Privacy Policy
SiDomino is a dominoes game (Dominican partner dominoes) for iPhone, iPad, Android, Windows and Mac. It is run by Leurys Feliz, an individual developer in the United States ("we", "us"). This policy explains what data the app and our servers handle, and why. We never sell your personal data or share it for advertising. Questions: privacy@sidomino.com.
Playing offline
Games against the computer, Practice, the Score tab (which keeps score of games played at a real table) and all your settings stay on your device. Nothing about them is sent to us, except the facts of a finished match against the computer, which earn you XP (see "Levels and XP" below), and a score you pass on (see "Passing the score" below). Uninstalling the app removes them.
Playing online with friends
You create or join a table with an invite link, a code or a QR code. While you play, our game server relays the game messages between the players' devices: moves, seats, the table name you type, the knocking-hand skin tone you chose and your profile picture or built-in avatar (see "Your profile picture" below).
Other players at the table see your table name, and it also becomes your account's display name. A room is forgotten after 6 idle hours, and we don't keep the game's content after that.
Table chat
At an online table, players can send short text messages (up to 200 characters) and ready-made phrases. Everyone at that table sees them. The room keeps only the latest 50 messages, so that a player who reconnects can catch up, and deletes them 2 minutes after the last player leaves, or with the room. We don't keep any other copy and don't read chats, except when a player reports a message: then the report keeps that message and a few around it, so a moderator can read them (see "Reports, blocks and reviews"). The room marks each message so a report can show it was sent exactly so. You can hide the messages of any player at your table.
Voice chat
Voice chat is optional, in online rooms only. You always join with your microphone off; you turn it on yourself. The host can turn voice chat off for the table, and every player can mute. The app uses your microphone only with your device's permission, and only during voice chat.
Audio goes directly between the players' devices over an encrypted connection. When a direct connection isn't possible, the audio passes through our relay servers, still encrypted. We never record or store voice.
Camera and photos
The camera is used only to scan an invite QR code and, if you choose, to take your profile picture. Scanning happens on your device, and no scan images are sent or stored.
To set a profile picture, you can take a photo or choose one from your library. The app only gets the photo you pick, never the rest of your library. You frame it on the device; only the framed picture is sent to our server.
Your account
Opening an online table or the Friends tab, or finishing your first match against the computer, automatically creates a guest account, with no email. Our servers, in the United States, store:
- a random account id
- your display name (one you choose, or a generated one like "Player 1234")
- your @username (one you choose, or one given automatically)
- your profile picture, if you set one
- your privacy choices (who can see your picture and when you're active)
- your language and account type
- when the account was created, last signed in and last active (see "Active now" below)
- for each device you sign in on: its platform (iOS, Android, Windows, Mac or web), its model (for example "Apple iPhone16,2", not the name you gave your device), the app version, sign-in times and, if you allow notifications, its notification address (see "Notifications" below)
- a device identifier, stored only as a one-way hash: on Android the identifier the system gives our app on that device, elsewhere a random key the app keeps in the device's secure storage. It stays the same if you delete and reinstall the app, and changes only if the device is reset. We use it only to enforce blocks: when a device is blocked for breaking our rules, no account can play online on it (see "Reports, blocks and reviews" below)
Sign-in tokens are stored on our server only as one-way hashes. Your device keeps its token in the system's secure storage (such as the Keychain or the Android Keystore).
Your @username
Your @username is how friends find you and invite you. Anyone who types your exact @username in the app can see your display name and @username, and your profile picture and whether you're active now if your privacy choices allow it. Nobody can browse a list of players. You can change your @username in Settings → Account (once every 30 days after the first change). When an account is deleted, its @username stays reserved for 90 days, so nobody can take it over right away.
Your profile picture
A profile picture is optional. You can use a photo or create a built-in avatar (a drawn character made from a few choices such as shape, color and face). When you upload a picture, our server makes a new small square copy (256 × 256 pixels) and throws away the original, along with any metadata it carried, such as camera details or location. Each picture is stored at its own hard-to-guess web address, and when you change or remove it, the old one is deleted.
