Privacy policy

Where your data lives

What stays on your device

Everything you make in Dominex is stored locally: saved matches and their history, daily-map progress, settings such as difficulty and board palette, and any maps you create with the editor. This data is never uploaded and we cannot see it, except for a match replay you choose to share and the wins you rank. Deleting the app, or clearing the browser’s site data for the web version, removes it permanently. There is no cloud copy to restore from.

Shared replays

When you tap Share on a finished match that has a replay, the app uploads that match so its link works: the map and its title, every move and board, the result, the difficulty, and the starting land. Nothing else is sent, so a replay carries no name, account, device identifier, or date.

Anyone with the link can watch the replay, and links can be passed on, so share only matches you are happy for others to see. A custom map's title is shown with its replay. A replay from the start of an open leaderboard's map, the day's free map or the week's bonus map, can be watched only once that leaderboard closes, so it does not give the route away. Shared replays are stored by Cloudflare, our hosting provider, and kept so their links keep working. To have a replay removed, send us its link through the contact form.

Leaderboards

Leaderboards are optional. When you join, the app creates a recovery code on your device and sends it with the nickname you choose. We keep a one-way hash of the code, not the code itself, along with a random profile ID, your nickname, and when the profile was created. Your nickname is public: it appears on the leaderboards beside your ranks and scores, so do not use your real name. Tapping a nickname shows that player’s card: the month the profile was created, their record on the daily leaderboards, and their latest results, gathered from the leaderboards they ranked on.

Once you rank on a week’s bonus leaderboard, a player’s card lets you invite them to it. We keep who invited whom until that leaderboard closes, and the invited player sees your nickname in the app and, if they turned on rank alerts, in a notification. An invite carries nothing else.

After you join, each win that can be ranked, a Legend or Casual conquest of that day’s free map or a Legend conquest of that week’s bonus map, is uploaded with its score: the map, every move and board, the result, and the difficulty. Our server replays the match to check it. We keep the replay behind your best result on each leaderboard, with the scores of your ranked wins and when each was sent and checked. The replays of your other wins are deleted once checked, except that a win our server cannot confirm is kept for 14 days so we can find out why. Nothing else about you or your device is sent with them.

After a leaderboard closes, the replay behind each result on it is published. The leaderboard may link to it beside your nickname, and a share of that match links to the same replay. The replay itself names no player. A replay that has been published stays at its link if you later delete your profile, but no longer appears beside your nickname.

Your recovery code stays on your device, and anyone who has it controls your profile; You → Ranked profile shows it so you can restore the profile on another device. You can rename or delete your profile there at any time. Deleting it permanently removes your nickname, your results, and the replays kept for them that have not been published. If you lose the code, send us your nickname through the contact form to have the profile deleted. We may rename or remove a profile whose nickname is offensive or impersonates someone; to report one, use the contact form.

In the iOS app, reminders before a leaderboard closes are scheduled on your device and send nothing. Rank alerts are optional: when you turn them on, the app sends your device’s notification address, which Apple issues for this app alone, and its offset from UTC, and we keep them with your ranked profile so our server can ask Apple to deliver alerts when someone passes you and your final place after each leaderboard closes, never at night where you are. We also record which alerts were sent, so each comes once. Turning rank alerts off, or deleting your ranked profile, deletes the address.

Feedback after a match

For a short time, a match result may ask what you think of the computer players. Nothing is sent unless you tap an answer. Your thumbs up or down, the reason you pick, and any comment you write are sent with the finished match’s difficulty, map, result, and number of rounds, whether you play on iOS or the web, whether you had played before the computer players changed, and the date of your first match on this device. A random ID created for the answer lets a reason or comment you add replace it. If you have a ranked profile, the answer is kept with it, so we can read it beside your leaderboard results and replays; deleting your ranked profile removes that link, and the answer stays without it. Otherwise the answer is anonymous. Nothing ties an answer to your device. Answers are stored by Cloudflare, our hosting provider, are never shown publicly, and are used only to tune the computer players.

Premium purchases in the iOS app

Premium is a one-time purchase made through Apple’s App Store. Apple handles the payment itself; we never receive your payment details.

To deliver the unlock and let you restore it later, the app uses RevenueCat, a purchase-management service. RevenueCat processes your purchase history—the record that Premium was bought—under a randomly generated identifier. This data is used for app functionality and aggregate sales analytics. It is not linked to your identity and is not used for tracking. This matches the app’s privacy disclosure on the App Store.

The website and web app

Cloudflare, our hosting provider, processes standard technical information, such as your IP address and pages requested, to deliver and protect the website and web app. We do not use this information to identify or profile you, and the site sets no advertising or analytics cookies. Once the web app has loaded online, its core game can be played offline. Installation is optional. The editor, Stats, and help screens must each be opened online once before they work offline.

The contact form

The contact form on the Support page is optional. When you send a message, we receive your name, email address, chosen topic, message, and the address of the page you sent it from. We use them only to answer you, and we reply from our own inbox.

When you start filling in the form, the page loads Cloudflare Turnstile to check that a person, not a bot, is sending it. Cloudflare processes technical signals from your browser and your IP address to run that check and improve its bot detection, not for advertising.

The website does not store your message. It is passed to Resend, an email delivery service, which sends it to us as a single email, with your address set as the reply address, and keeps delivery records under its own privacy policy. We keep that email only as long as we need it to help you. To ask us to delete it, send a privacy request through the same form.

Children

The same rules apply to everyone: the game does not collect personal information from anyone, including children. A ranked profile holds only the nickname a player chooses, which should not be their real name. The contact form receives only what someone chooses to send.

Changes to this policy

If our data practices change, we will update this page and revise the effective date above before the change takes effect.

Contact

For privacy questions or help with the game, send us a message from the Support page.