Security

At 3-Minute Animal we consider your data of utmost importance. We aim to be transparent about our data security and user privacy practices.

What we collect and why

  • Slack workspace information
    • Team name, to address your organization in 3-Minute Animal app user interfaces and communications
    • Team ID and standard Oauth2 fields, to support the Slack-app integration and authentication
    • The number of members in your game channels, to understand service usage
  • User profile information for members of game channels only
    • User IDs, names, and handles, to support 3-Minute Animal app user interfaces
    • User emails, to support direct communications for the sole purposes of interacting with or managing the 3-Minute Animal app
  • Message posts within game channels only
    • References to messages containing embedded image files, posted within the open game window only, for interacting with the game
    • Image data for messages posted within the open game window only, for service in 3-Minute Animal app user interfaces, or sharing
    • Emoji reaction activity on messages posted within the open game window only, for tracking game entry interactions
    • Note: Textual message content is never examined or stored

No data is ever shared or used outside of your Slack workspace without your explicit prior written or electronic consent.

What can the 3-Minute Animal bot see?

The 3-Minute Animal bot can see all messages and user interaction, such as emoji reactions, in channels for which the bot is a member only. It disregards message content posted outside of an open game window. The bot listens for and responds to slash-command executions and shortcut invocations from any channel.

Where is 3-Minute Animal data hosted?

Our Slack app services and databases are hosted and managed on the Amazon Web Services (AWS) platform. Find more information on AWS security and compliance, here.

3-Minute Animal app data is stored in AWS Aurora, where data is encrypted at rest with AES-256.

3-Minute Animal image data is stored in an AWS private S3 bucket, where data is encrypted at rest with AES-256.

Authentication

The 3-Minute Animal app integrates with Slack’s OAuth 2.0 protocol, for secure communication between Slack servers and 3-Minute Animal app servers, as well as to support user Single Sign-On (SSO) with 3-Minute Animal web user interfaces (i.e. the Fun Dashboard).

Learn more about OAuth 2.0, here.

Communication

All data transfered between Slack servers and 3-Minute Animal app servers, and between user browsers and 3-Minute Animal app servers, is protected by HTTPS encrption with a minimum protocol of TLS 1.2.