Privacy Policy

Downing Draft is designed to collect as little as possible. You can play without an account. When optional accounts are enabled in the Android or iOS app, you can sign in with Apple or Google to keep your points and saved progress across installations and devices. You play as a fictional Prime Minister of your own naming; we do not require your real name or contact details to play as a guest. This policy covers the Downing Draft website and the Downing Draft Android and iOS apps.

Delete your Downing Draft account

In an app with accounts enabled, open Your profile, choose Delete account and confirm. You may need to sign in again to finish. This removes your Downing Draft account and profile, its saved icon and emblem ownership, and its Firebase sign-in account. The app starts a separate guest installation; the deleted account's progress and points purchases can no longer be recovered through sign-in.

To request deletion outside the app, or if you cannot complete it in the app, email contact@downingdraft.com with the subject Downing Draft account deletion. Tell us which sign-in provider you used and your fictional profile names, and include a result share link if you have one. We will verify ownership before acting. Never send a password or sign-in token. The retained records and limits on deletion are explained below.

What we collect

• Optional accounts and profiles (app only). Firebase Authentication verifies your Apple or Google sign-in. We store your Firebase user identifier, chosen provider, an internal account identifier and an encrypted game installation identifier to associate saved progress with your account. We do not copy the provider's email address or real display name into our game database. Apple, Google and Firebase may process those details as part of sign-in. We also store the fictional profile names and optional preset party slogan you choose, their name-review status, and your owned and equipped icons and emblems. Profile statistics are calculated from your validated game results. Your full profile and statistics are private; eligible public leaderboards may show initials, your equipped icon or emblem, and your moderated game-result names.
• Game activity and results. When you play In Office, we send a small record when a career starts, at coarse career checkpoints, and when it is completed or reset. This lets us count starts, completions and broad game outcomes without adding third-party app analytics. The existing career identifier prevents retry requests from being counted twice; we do not add an advertising identifier for this. With accounts enabled, completed results can also carry a game installation identifier so they contribute to your private record and selected leaderboard artwork. When you finish any game, we may also send and store a summary so that short share links work, results can be checked, game statistics can be produced and the moderated leaderboard can operate. A result summary contains your in-game choices and outcome — the name you gave your Prime Minister and party, your cabinet picks, priorities and final scores. These names are part of your game and are entirely of your choosing; please do not enter real personal details into them.
• Public leaderboard. Eligible completed results, including In Office careers, are automatically considered for a public Top 25. In Office and Daily Brief display names may appear before retrospective review. A public row may show its rank, a moderated Prime Minister name, a moderated party name, tenure, election wins, signature policy, game mode and cabinet era, depending on the mode. We may reject or hide a result, or replace a submitted display name, including by starring out part of it. Approved results outside the current Top 25 are not displayed but may be retained so that the table can be recalculated. Older Quick Play results collected before its leaderboard notice remain private unless we provide a separate submission process. Completed In Office careers already collected may enter its leaderboard; older careers without a comparable delivery measure are ranked without treating that old measure as verified delivery data.
• Local game preferences. The website and apps may remember your five most recently completed fictional Prime Minister and party names and your ten best runs on the current device or browser. The recent-name and best-run lists remain local; optional accounts recover the server-held points and Daily Briefing record associated with their installation, rather than copying all device storage. Local data may be included in a device backup managed by your operating system and may be lost if you clear storage or remove the app.
• Usage analytics (website only). We use a basic, non-persistent form of PostHog analytics to produce aggregate statistics about visits, referral sources, pages and game activity so that we can improve the website. Choosing "Basic only" does not store a persistent analytics identifier in your browser. If you choose "Allow all", PostHog also stores a random browser identifier in local storage so we can understand repeat visits and journeys through the website. We do not send fictional Prime Minister or party names, cabinet choices, the contents of result links, precise location or advertising identifiers to PostHog. Automatic click capture and session recording are disabled. The apps do not include PostHog analytics.
• Advertising measurement (website only). If you choose "Allow all", we use Meta Pixel to measure visits, game starts, game completions and clicks to download the app. We do not send your fictional names, Cabinet or manifesto choices, political answers, scores or other detailed game information to Meta. Meta Pixel is not loaded if you choose "Basic only", and it is not included in the Android or iOS apps.
• Advertising data (app only). The Android and iOS apps show adverts to free users, supplied by Google AdMob. Its SDK may collect and share device identifiers, IP addresses that can indicate approximate location, app and advert interactions, and diagnostic information such as app launch time, hangs and energy usage. Google uses this data for ad delivery and measurement, analytics, and fraud prevention. Access to your advertising identifier on iOS is subject to your Apple tracking permission and privacy choices. If you purchase the Parliament Pass, ads are switched off.
• Purchase information (app only). If you buy the Parliament Pass or a points pack, our payments provider (RevenueCat) and the relevant app store process your purchase and retain a record of it, so verified purchases and entitlements can be associated with your account or store customer. For points packs we retain the store transaction identifier, product, store, purchase time, points credited, refund adjustments and the account/installation that received them. This prevents duplicate credits and supports refund handling. We do not see or store your payment card details - these are handled entirely by the relevant app store.

