Legal
Privacy Policy
This policy covers the DokoArena website and Android and iOS apps. It explains the data used for accounts, gameplay, advertising, crash reporting, and optional memberships. Updated October 20, 2026.
Who is responsible
Space Coast Digital Services LLC, doing business as Palm Bay Digital, operates DokoArena and is responsible for the account and gameplay data described here. Contact us using the email address below.
Account and gameplay information
We store your email, public username, profile, linked sign-in methods, authentication records and sessions, preferences, learning progress, game actions, Match results, ratings, and membership status. Security records can include IP addresses and device or browser information. We use these records to sign you in, run and synchronize games, prevent abuse, and support your account. Other players can see your public username, profile information, and the results of Matches they play with you. Lobby chat messages, reports, and feedback you submit are also stored.
Sign-in, hosting, and service providers
Better Auth runs on Convex for account authentication and data storage. Email/password sign-in stores a password hash, not your readable password. Google and Facebook sign-in receive the authorization request and return provider identifiers and permitted profile details, such as email, name, and profile image. Your provider name can be used to suggest a username; it is not automatically published as your username. Sign in with Apple is supported in code but is not currently enabled in production. Resend delivers verification and password-reset emails. Vercel hosts the website. Expo delivers native app updates and receives technical update requests, such as platform and runtime information. These services receive network information, including IP addresses, when you connect.
Cookies and device storage
We use cookies and browser or device storage for sign-in, language, appearance, game preferences, and learning progress. The website currently loads no Google advertising scripts or advertising cookies. Native advertising uses separate consent controls and SDK storage as described below.
Native advertising and consent
Free native play can show Google AdMob interstitial ads between Games against computer players. Plus members are exempt. Google User Messaging Platform, or UMP, manages the available consent choices before the advertising SDK initializes or requests an ad. If consent cannot be obtained or ads are not permitted, we skip the ad. You can revisit available choices under Settings > Ad privacy. We request non-personalized ads. This does not mean no data is collected: Google may process IP addresses and approximate location inferred from them, device or advertising identifiers, ad views and interactions, and diagnostic and performance information for advertising, measurement, and fraud prevention. We also store account-linked ad eligibility, requests, impressions, clicks, dismissals, and failures with session, Game, platform, and timestamp information. We do not send your email, username, or card hands to AdMob.
Crash reporting
Production native apps use Sentry, hosted in the EU, to report crashes and errors so we can fix faults. Error events are retained for up to 90 days, subject to a shorter limit under the active Sentry plan. Reports contain timestamps, severity, generic error descriptions, stack locations, and build debug identifiers needed to identify failing code. Our filters remove account identifiers, emails, credentials, game data, breadcrumbs, attachments, and arbitrary error messages or context. Session recording, performance tracing, and profiling are disabled. Sentry receives the connection IP address during delivery; the production project is configured to prevent IP storage and scrub geographic fields. This crash reporting is separate from advertising consent and is not used to personalize ads.
Optional web payments
Stripe processes optional Plus membership purchases on the website. When creating a Stripe customer and checkout, we send your account email, display name, and Player ID to Stripe, including the Player ID in checkout and subscription references. Stripe also receives the payment and billing information you enter. We store Stripe customer and subscription references and membership status, not full card numbers. The native apps read membership entitlements but currently contain no purchase or checkout flow.
Retention and account deletion
Account and gameplay records remain while needed to provide the service. Lobby chat messages become eligible for scheduled deletion after 365 days. You can start irreversible account deletion in Profile > Account > Delete Player account or through the web deletion page linked below. Renewing subscriptions must be canceled and outstanding billing issues resolved first. Deletion removes your account, profile, sign-in methods, sessions, membership row, learning progress, ratings history, ad activity, feedback, and other account-management records. Completed Matches and their frozen participant names remain for opponents' history and integrity review. Moderation reports, sanctions, and integrity aggregates also remain. Minimal deletion records keep player and Stripe references to reject delayed billing events; authentication references are cleared when cleanup finishes. These retained operational records have no automatic deletion deadline in the current implementation. Interrupted provider cleanup is retried with account access already revoked. Deleting your DokoArena account does not delete independent records held by Google, Meta, Stripe, or other providers under their own retention policies.
Your choices and privacy rights
We process account and gameplay data to provide the service you request, security and integrity records for our legitimate interest in protecting it, and consent-dependent advertising storage or access according to your choices. Where applicable law grants these rights, you may request access, correction, deletion, restriction, portability, or object to processing by contacting us. You may withdraw advertising consent through Ad privacy without affecting earlier lawful processing and may complain to your local data protection authority. Our providers may process data outside your country, including in the United States. Contact us for information about the applicable international-transfer arrangements and provider retention periods.
Contact
For privacy questions or to exercise your rights, email: tim@palmbaydigital.com