Privacy Policy

Virtual DOMination (“the app”, “we”, “us”) is a competitive programming quiz game published by Darseen. This policy explains what personal data the app collects, why we collect it, who we share it with, and the control you have over it. It applies to the mobile app and to the servers that support it.

1. Information we collect

Account information

• Email address — required to create an account and to sign in. Sign-in uses a one-time code sent to your inbox; the app has no passwords.
• Display name and username — chosen by you, shown to other players.
• Account metadata — account creation date, email verification status, and an optional profile image.

Gameplay data

• Progress and standing: level, XP, prestige, chosen faction, faction points, reputation, and in-game currencies.
• Performance statistics: matches played and won in single- and multiplayer, questions answered by difficulty and by language, daily ladder points and streaks.
• Owned items: cosmetics, consumables, season-pass progress, and challenge state.
• Multiplayer activity: the matches you take part in and the other players in them.

Purchase information

• Purchases are processed by Google Play (or the Apple App Store). We never receive or store your payment card, bank, or billing address details.
• Our payment infrastructure provider (RevenueCat) sends us a record of each transaction: a transaction identifier, the product purchased, which entitlements it grants, price and currency, the store it came from, and the purchase date. We store this to keep your premium status and purchased items working across devices and reinstalls.

Technical and device information

• Session data — when you sign in we store a session token along with the IP address and user-agent string of the request, so you can stay signed in and so we can detect abuse.
• Push notification token — only if you allow notifications. Used to send you gameplay reminders (for example the daily ladder). Revoking the permission stops it.
• Server logs — routine request logs containing IP address, timestamp, and the endpoint called, kept for security and debugging.
• Last-seen timestamp — so the game can show online and recent activity.

Correspondence

If you email us for support, we keep the message and your email address so we can respond and follow up.

2. What we do not collect

• No precise or approximate location data.
• No contacts, photos, files, microphone, or camera access.
• No advertising identifier, and no advertising or tracking SDKs — the app shows no ads.
• No third-party analytics or behavioural profiling products, and no cross-app or cross-site tracking.
• No health, biometric, financial account, or government identifier data.

3. How we use your information

• To create and authenticate your account.
• To run the game: matchmaking, scoring, progression, factions, seasons, challenges, and leaderboards.
• To deliver and restore purchases and the entitlements attached to them.
• To send you the transactional emails the app needs to function — for example your sign-in code.
• To send gameplay push notifications, if you have opted in to them.
• To keep the service secure: rate limiting, abuse and cheat detection, and debugging.
• To meet our legal, tax, and accounting obligations.

We do not use your data for advertising, and we do not sell or rent it to anyone.

4. Information visible to other players

Parts of your profile are public inside the game by design. Other players can see your username, level, faction, chosen cosmetics, leaderboard position, ladder points and streaks, and your results in matches you play against them. Your email address is never shown to other players. Choose a username you are comfortable being public.

5. Legal bases for processing (EEA/UK users)

6. Service providers we share data with

We share the minimum data needed with the providers that operate the service. Each is bound to use it only to provide their service to us.

We may also disclose data if required by law, to enforce our terms, or to protect the rights and safety of our users. If the app is ever transferred to another owner, your data may transfer with it; you would be notified before that takes effect.

7. International transfers

Our providers operate servers in the United States and the European Union, so your data may be processed outside your country. Where data leaves the EEA or UK, transfers rely on the European Commission's Standard Contractual Clauses or an equivalent safeguard.

8. Data retention

• Account and gameplay data — kept while your account is active, and deleted when you delete your account.
• Sessions and sign-in codes — expire automatically; codes are short-lived and single-use.
• Server logs — retained for a limited period for security and debugging, then rotated out.
• Transaction records — retained after account deletion where tax and accounting law requires it, reduced to what those obligations need.

9. Your rights and choices

You can, at any time:

• Access a copy of the personal data we hold about you.
• Correct inaccurate data — your display name and username are editable in the app.
• Delete your account and the personal data attached to it.
• Object to or restrict processing based on legitimate interests, and withdraw consent for notifications by turning them off in your device settings.
• Export your data in a portable format.
• Complain to your local data protection authority.

Deleting your account

You can request deletion of your account and its data by emailing [email protected] from the address registered to the account, with the subject “Delete my account”. We will confirm and complete the deletion within 30 days.

Deletion removes your account, profile, gameplay progress, statistics, owned items, and push token. Purchase records are retained only where tax and accounting law requires. Deletion is permanent — progress and purchased in-game items cannot be restored afterwards.

10. Children's privacy

The app is not directed at children under 13 (or the minimum age of digital consent in your country, where that is higher), and we do not knowingly collect personal data from them. If you believe a child has given us personal data, contact us and we will delete it.

11. Security

Data is transmitted over encrypted connections (HTTPS/TLS) and stored on managed infrastructure with access restricted to those who need it. Sign-in uses short-lived one-time codes rather than passwords. No system is perfectly secure, but we take reasonable technical and organisational measures to protect your data, and we will notify affected users and regulators of a breach where the law requires it.

12. Changes to this policy

We may update this policy as the app changes. The “last updated” date at the top always reflects the current version. For material changes we will give notice in the app before they take effect.

13. Contact us

Questions about this policy or your data: [email protected]