Quick answer: Players want to report bugs without revealing identity. An anonymous-by-default system with optional contact info keeps both privacy and follow-up channels open.
Anonymous reports respect privacy. Contact-required reports respect engineering. Both at once is the design challenge.
Anonymous default
No login required. Default report includes no personally-identifying info beyond device IDs.
Optional contact
Players who want follow-up provide email or Discord handle. Encrypted at rest; visible only to support.
Aggregate analytics only
Crash counts, frequency, device distribution. No per-user tracking. Reports analyzed in aggregate.
Player-controlled deletion
Players can delete their reports via a token. Trust is earned through showing the player has control.
“Privacy is a design choice. The choice shapes player trust.”
Privacy-positive design is also legally simpler. GDPR/CCPA compliance is easier when you collect less.