Privacy Policy

DotBox ("the app", "we", "us") is a Dots & Boxes game. Most of your data stays on your device. When you choose to play online multiplayer, a small amount of data is sent to our game server so we can connect you with another player. This policy explains exactly what is stored on your device, what is sent online, how it is used, and your rights regarding that data.

What stays on your device

The following information is stored on your device using the Hive database and is never transmitted, except where noted under "Online multiplayer" below:

• Nickname / username — the display name you choose during onboarding.
• Game statistics — wins, losses, draws, total games played.
• Experience points (XP) and level — earned through gameplay.
• Streaks — current and best win streaks.
• Daily-challenge progress — completion status and timestamps for daily puzzles.
• Settings — in-app preferences (e.g. sound, difficulty defaults).
• Online identifier — a random ID generated on your device the first time you use online features (see below).

Single-player (vs Bot) and local Pass & Play modes are fully offline and send nothing over the network.

Online multiplayer

When you use online multiplayer mode, the app communicates with our hosted game backend (powered by Supabase) to create and join game rooms and to sync moves between players in real time. The following data is sent to and stored on the server:

• Online identifier — a random, app-generated ID (a UUID) created on your device. It is not a hardware device ID, advertising ID, phone number, or email address. It is used solely to identify you to your opponent within a game session.
• Username — the handle you choose, used so your opponent can see who they are playing and so usernames remain unique.
• Room data — the invite code, board size, and which players (by online identifier) are in a room.
• Game moves — the lines drawn during an online match, exchanged so both players see the same board. Moves are tied to your online identifier and the room.
• Last-seen timestamp — used to manage active sessions.

We do not collect your real name, email address, phone number, contacts, location, IP-based location, camera, or microphone through online multiplayer.

Analytics & crash reporting

To understand how the app is used and to diagnose problems, DotBox uses Google Firebase:

• Firebase Analytics — collects anonymous, aggregated app-usage and interaction events.
• Firebase Crashlytics — collects crash logs and diagnostic information when the app encounters an error.

These services may collect app-instance identifiers, device and performance information, and usage events. This data is processed by Google as described in Google's Privacy Policy and the Firebase Privacy and Security documentation. We use it only to improve the app's stability and experience.

How your data is used

• On-device data powers gameplay, your profile, progression, and daily challenges.
• Online multiplayer data is used only to match you with an opponent and run the live match.
• Analytics and crash data are used only to measure usage and fix bugs.

We do not use your data for advertising, profiling, or any purpose unrelated to operating and improving the app.

Data sharing

We do not sell, rent, or trade your personal information. Data is shared only with the service providers that make the app work:

• Supabase — hosts the online multiplayer backend.
• Google Firebase — provides analytics and crash reporting.

These providers process data on our behalf, subject to their own privacy and security terms. The app contains no advertising SDKs and no social-login or account systems.

Data security

Data sent to the multiplayer backend and to Firebase is encrypted in transit (HTTPS/TLS). Your on-device data is protected by your device's operating-system sandboxing.

Children's privacy

DotBox is intended for users aged 13 and over and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided information through online multiplayer, contact us (below) and we will delete it.

Data deletion

• On-device data: Use the Reset option in Settings, or uninstall the app — both clear your local nickname, stats, XP, streaks, daily-challenge progress, and settings. Uninstalling removes all local app data, as enforced by the operating system.
• Online multiplayer data: Room and move data is transient and removed as game sessions end. To request deletion of your online profile (online identifier and username) from our backend, email us at the address below and we will delete it.

Changes to this policy

If we make material changes to this policy, we will update the effective date at the top of this page and note the change in the app's release notes. Continued use of the app after an update constitutes acceptance of the revised policy.

Contact

Questions, concerns, or data-deletion requests about this privacy policy? Contact us at hello@takshalabs.com.