Security

At 3-Minute Animal we consider your data of utmost importance. We aim to be transparent about our data security and user privacy practices.

What we collect and why

  • Slack workspace information
    • Team name, to address your organization in 3-Minute Animal app user interfaces and communications
    • Team ID and standard OAuth2 fields, to support the Slack-app integration and authentication
    • The number of members in your game channels, to understand service usage
  • User profile information for members of game channels only
    • User IDs, names, handles, and profile picture URLs, to support 3-Minute Animal app user interfaces
  • User profile information for the app installer user
    • Email address, stored in Stripe only, to support direct communications for the sole purposes of managing the 3-Minute Animal app installation and service subscription
  • Message posts within game channels only
    • References to messages containing embedded image files, posted within the open game window only, for interacting with the game
    • Image data for messages posted within the open game window only, for service in 3-Minute Animal app user interfaces, or sharing
    • Emoji reaction activity on messages posted within the open game window only, for tracking game entry interactions
    • Note: Textual message content is never examined or stored

No data is ever shared or used outside of your Slack workspace without your explicit prior written or electronic consent.

What can the 3-Minute Animal bot see?

The 3-Minute Animal bot can see all messages and user interaction, such as emoji reactions, in channels for which the bot is a member only. It disregards message content posted outside of an open game window. The bot listens for and responds to slash-command executions and shortcut invocations from any channel.

Where is 3-Minute Animal data hosted?

Our Slack app services and databases are hosted and managed on the Amazon Web Services (AWS) platform. Find more information on AWS security and compliance, here.

All 3-Minute Animal app data is encrypted at rest with AES-256.

Authentication

The 3-Minute Animal app integrates with Slack’s OAuth 2.0 protocol, for secure communication between Slack servers and 3-Minute Animal app servers, as well as to support user authentication with 3-Minute Animal web user interfaces (i.e. the Fun Dashboard).

Learn more about OAuth 2.0, here.

Communication

All data transferred between Slack servers and 3-Minute Animal app servers, and between user browsers and 3-Minute Animal app servers, is protected by HTTPS encryption with a minimum protocol of TLS 1.2.