Privacy Policy

1. Who we are

Dor Dor ("we", "us", "our") is an interactive party-game platform operated by [[Dor Dor — legal entity name]], based in [[Qatar]]. We are the data controller responsible for the personal data described in this policy.

If you have any question about this policy or how we handle your data, contact us at [[privacy@dordor.app]].

2. What data we collect

We collect only what we need to run the service:

• Account data: your email address, display name, phone number and country code, and your region. You provide these when you sign up.
• Authentication data: if you sign in with Google, we receive your basic Google profile (name, email address) from Google. We never receive or store your Google password.
• Purchase and balance data: your game-credit balance, bundle purchases, promotional codes used, and referral activity.
• Gameplay data: game sessions you start, categories selected, questions served, scores, and which questions you have already seen (so we do not repeat them).
• Technical data: IP address, browser and device type, approximate country (used to show prices in your local currency), and log data generated when you use the service.
• Preferences: your chosen language and game theme.

3. How we use your data

• To create and maintain your account and keep you signed in.
• To run games: build boards, serve questions, track scores, and avoid repeating questions you have already seen.
• To manage your game credits, purchases, promotional codes and referrals.
• To show prices in an appropriate local currency based on your approximate location.
• To keep the service secure — detecting abuse, fraud, and automated attacks, and enforcing rate limits.
• To understand aggregate usage so we can improve the product.
• To respond to you when you contact support.

4. Legal basis for processing

Where data-protection law requires a legal basis, we rely on: performance of our contract with you (running your account and the games you pay for); our legitimate interests (keeping the service secure and improving it); your consent (where we ask for it, such as optional communications); and compliance with legal obligations.

5. Who we share data with

We do not sell your personal data. We share it only with service providers who help us operate:

• Supabase — database, authentication and file storage.
• Vercel — application hosting and delivery.
• Upstash — rate limiting to protect the service from abuse.
• Google — only if you choose to sign in with Google.
• Payment providers — when paid purchases are enabled, a payment processor will handle your payment details. We do not store full card numbers.
• Authorities or advisors — where we are legally required to disclose, or to establish or defend legal claims.

6. International transfers

Our providers may process data on servers outside your country, including in the European Union and the United States. Where data leaves your jurisdiction, we rely on our providers' contractual safeguards for such transfers.

7. How long we keep data

We keep your account data for as long as your account is open. Purchase and transaction records are kept for as long as required for accounting and legal purposes. Gameplay and technical logs are kept for a limited period for security and product analysis. When you delete your account, we delete or anonymise your personal data except where we must retain it by law.

8. Your rights

Subject to applicable law, you may:

• Request a copy of the personal data we hold about you.
• Ask us to correct data that is inaccurate or incomplete — you can edit most of it yourself in your account settings.
• Ask us to delete your account and associated data.
• Object to, or ask us to restrict, certain processing.
• Withdraw consent where processing is based on consent.
• Complain to your local data-protection authority.

9. Children

Dor Dor is a family party game, but accounts are intended for users aged [[13]] and over. We do not knowingly collect personal data from children below that age without parental consent. If you believe a child has provided us with personal data, contact us and we will delete it.

10. Cookies and local storage

We use cookies and browser storage that are necessary for the service to function — keeping you signed in, remembering your language and theme, and preserving an in-progress game if you refresh the page. We do not use advertising cookies.

11. Security

We protect your data with encryption in transit, row-level access controls in our database, hashed credentials handled by our authentication provider, and rate limiting on sensitive endpoints. No online service can be perfectly secure, but we work to protect your data and will notify you of a breach affecting you where the law requires.

12. Changes to this policy

We may update this policy as the product changes. We will update the "last updated" date above, and for material changes we will give you notice in the app or by email.

13. Contact us

For any privacy question or to exercise your rights, email [[privacy@dordor.app]].