Privacy
Provisional. This is a placeholder while the bot is in testing. It describes what the bot stores today; a full policy will replace it before the bot is offered to other organisations.
What is stored
When someone in your organisation plays World of Adventures in Microsoft Teams, the bot stores:
- Platform IDs: your Microsoft Entra (Azure AD) user ID, your Teams user ID, and your organisation's tenant ID.
- Your display name, as Teams provides it, used to credit you in the game's news.
- Your email address from your organisation's directory, looked up from Teams when you first use the bot. It is kept as an attribute of your account only, and never shown to other players.
- Character and game data: your character's name and statistics, gold, adventures, and places in the Hall of Fame and the Richest list.
- News and quotes: the game's news lines about what players did, and any quotes players write (for example on the Richest list), which other players in your organisation can read.
- What's needed to reply: the Teams conversation the bot talks to you in, and short-lived records of messages waiting to be delivered.
The bot reads only what you send it as game input in your chat with it, and, in a team channel, only messages that mention it. It doesn't collect files or other messages.
Where
On Cloudflare, in a separate store for each organisation: one organisation's players never share a world or data with another's. Microsoft Teams carries the messages between you and the bot. Operational logs (on Cloudflare) record requests and errors with user IDs hashed, not in the clear.
How long, and deleting it
Game data is kept while the game runs for your organisation. When a world is full, a character that hasn't played for about a month may be replaced. To have your data deleted, or to ask what is held about you, write to the contact below.
Testing
A test page on the staging site uses an email address typed in by the tester as a stand-in identity. It is not verified and is used only for testing.