. It stores both on your PC in the settings. If you disconnect, the game revokes the token at Twitch and deletes it.
• Chat: During a vote, the game reads your Twitch chat over an encrypted connection and counts messages such as “!vote 2”. To make sure each viewer only has one vote, it remembers the sender's Twitch name. The names remain in memory only until the end of the vote. Only the result is sent to your fellow players.

Twitch Interactive, Inc. in the USA is responsible for the processing by Twitch. The Twitch Privacy Notice applies. You can also revoke the game's access directly on Twitch under Settings > Connections.

Legal basis

We process your Twitch data to provide you with the feature you turn on (Art. 6(1)(b) GDPR). We process the names of your viewers in chat based on our legitimate interest in counting their votes (Art. 6(1)(f) GDPR).

7. Data on your PC

These files are stored on your PC under %APPDATA%\Godot\app_userdata\Dub Together, and exports in your Videos folder. Of these, only the game log with the diagnostic information is sent to us, and only with an error report that you send yourself (section 2). What goes to Steam, to fellow players or to Twitch is described in sections 3 to 6.

For troubleshooting, the game also reads the version of your graphics driver on your PC. It also checks which programs hook into the game, for example overlays. After a crash, it reads Windows events about game crashes, blue screens, restarts, shutdowns and graphics driver failures. This information only ends up in the game log.

8. Tools that only run on your PC

None of these tools send data to the internet. Whisper, Demucs and DeepFilterNet use AI models that ship with the game.

• Whisper (speech recognition in the Pack Creator): recognizes the text of a clip.
• Demucs (audio separation in the Pack Creator): separates the voices and background of a clip.
• DeepFilterNet (noise suppression): cleans up your recordings when you turn on noise suppression. The game deletes the temporary files immediately.
• ffmpeg (audio and video tool): compresses recordings and creates exports.

9. Contact, support and website

• Email: If you write to support@dub-together.com, we process your email address, your name and whatever you send us, such as log files. The mailbox is hosted by IONOS SE in Germany. We delete your request once it has been resolved, at the latest after 12 months.
• Discord server: The SUPPORT ON DISCORD link in the game only opens our Discord server. What you write there can be seen by the other members of the server. Discord's privacy policy applies to this.
• Other links: Links in the game to Microsoft help pages or Steam Workshop pages open these pages in your browser or in the Steam overlay. The game itself does not transmit anything when doing so.

This website

This privacy policy and the imprint are published at legal.dub-together.com. The site does not set cookies, does not load anything from third-party servers and does not count visits. When you visit the site, the web server logs the IP address, time, page requested and browser identifier and deletes these logs after about 15 days. The site is hosted on the same server at Hetzner Online GmbH in Nuremberg as the report service.

Legal basis

We process this data based on our legitimate interest in answering your request (Art. 6(1)(f) GDPR). The website logs serve our legitimate interest in secure operation (Art. 6(1)(f) GDPR). If your request concerns errors in the game, we also process it in order to provide you with the game (Art. 6(1)(b) GDPR).

10. Recipients and transfers outside the EU

Service providers in Germany operate our server and the support mailbox on our behalf. Valve, Discord and Twitch process data as independent controllers, partly in the USA.

The EU-US Data Privacy Framework is an arrangement under which certified US companies are considered safe for data from the EU. Twitch is not certified under it. An equivalent level of data protection is therefore not guaranteed in the USA, and US authorities may access data. Data only goes to Twitch if you connect Twitch yourself.

11. Your rights

You can exercise the following rights at any time by emailing support@dub-together.com:

• Access to the data stored about you (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure of your data (Art. 17 GDPR)
• Restriction of processing, meaning that for the time being we only store your data (Art. 18 GDPR)
• Data portability, meaning that you receive your data in a common format (Art. 20 GDPR)
• Withdrawal of consent you have given, with effect for the future (Art. 7(3) GDPR)

If your request concerns your own error report, please state the report number the game shows after sending. If you don't have it, your Steam name and the approximate date and time of sending are sufficient. If your request concerns data about you in a fellow player's report, please state your Steam ID.

Right to object

Where we process data on the basis of our legitimate interest (Art. 6(1)(f) GDPR), you can object at any time. This requires grounds relating to your particular situation (Art. 21(1) GDPR). This applies, for example, to Steam IDs of fellow players in error reports, the web server logs, the Discord game status and names from Twitch chat. After an objection, we will no longer process this data. The only exceptions are if we can demonstrate compelling legitimate grounds that override your interests, or if the processing serves the establishment, exercise or defence of legal claims. To object, write to support@dub-together.com.

Complaint

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the country where you live. The supervisory authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW).

12. Changes to this policy

We update this policy when an update introduces new features that process data. The current version is always available at legal.dub-together.com/privacy.