Your data
Privacy policy
Last updated: 19 October 2026
- You can play without an account. As a guest, nothing about you is sent to me.
- With an MDT account I keep your username, your saves and scores, your MXC, your friends, and the things you choose to share (messages, photos, songs).
- No adverts, no tracking, no analytics, and I never sell your data.
- You can delete your account, and everything in it, from any app's account settings.
Who I am
Maximus Development Technologies (Maximus Dev Tech, MDT) is the name Max Jones uses for the games, apps and websites he makes. It is run by me, a sole trader in Essex, England, not a registered company. I decide how your data is used, so I'm the "controller" under UK data protection law (the UK GDPR and the Data Protection Act 2018).
This policy covers maximusdevtech.co.uk and every game and app on it, all of which share one MDT account. Questions about your data: [email protected].
Playing as a guest
Every game and app can be played without signing in. A guest has no MXC and nothing is saved to an account. Anything a game remembers for a guest (settings, a tracker's records, whether you said you're 18 or over) stays in your own browser and is never sent to me. Clearing your browser's site data removes it.
What I keep when you have an MDT account
| What | Details |
|---|---|
| Your account | The username and password you choose. You don't need an email address: the username is turned into an internal login that is never shown to anyone. Passwords are stored hashed, never in plain text. If you connect Google, I also hold the email address and account ID Google shares, so you can sign in with it. |
| Whether you're 18 or over | Only if you open something that's for 18s and over (the casino, poker, or playing for MXC): your yes or no answer, nothing else (no date of birth). Nobody else can see it. |
| Games and saves | Your progress, saves, scores, records, character and what you own, so they're there on any device, and so leaderboards work. |
| MXC | Your MXC balance and a record of every change to it (what it was for and when), to keep the economy fair and fix mistakes. |
| Your profile | Your public profile page (/u/your-name): your character, banner, name colour and game stats, with the privacy setting you choose (everyone, friends only, or hidden). |
| Friends and messages | Who you're friends with, friend requests, and the messages you send friends, so your conversations are still there next time. |
| Things you make and share | One Shot photos you send (the picture, its caption and rating), Anthem songs you write (a published song plays on the radio for everyone), likes, game ideas you send me, and shared careers, darts games or Card Tally groups (a Card Tally group you add a friend to is shown in their Card Tally too: its name, players and scores). |
| Where you are online | While you're signed in and an app is open, which app you're in, so friends and Maximus World can show who's online. In Maximus World other players see your character and username moving around. |
| Reports and blocks | If you report something, the report and a copy of what you reported. Who you've blocked. |
| Messages to me | If you use the contact form or email me, your name, how to reply (email or phone), your business name if you give it, and your message, so I can answer. You don't need an account for this. |
| Purchases | Buying MXC is switched off at the moment. If it's switched on, I'd record what you bought and when; your card details would go to Stripe (or Apple, in the iOS app), never to me. |
Why I use it (and the legal reasons)
- To run the games you've signed up for: signing in, saving and syncing, leaderboards, friends, messages, the radio, profiles. The legal basis is contract: it's what you asked for when you made an account.
- To keep everyone safe and the games fair: dealing with reports, blocking, spotting cheating or abuse, suspending accounts that break the rules, and checking ages for 18+ games. The basis is legitimate interests (and, for safety, my legal duties).
- Your Google connection is only there if you choose to add it, and you can remove it any time from your MDT account.
- Records I have to keep (for example, of any purchases) are kept because the law requires it.
I don't sell your data, I don't show adverts, and I don't use your data for marketing or to profile you.
Who sees what
- Everyone: your username on leaderboards, in Maximus World and in online games; your profile (unless you make it friends-only or hidden); songs you publish.
- Your friends: what you send them (messages, photos), which app you're in while you're online, and a friends-only profile.
- Me: I can see account and game information (usernames, when an account was last active, balances, scores and match results) on a private admin page, to support players and keep things fair. I don't read private messages or look at private photos, except something that's been reported to me, which I need to see to deal with the report.
Other services that help run MDT
- Supabase hosts the database and the sign-in system. Your account, saves, messages and photos are stored there.
- Cloudflare hosts the website itself. Like any web host it sees your IP address and basic request details when you load a page.
- jsDelivr serves some of the code libraries the games use (such as the 3D engine), and Google Fonts serves the lettering in some apps. Both see your IP address when your browser fetches them.
- Google, only if you choose Continue with Google or connect a Google account.
- Stripe, and Apple with RevenueCat in the iOS app, would handle payments if buying MXC is switched on again.
Some of these companies are based outside the UK, mainly in the United States. Where that happens, your data is protected by the safeguards UK law requires (such as the UK's data bridge with the US or standard contract clauses).
What's kept on your device
The apps use your browser's storage (not tracking cookies) for things that make them work: keeping you signed in, your settings, recently played apps, a guest's saves and answers, and caches that make pages load faster. None of it is used to track you, and there are no analytics or advertising cookies, so there's nothing to accept or refuse. Some apps read a photo you choose (for example, Full-Time reading a results screenshot) entirely on your device; the photo isn't uploaded.
How long I keep it
- Your account and everything in it: for as long as you have the account. Delete it and it's removed from the live systems straight away (backups roll off within a few weeks).
- Reports: up to a year after they've been dealt with, longer only if needed for a safety or legal reason.
- Support emails: as long as needed to help you, then deleted.
- Any purchase records: as long as the law requires (usually six years).
Your rights
You can ask to see the data I hold about you, have it corrected, have it deleted, get a copy to take elsewhere, or object to how it's used. The quickest way to delete everything is the Delete account button in any app's account settings. For anything else, email [email protected] and I'll reply within a month.
If you're unhappy with how I've handled your data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk. I'd appreciate the chance to put it right first.
Children
Anyone can play as a guest. MDT accounts are for people aged 13 and over; if you're under 13, please play as a guest, where nothing is sent to me. Accounts are private by default where it matters: only friends can message you, you choose who your friends are, and anyone can be blocked or reported. The casino, poker and playing for MXC are only for 18s and over. If you think a child under 13 has an account, tell me and I'll remove it.
Websites I build for businesses
If I build a website for a business, enquiries sent through that site's contact form are stored for the business in the same database. For that data the business is in charge (the controller) and I only store it for them (the processor). Their own privacy notice covers it.
Changes
If something important changes, I'll update this page and the date at the top, and say so in the update log.
Contact
Anything about your data: [email protected]. The rules for using MDT are in the Terms of Use.