The short version
- We store what the game needs: a username, an optional email, a hashed password, your goof's look and settings, and your play history.
- We set one cookie, and only to keep you signed in. No advertising trackers, no analytics scripts, no third-party cookies.
- We never sell your data and never share it for marketing.
- You can see, export and delete your data from the account page.
What we store, and for how long
| Data | Why | How long |
|---|---|---|
| Guest name and look | To show you in the room | About a month after your last session |
| Account: username, display name, optional email, hashed password | To sign you in and recover your account | Until you delete your account, plus 30 days of grace |
| Goof look, settings, inventory, level and experience | To keep your goof and your preferences | With the account |
| Play limits and breaks | Responsible gambling tools | With the account; a break is never shortened |
| Sessions: a hashed token, the browser and the network address that opened it | To keep you signed in and let you sign other devices out | 30 days after their last use |
| Bets, chip movements and rewards | Your history and the integrity of the ledger | Kept; your account reference is anonymised when you delete the account |
| Round details: cards, numbers, outcomes | To replay and verify a round | 90 days |
| Provably fair seeds | So you can verify your results | The current and the previous seed |
| Security log: sign-ins and attempts, limit changes, moderation, with the network address | Security, fraud and abuse prevention | Kept; a time limit is under review |
| Reports you file, and the messages they point at | Moderation | Until handled, then as the security log |
| Test wallet addresses and transactions | The test network wallet | Kept with the ledger |
| Performance recordings: device class and frame timings, nothing personal | Only if you turn recording on in Settings | Until we delete them |
Passwords are hashed with scrypt, so we cannot read them. Session tokens are stored hashed too: a copy of our database would not sign anyone in.
Your network (IP) address reaches our servers with every request, as with any website. We use it for rate limits, to stop abuse and to enforce bans, and it appears in the security log.
What other players see
DUBO is a shared room. Other players see your name, your goof, your level and your emotes. Your bets appear in the live bets feed and your wins in the room's celebrations, unless you hide your bets in Settings. If you talk, the players near you hear your voice: it is relayed through our server and never recorded. If you write in the chat, the players of your room read it; a message that gets reported is stored for moderation.
The leaderboard shows the names and the play chip results of the top players. Hiding your bets keeps you off it too.
Where your data lives
This site and the game's files are served by Vercel. The game server and its database run on Railway. All traffic is encrypted in transit (HTTPS and WSS). Backups of the database are kept for about a week. We use no analytics, advertising or tracking provider, and we only share data when the law obliges us to.
Your rights
- See your data: your history, bets, limits and seeds are in the account page.
- Export it: the account page's Settings give you a file with your profile, bets and transactions.
- Correct it: change your email or password in Settings.
- Delete it: delete your account in Settings. It closes after a 30-day grace period, during which signing in cancels the deletion. Bets and chip movements stay in the ledger with your account reference anonymised, because the record of every game must stay complete.
- Complain: if you live in the European Union or the United Kingdom, you can complain to your data protection authority.
Legal bases, for readers who want them: running the game you asked for (performance of a contract), keeping it safe and fair (legitimate interest), and your consent for the optional email and the performance recordings.
Children
DUBO is for adults, 18 or older. We do not knowingly keep an account of anyone younger. If you believe we hold one, tell us and we will delete it.
Changes and contact
When this policy changes, the date at the top changes with it, and we say what changed on the devlog when it matters.
Questions about your data: a contact address will be published here with the final version of this page. Until then, the devlog is where DUBO talks to its players.