In Settings → Account → Privacy you choose who sees your picture: everyone who looks you up by @username or sits at your online table (the default), or only your friends. Everyone else sees your initials. A built-in avatar is also shared at your online tables as its design (the choices you made), so the other players' apps can animate it.
Friends
You can send a friend request to an @username, with an optional short note (up to 120 characters). Only you and that player see the note, in the app; it is deleted when the request is answered or cancelled. An unanswered request expires after 30 days, and a declined one is remembered for 7 days so the same player can't be asked again at once. Friends see each other's display name, @username and profile picture in the Friends tab, and whether the other is active now if their choice allows it. You can remove a friend at any time, or block a player: blocked players can't find you, send you requests or see you.
Table invitations and arrivals
You can invite a friend to the online table you set up. The invitation holds the table's invite link and lasts 2 hours. When you host a table, our server notes which table is yours for as long as the room lives (6 idle hours at most), so that it can tell you when a player joins.
Passing the score
From the Score tab you can pass the score you're keeping to someone else. The app then sends our server the score sheet (team names, the hands written down, totals and games won) and the name you send it under. You get a link and a code; anyone who has them can open the score, on our web page or in the app, for 7 days, after which it is deleted. You can share the link yourself, or send it to a friend in the app, which works like a table invitation. A passed score isn't linked to your account.
Levels and XP
When a match against the computer or at an online table ends, the app sends our server the facts of that match, never XP: a random match id, the kind of game, whether it was online, how many players, the table code (online), each seat as the account id of the player sitting there or "computer", when the match started and ended, the points it was played to, the final scores, your team, whether you won and whether it was a zapato, and counts such as hands played and won, dominoes, capicúas, tranques, passes and opening passes. Practice matches are never sent. Without a connection, the app keeps up to 20 finished matches on the device and sends them later. If the device has no account yet, your first finished match creates a guest account for it (see "Your account").
Our server works out the XP with the rules in force at the time and stores one result per match and player: the facts above, with your account id and @username, the XP each rule earned, your XP and level before and after, your winning streak, and markers for unusual results (for example, a match finished faster than its hands can be played). Results are deleted after 60 days. The server also keeps one progress record per account, for as long as the account exists: your total XP, when you last played, and totals such as matches, wins, streaks, dominoes and capicúas. Your level is worked out from your XP.
Other players see your level, not your XP or your results: your friends in the Friends tab, a player who looks up your @username, and the players at your online table. Only we see the results and progress records, to keep XP fair and to spot cheating. We may correct a player's XP by hand; each correction (the account id, the change and the reason) is kept for 60 days.
When you delete your account, its progress record is deleted at once. Its match results stay until their 60 days run out, without your account id or @username, as a record of the match; another player's result of a match you played in keeps the account id of your seat, which then no longer points to anyone.
Notifications
If you allow notifications on your device, the app gives our server that device's notification address, so your phone can tell you about a friend request, an accepted request, a table invitation, a score passed to you or a player joining your table, even when the app is closed. A notice shows the other player's name. It is delivered through Apple's notification service (on iPhone, iPad and Mac) or Google's (on Android). The address is removed when you sign out, remove the device or delete your account, and you can turn notifications off at any time in your device's settings.
If your account has an email linked, we also send you an email for a friend request, an accepted request, a table invitation or a passed score, at most one per friend and kind of notice in a short time. Friend-request notes and chat messages are never put in emails or notifications.
Active now
While the app is open it checks with our server every few seconds (for table invitations), and the server notes the time of the last check on your account, at most once a minute. From that, your friends can see whether you are active right now, as a green dot on the Friends tab; nobody sees a history, and the dot goes out within a couple of minutes of closing the app. In Settings → Account → Privacy you choose who may see it: everyone who finds you by @username (the default), only your friends, or nobody.