We do not collect your precise location, contacts, or photos. The website contains no advertising identifiers or tracking beyond what's described below; the apps' use of advertising identifiers is limited to serving ads as described above.

Advertising

Website. The website does not currently show programmatic advertising. With your permission, Meta Pixel measures whether visits from advertising lead to game activity or an app download click. It may also enable Meta to associate your visit with its advertising services.

Apps. To keep the free version of the Android and iOS apps supported, they show adverts supplied by Google AdMob — small banners on the results and leaderboard screens, an occasional full-screen advert when starting a new game, and optional adverts you can choose to watch in exchange for an extra re-roll, historic access or another Daily Briefing attempt. These optional adverts are never required for your first attempt or the core game. If you are in the UK or the EEA, the app will ask for your consent before showing personalised ads, using Google's certified consent tool. On iOS, Apple's tracking permission is requested only if you choose to allow more relevant ads. If you buy the Parliament Pass, none of these adverts are shown.

Google's use of advertising data is governed by Google's Privacy & Terms, and you can review or control personalised advertising through your device's advertising ID or tracking settings.

Cookies

The website does not currently use analytics or advertising cookies. Basic analytics use in-memory state only and do not retain an analytics identifier after the page is closed. If you choose "Allow all", PostHog uses local storage rather than a cookie to retain its random browser identifier and analytics state. We also store your analytics choice so we do not ask on every visit. If you choose "Allow all", Meta Pixel may set or access first-party and third-party cookies or similar identifiers for advertising measurement. Choosing "Basic only" does not load Meta Pixel. Turning analytics off prevents PostHog and Meta Pixel from collecting further events. The apps do not use cookies, but may use your device's advertising identifier for AdMob as described above.

Service providers

• Neon: stores game activity, results, optional account/profile records and the points and refund ledger.
• Railway: hosting and serving the website and the results API.
• PostHog: consented product analytics for the website only.
• Meta: consented advertising measurement for the website only.
• Google AdMob: serves the adverts that keep the Android and iOS apps free, and provides the consent tool shown to UK and EEA users of the apps.
• Firebase Authentication: verifies optional Apple and Google sign-in and manages the sign-in account.
• Apple and Google: provide their chosen sign-in service and process app-store payments.
• RevenueCat: verifies Parliament Pass and points-pack purchases and associates them with a store customer or internal Downing Draft account identifier.

These providers may process technical information such as IP addresses to deliver and secure the service, and may retain information for the purposes described above under their own policies. Data is transmitted over an encrypted (HTTPS) connection.

Retention and deleting your data

Stored game results are kept so that share links continue to work and the approved leaderboard can be recalculated. If you would like a result deleted, send the share link (or its short code) to contact@downingdraft.com and we will remove the corresponding record unless we need to retain limited information for security, legal or abuse-prevention reasons. A share link helps us locate an individual game result.

Account deletion removes the sign-in/profile association and cosmetic ownership. Stored game results and the installation-based points and refund ledger remain so result links, leaderboard calculations, duplicate-purchase protection and refund handling continue to work. Deleting an account does not automatically delete its individual result links. You can request removal of those records using the contact address above; limited security, payment dispute or legal records may need to be retained. Purchase records are also retained by the relevant app store and RevenueCat under their own policies. Deletion does not request a store refund or cancel a store-managed subscription; manage purchases through the relevant store. We do not store payment card details.

You can change or turn off website analytics at any time through "Analytics choices" in the footer. Turning it off stops future analytics collection and resets the analytics identity held in your browser. You can also contact us at contact@downingdraft.com about deletion of analytics data.

Your rights

Guest play does not require your real name or email, but user-entered names and optional sign-in identifiers may contain or relate to personal information. We use optional account data to provide the account and saved-progress service you request. We rely on our legitimate interests in operating, securing and improving the game, providing result links, validating competitive results and maintaining a moderated Top 25. You can object to this use or request deletion of a stored result by contacting contact@downingdraft.com.

Children

The game is intended for a general audience. Players should not enter a real name or other personal information into the fictional identity fields. Public results are limited to a moderated Top 25, and submitted display names can be rejected, hidden or replaced before publication. A parent or guardian can contact us using the address above about a child's result.

Changes

We may update this policy from time to time. Material changes will be reflected by the date at the top of this page.