Legal

Privacy Policy

This policy covers the DokoArena website and Android and iOS apps. It explains the data used for accounts, gameplay, advertising, crash reporting, and optional memberships. Updated October 20, 2026.

Who is responsible

Space Coast Digital Services LLC, doing business as Palm Bay Digital, operates DokoArena and is responsible for the account and gameplay data described here. Contact us using the email address below.

Account and gameplay information

We store your email, public username, profile, linked sign-in methods, authentication records and sessions, preferences, learning progress, game actions, Match results, ratings, and membership status. Security records can include IP addresses and device or browser information. We use these records to sign you in, run and synchronize games, prevent abuse, and support your account. Other players can see your public username, profile information, and the results of Matches they play with you. Lobby chat messages, reports, and feedback you submit are also stored.

Sign-in, hosting, and service providers

Better Auth runs on Convex for account authentication and data storage. Email/password sign-in stores a password hash, not your readable password. Google and Facebook sign-in receive the authorization request and return provider identifiers and permitted profile details, such as email, name, and profile image. Your provider name can be used to suggest a username; it is not automatically published as your username. Sign in with Apple is supported in code but is not currently enabled in production. Resend delivers verification and password-reset emails. Vercel hosts the website. Expo delivers native app updates and receives technical update requests, such as platform and runtime information. These services receive network information, including IP addresses, when you connect.

Cookies and device storage

We use cookies and browser or device storage for sign-in, language, appearance, game preferences, and learning progress. The website currently loads no Google advertising scripts or advertising cookies. Native advertising uses separate consent controls and SDK storage as described below.

Native advertising and consent

Free native play can show Google AdMob interstitial ads between Games against computer players. Plus members are exempt. Google User Messaging Platform, or UMP, manages the available consent choices before the advertising SDK initializes or requests an ad. If consent cannot be obtained or ads are not permitted, we skip the ad. You can revisit available choices under Settings > Ad privacy. We request non-personalized ads. This does not mean no data is collected: Google may process IP addresses and approximate location inferred from them, device or advertising identifiers, ad views and interactions, and diagnostic and performance information for advertising, measurement, and fraud prevention. We also store account-linked ad eligibility, requests, impressions, clicks, dismissals, and failures with session, Game, platform, and timestamp information. We do not send your email, username, or card hands to AdMob.

Crash reporting

Production native apps use Sentry, hosted in the EU, to report crashes and errors so we can fix faults. Error events are retained for up to 90 days, subject to a shorter limit under the active Sentry plan. Reports contain timestamps, severity, generic error descriptions, stack locations, and build debug identifiers needed to identify failing code. Our filters remove account identifiers, emails, credentials, game data, breadcrumbs, attachments, and arbitrary error messages or context. Session recording, performance tracing, and profiling are disabled. Sentry receives the connection IP address during delivery; the production project is configured to prevent IP storage and scrub geographic fields. This crash reporting is separate from advertising consent and is not used to personalize ads.

Optional web payments

Stripe processes optional Plus membership purchases on the website. When creating a Stripe customer and checkout, we send your account email, display name, and Player ID to Stripe, including the Player ID in checkout and subscription references. Stripe also receives the payment and billing information you enter. We store Stripe customer and subscription references and membership status, not full card numbers. The native apps read membership entitlements but currently contain no purchase or checkout flow.

Retention and account deletion

Account and gameplay records remain while needed to provide the service. Lobby chat messages become eligible for scheduled deletion after 365 days. You can start irreversible account deletion in Profile > Account > Delete Player account or through the web deletion page linked below. Renewing subscriptions must be canceled and outstanding billing issues resolved first. Deletion removes your account, profile, sign-in methods, sessions, membership row, learning progress, ratings history, ad activity, feedback, and other account-management records. Completed Matches and their frozen participant names remain for opponents' history and integrity review. Moderation reports, sanctions, and integrity aggregates also remain. Minimal deletion records keep player and Stripe references to reject delayed billing events; authentication references are cleared when cleanup finishes. These retained operational records have no automatic deletion deadline in the current implementation. Interrupted provider cleanup is retried with account access already revoked. Deleting your DokoArena account does not delete independent records held by Google, Meta, Stripe, or other providers under their own retention policies.

Request account deletion

Your choices and privacy rights

We process account and gameplay data to provide the service you request, security and integrity records for our legitimate interest in protecting it, and consent-dependent advertising storage or access according to your choices. Where applicable law grants these rights, you may request access, correction, deletion, restriction, portability, or object to processing by contacting us. You may withdraw advertising consent through Ad privacy without affecting earlier lawful processing and may complain to your local data protection authority. Our providers may process data outside your country, including in the United States. Contact us for information about the applicable international-transfer arrangements and provider retention periods.

Contact

For privacy questions or to exercise your rights, email: tim@palmbaydigital.com