Usage statistics
To see how often SiDomino is used and on what, the app tells our server each time it is opened: the time, a random id made on the device when the app was first opened (not a device identifier), the kind of device (phone, tablet or computer), its model, the operating system and app versions, the app's language, the time zone, the screen size and how long the previous session lasted. Each time a game begins, it also notes the kind of game (for example against the computer, practice or an online table) and, online, your role at the table and how many people sit at it. While the app is open, it tells the server about once a minute which part of the app you are in (the home screen, Friends, the scorekeeper, Settings, a table lobby or a game table, and at an online table that table's code), so we can see how many people are using it right now; this is replaced each minute and deleted 30 days after the app was last open, and only we see it (other players see only what your privacy choices allow). If the device has an account, the account's id and username are noted with it; your moves, your scores, your name, your email and anything you type are never part of it. The other records are deleted after 2 months. They are part of how the app works, so there is no switch for them; we gather them on our own servers only, never share them and never use them for advertising. You can object to this processing by writing to privacy@sidomino.com, or delete your account, which detaches its records from it.
Error reports
When something goes wrong in the app (an error it recovers from, or a crash), it sends our server a report so we can fix it: the error's technical details and where in the app's code it happened, the part of the app you were in (as above), the screens the app showed just before, the same device details as the usage statistics and, if the device has an account, the account's id and username. A crash is saved on the device and sent the next time the app opens. Email addresses and sign-in tokens that appear in a report are masked, and your moves, scores and anything you type are never part of it. Only we see these reports; they are deleted after 45 days. Our own servers' errors are kept the same way.
Suggestions
In the app you can send us an idea: a feature you'd like, an improvement or a problem you met. We keep what you wrote and its kind, your account's id, username and display name and whether it's a guest account, and the app's version, the device's system and its version, and the app's language, so we can read it and take it into account in our work. Only we see suggestions. They are deleted 60 days after you send them, or 60 days after we last mark what we'll do with them.
Signing in with email
Linking an email is optional and lets you reach the same account from other devices. If you do, we store your email address and send you a 6-digit code by email. Codes are stored only as hashes, last 10 minutes and are deleted after use.
We keep a copy of each email we send you (the address, the kind of email, its language, the subject and the text, with any code hidden, and whether it went out) for 30 days, so we can help if one doesn't arrive. Only we see it, and it is deleted with your account.
Contacting us
If you write to us, by email or with the contact form on sidomino.com, we receive your name, your email address, the topic you pick and your message. The form sends them to our mailbox by email; the website itself doesn't store them. We use them only to answer you and follow up, keep them in our mailbox for as long as that takes, and delete them when you ask.
Abuse protection
We use IP addresses to limit how many requests, codes or contact messages can be made. They are stored only as one-way hashes, in counters that expire within an hour. Our hosting providers may keep standard server logs.
Reports, blocks and reviews
When you report a player, we store the report: who made it, the reported player's account id, display name and @username at that moment, what was reported (the player, their picture, a chat line, their name or their voice chat), the reason you chose, your note if you wrote one, the table code, and a copy of the reported picture or of the chat lines around the reported one (marked as checked when our rooms server confirms they were sent exactly so). Voice chat is never recorded. Our moderators read reports to decide what to do. When you block a player, we store that block with your account.
If several different players report the same player within a day, that player's picture and chat may be held automatically until a moderator looks. If we suspend or block an account or a device, we store the reason, when and for how long. A suspended or blocked player can send a review request from the app: we store its message, the email address if they give one so we can reply, and the device identifier described above, and we answer in the app.
How long we keep data
- Guest accounts unused for 180 days are deleted automatically.
- Ended device sessions, with their notification address, are removed after 7 days.
- Your profile picture is kept until you change or remove it, or delete your account.
- Friend requests expire after 30 days unanswered, and declines are remembered for 7 days. Friendships last until one of you removes the other or deletes the account.
- Table invitations last 2 hours, and the note of which table you host lasts as long as the room.
- Table chat messages are deleted 2 minutes after the last player leaves, or with the room (after 6 idle hours at most), except those copied into a report.
- Passed scores are deleted after 7 days.
