Privacy policy

Last updated 27 September 2026

Dos Play is a two-player game for one phone lying between you, two phones playing together from anywhere, or a browser at dosplay.app/play. It has no accounts and no sign in. When you play on one phone or in your browser, your game stays on that device. When you pair two phones, link a browser or buy a deck, we keep only what is needed for that to work, under random identifiers with no email, password or Apple ID attached.

The short version. Your names, colours, answers, scores and streaks live on your phone or in your browser. If you pair two phones, the first names and colours you chose are stored with the pairing so each phone can show them, and your rounds pass through our server under random identifiers, never your Apple ID or email. If you buy a deck on the web, Stripe handles the payment and we keep a purchase record and the receipt email Stripe gives us, so we can deliver and recover what you bought. We collect anonymous usage statistics about which games get played, and in the app you can switch that off in Settings.

What stays on your device

When you play on one phone, all of the following is stored locally and is never transmitted anywhere:

The names and colours you choose for each partner
Every answer, guess, drawing and typed statement in any game
Your scores, win records, streaks and game history
Your daily question answers and streak
Your reminder time and app settings

Deleting the app deletes all of it. There is no backup on our side and no way for us to recover it.

Two-phone play

Playing across two phones needs a server in the middle. If you use it, here is what happens:

The app creates an anonymous session: a random identifier with no email, password, name or Apple ID attached. There is still nothing to sign up for.
You and your partner link up with a short pairing code.
During a game, your taps, answers and round results travel through our server (hosted on Supabase) to your partner's phone, so both screens stay in step.
Shared score totals are stored under your couple's random identifiers, so the scoreboard matches on both phones.
The first names and colours you chose are stored on our server with the pairing, so the phone you paired with can show them. They are shared with no one else.

None of this is linked to who you are, and we could not connect it to you if we tried. Playing on one phone involves no server at all.

Playing in your browser

The web game at dosplay.app/play works like one-phone play:

The names you type, your language, your sound setting and which cards you have already seen are stored in your browser's local storage. They are never sent to us, and clearing the site's data in your browser removes them.
Playing sends nothing to our server. Only when you link your phone or buy a deck does the page create an anonymous session, the same kind of random identifier two-phone play uses, with no email, password or name attached.
Linking your phone connects that session to your couple, so decks you own work in both places. You can unlink the browser from the page at any time.
To decide whether web checkout is offered, the site reads which country your connection comes from, as reported by our hosting provider, Cloudflare. It is used for that one decision and not stored.

Buying decks

Decks are one-time purchases that unlock cards for your couple, on your phones and in a linked browser.

On the web, payments are processed by Stripe. We never see your card details. We store a purchase record (which deck, the amount and currency, when, and Stripe's payment reference) and the receipt email address Stripe gives us. We use them only to deliver your deck, to help you recover it, and to handle refunds, never for marketing.
In the app, purchases go through Apple. The app sends Apple's signed record of the purchase to our server so the deck unlocks for both of you and in a linked browser. It contains the product and transaction identifiers, not your name, email or Apple ID.

Purchase records sit under your couple's random identifiers, next to the two-phone score totals.

What we optionally collect

If anonymous usage sharing is on, the app sends a small number of events to PostHog, our analytics provider, so we can see which games people actually enjoy and which ones to improve. Those events contain:

Which game was started or completed, and how long it took
Which entry point was used (quick play, date night, daily question)
Your app version, iOS version and device platform
A random identifier generated on your device at install time

That identifier is not linked to your name, your Apple ID, your email, or any advertising identifier. We cannot use it to work out who you are.

The web game sends the same kind of anonymous events from your browser: which game was started or finished and how long it took, whether the deck shop was opened, and whether a purchase or link went through. It never sends the names you type. A content or tracker blocker in your browser stops these events, and the game works identically either way.

What we never collect

Your phone number, Apple ID or any account identity. The only email address we ever hold is the receipt email Stripe gives us when you buy a deck on the web.
Contacts, photos, location, microphone or camera data
Advertising identifiers. There are no ads.

Your answers, guesses and drawings never leave your phone in one-phone play. In two-phone play they go to your partner's phone through our server, tied only to random identifiers, and we do not read or profile them.

Turning it off

Open Settings in the app and switch off Share anonymous usage. Nothing further is sent from that moment on. The app works identically either way.

Children

Dos Play is intended for adults in a relationship and is rated 9+ on the App Store. It is not directed at children under 13 and we do not knowingly collect information from them.

Notifications

If you turn on the daily question reminder, the app schedules a local notification on your device. It is generated on your phone. No server is involved and no push token is sent anywhere.

Data retention

Anonymous usage events are retained by PostHog for as long as they remain useful for improving the app, and never longer than 24 months. The first names and colours you paired with, and shared score totals from two-phone play, stay on the server under your couple's random identifiers so both phones stay in step. Purchase records and receipt emails are kept for as long as your decks stay unlocked, and for as long as tax and accounting rules require. Everything else lives only on your device or in your browser, for as long as you keep the app installed or the site's data in your browser.

Your rights

Because we hold almost no information that identifies you, there is generally little for us to look up, export or delete on request. To remove everything the app holds, delete the app, or use Reset all scores in Settings to clear your game history while keeping your names. To remove what the web game holds, clear the site's data in your browser. If you would like your couple's paired names and two-phone score history, a purchase record or a receipt email removed from the server as well, email us and we will work out which records are yours together. Removing a purchase record also removes the decks it unlocked.

Changes

If this policy changes in a way that affects what we collect, we will update this page and the date at the top.

Contact

Questions about privacy: adrielconde9@gmail.com