Hi, my generator (rwczus7xee - Dino Runner) is a Chrome dino runner game with a public leaderboard and live chat. It got an automatic Privacy warning. There's no sensitive data involved: only player-chosen nicknames, game scores and chat messages (all meant to be public), plus IP/device used solely to bind nicknames to their owners (anti-theft) and count unique visits. I've added visible privacy notes in the app itself (in 5 languages) explaining exactly this to visitors. I requested priority review twice but got "nothing has changed". Could someone please take a look? Thanks!

you are viewing a single comment's thread
view the rest of the comments
[–] 2 points 22 hours ago*

Hi, sorry about this, the moderation flags currently don't give any specific info to explain what caused it, so I understand the confusion. For your specific case, it may be a coding mistake by your AI if you used one to create it - try pasting the message below to the AI Helper:


The Privacy warning isn't about nicknames, scores, or public chat. Those are fine. It's about private messages. The DM panel says "Private", but two kinds of people can read anyone's DMs.

First, you: your admin/creator password passes the ownership check in nickCallerOwns, which dmPoll and dmSend use. If you want admin/creator access to DMs for moderation, just make that clear to users in the DM panel (for example "Admins can read private messages for moderation.").

Second, other players on the same IP address (same home, school or mobile network): for normal nicknames, nickCallerOwns also accepts a matching IP, so they can take a nickname and read its DMs. To fix it, make dmPoll and dmSend accept only the nickname's real owner (the uuid), not your admin/creator password or the IP. Then request a review again.


(the above message was written by an AI, I haven't personally checked so it could be wrong - let me know if you disagree)

  • source