Last updated September 14, 2026

Privacy at Doomigos

You can play Doomigos as a guest. Creating an account is optional and exists so you can keep a player card, game history, and private taste profile across sessions and devices.

Age and date of birth

The public beta is for people aged 16 and older. We do not request or store a date of birth. If we learn that someone under 16 has provided personal data, we will take appropriate steps to remove it.

What we store

• A random installation identifier and signed guest credential for reconnecting rooms and securely claiming guest history.
• If you sign in, your Supabase account ID, email, authentication provider, display name, and optional avatar.
• Game participation, scores, ranks, and eligible personal taste answers needed for game history and your private taste summary.
• Limited product events such as starting authentication, completing a guest-history claim, or opening the taste page.
• Weekly game counts for signed-in and guest identities, plus subscription status and billing-provider identifiers for Doomigos+. Doomigos does not store full payment-card details.
• If you submit a safety report, the report category, optional details, and relevant room, player, message, or video context needed to review it.

How taste works

We use only answers representing your own opinion. Predictions about other players do not become taste data. Raw eligible interactions are converted into explainable category and tag affinities with evidence and confidence counts. Taste is not currently used to personalize game decks.

Who processes data

Cloudflare hosts the game and room infrastructure. Supabase stores accounts and private application data. Google processes Google sign-in when you choose it. YouTube, TikTok, and Instagram process requests for their embedded players under their own privacy terms. Google may process device, cookie, consent, and ad-impression data when ads are enabled for free players. Stripe processes checkout, payment, and subscription data for Doomigos+ under its own privacy terms.

Optional Google Analytics

Google Analytics is on by default. It uses cookies and processes visit, device, browser, and engagement data to help us understand how the site is used, separately from advertising. We honor previously saved analytics opt-outs. Our page-view events omit room codes, query strings, and URL fragments; we do not send player names, account IDs, chat messages, or game answers to Analytics. You can turn it off using Analytics preferences below. Turning it off clears our analytics cookies and reloads the page to stop collection. It does not erase data already received by Google. Google Analytics retention is managed separately in the Analytics property settings.

Your controls

Signed-in users can edit their player card, clear private taste history, sign out, or delete their account. Clearing taste does not corrupt anonymous aggregate game or video statistics. Account deletion removes private account data, revokes room access, and removes public shares linked to the account. Affected rooms return to the lobby. Late background writes cannot restore a deleted identity. Anonymous global game and video totals remain.

Retention and optional advertising

Rooms expire after two hours without activity or 24 hours in total. Public share links expire after 30 days. You can decline optional third-party ads or withdraw consent using Advertising preferences below; gameplay is unchanged. First-party client analytics expire after 90 days; resolved safety reports after 180 days; operator audit records after one year. Unresolved safety reports remain until reviewed. Billing event IDs remain for duplicate-payment protection. Automatic expiry periods for private taste answers, predictions, reactions, viewing history, game results and quota records are still being established. These records remain until you clear the applicable data or request deletion. Pending database writes expire after seven days; a minimal room directory lasts eight days so erasure can locate them. You can clear taste or request deletion sooner. Deletion markers contain identifiers only and prevent old credentials and delayed writes from restoring deleted data.

Exports work for signed-in accounts and for an unclaimed guest identity saved in this browser. Linked guest data requires account sign-in. The export includes retained records and available room data, with pagination for large histories. Passwords, room credentials, other players’ private data and confidential report evidence are excluded. Exports read a live system; pending records can also appear among subsequently saved records.

Clearing taste also clears active room profiles. Answers from a game already in progress do not rebuild that profile. Games started afterward can build fresh taste evidence. Deletion requests remain queued until their room and share cleanup is acknowledged. Backup retention and billing-receipt retention require separate operator review.

YouTube metadata is refreshed regularly or removed after 30 days, including copied discovery evidence. Game ratings and taste predictions belong to Doomigos and are not YouTube metrics. YouTube may receive device data when its player loads and additional data during playback; its privacy policy applies to that processing.

Safety reports

Reports are visible only to authorized service operators. We use them to investigate abuse, enforce the terms, and remove unsuitable content. Other room participants are not told who submitted a report.

Security and sharing

Private profiles, subscription records, and taste data are protected by authenticated APIs and row-level database security. We do not sell personal data or create public taste profiles. Free play is supported by advertising; Doomigos+ subscribers do not receive ads.

Questions

A public support address has not been published yet. For room safety issues, use Report on a player or video.