- Match results are deleted after 60 days, and so are XP corrections. Your progress (total XP and totals) is kept as long as your account.
- Usage statistics are deleted after 2 months, error reports after 45 days, and what the app last said it was doing 30 days after it was last open.
- Copies of the emails we send are deleted after 30 days.
- Suggestions are deleted 60 days after they are sent, or 60 days after we last mark what we'll do with them.
- Reports are deleted 60 days after they are closed (or 60 days after they were made, if never closed), and review requests 60 days after we answer them. A suspension is kept until it ends or we lift it.
- A blocked device's record (the hashed device identifier, the reason and the accounts seen on it) is kept until we lift the block, so a blocked person can't come back with a new account.
- When you delete your account, it is deleted immediately: the account, your name, your @username, your profile picture, your email identity, your friends, friend requests and invitations, your progress (XP and totals), your devices with their notification addresses, your sessions, and the copies of the emails we sent you. Reports about you or made by you and review requests stay until their own 60 days run out, and a device block stays until it's lifted, because they protect other players. Your suggestions and your match results stay until their 60 days run out, without your account's id, name or @username, and XP corrections until their 60 days run out. Copies of an old picture held in network caches or on other players' devices can take some time to disappear.
- We keep only a record that an account was deleted (a one-way hash of its id and the date), to prove the deletion. It contains no personal data.
There are no purchases yet, so we hold no payment data.
Deleting your account
You can delete your account in the app (Settings, then Account, then Delete account), on the web at sidomino.com/delete-account with a code sent to your linked email, or by writing to privacy@sidomino.com from that email. A guest account has no email, so it can be deleted only from the app, or is deleted automatically after 180 days unused.
Service providers
We use a small number of service providers to run SiDomino. They handle data only on our instructions, to provide their service to us, under their own data-protection terms:
- Hosting and cloud providers: our servers, the database, online rooms and the voice relay, profile picture storage, passed scores and the website.
- An email delivery provider: sign-in codes and the notice emails described above.
- An email provider: our mailbox for messages you send us.
- Apple and Google: the app stores that distribute the app, and their notification services for push notifications.
We don't share your data with anyone else, except when the law requires it.
Legal basis
If you are in the EU or the UK, we process your data to provide the service you ask for (contract): your account, online play, chat, friends, invitations, passing scores, and your levels and XP. We rely on your consent for the camera, microphone, photos and notifications, which you give and can withdraw through your device's permissions. We also process data for our legitimate interest in security, preventing abuse, fixing errors and understanding how often and on what the app is used (the usage statistics above), in keeping XP fair (the markers on unusual results and corrections), and in keeping players safe: handling reports, and suspending or blocking accounts and devices that break our rules. If you think a suspension or block is wrong, you can ask for a review in the app or write to us, and a person will look at it. Account data is stored and processed in the United States; some of our providers may handle data, such as live online rooms and the voice relay, in data centers closer to the players.
Your rights
You can ask to access, correct or delete your data, object to its use, or ask questions about it. You can change your name, @username, picture and privacy choices in Settings. Users in the EU and UK (GDPR), California (CCPA/CPRA) and elsewhere can exercise their rights by writing to privacy@sidomino.com. We answer within 30 days.
Children
SiDomino is for people 13 and older. It is not directed at children under 13, and we don't knowingly collect their data. Parents can write to us to have a child's data deleted. Where local law sets a higher age for consent (16 in parts of the EU), you must be that age or have a parent's permission.
Security
Every connection uses HTTPS. Tokens and codes are stored as hashes, and our secret keys are kept in a secured vault, separate from the code. Profile pictures are re-made by our server, so no hidden data in the original file is kept. No system is perfectly secure.
Ads and analytics
SiDomino has no ads, no tracking and no third-party SDKs that collect data. The only usage statistics are the ones described above, gathered by our own servers. If we ever add third-party analytics or ads, we will update this policy first, tell you in the app, and ask for your consent where required.
Changes
We will post updates on this page with a new effective date. For important changes, we will also tell you in the app.