Privacy

Plain summary: the game itself sends us nothing. Every tile, every opponent's move and every score is computed inside your browser, and there is no server of ours for any of it to reach. What we do measure is traffic — which pages get read, and whether people finish a match — and the services that do it are named further down.

What is stored, and where

Your progress lives in your own browser, in a facility called localStorage. It never leaves your device and we cannot read it. Specifically:

• Your current game — the tiles on the table, both hands, the scores, so a refresh does not lose your match.
• Your settings — variant, opponent difficulty, target score.
• Your record — matches played and won, per variant and opponent.
• Your daily streak — the date of the last Hand of the Day you solved, and your current and best streaks.

None of this identifies you. There is no name, no email address, no account, and no identifier that could be used to recognise you elsewhere. Clearing your browser's site data for this domain erases all of it permanently, and we will have no copy.

Challenge links

When you share a challenge, the link contains the deal's seed and your final score, encoded into the web address itself. That information travels wherever you send the link and nowhere else. It does not pass through us, because there is no us to pass through.

Advertising

This site uses Google AdSense to show advertising, and Google is its only advertising partner. When an ad loads, Google may set or read cookies and similar identifiers on your device in order to serve and measure ads. That processing is Google's, governed by Google's own policies, and we have no access to it.

What happens depends on where you are. In the EEA, the UK and Switzerland, a consent dialogue supplied by Google's certified consent management platform appears before any advertising identifier is set, and until you answer it, advertising storage stays denied. Everywhere else, Google may use cookies to show and personalise ads by default.

If you were shown the consent dialogue, you can change your answer at any time from its privacy link. Wherever you are, you can opt out of personalised advertising across the web at Google My Ad Center. Declining does not affect the game: every feature works identically whether you accept advertising or refuse it.

Analytics

Cloudflare Web Analytics counts page views, referring sites and countries. It is cookieless by design: it sets nothing on your device, issues no identifier, and cannot follow you to another site, so it needs no consent anywhere.

Google Analytics 4 also runs, and it works differently by region.

In the EEA, the UK and Switzerland, analytics storage is denied until you agree in the consent dialogue. Until then Google measures in cookieless mode: no_ga cookie is written, and nothing that could recognise you on a later visit.

Everywhere else, analytics is on by default, and Google sets its own cookies to tell one visit from the next. They are listed on thecookie page. You can turn Google Analytics off on every site with Google's browser add-on, or by blocking or clearing this site's cookies. Either way, the game plays exactly the same.

What we look at is aggregate and about the site, not about you: which rules pages are read, whether matches get finished, which variant and difficulty people pick. Nothing you type is collected, because there is nothing in this game to type.

Children

Dominoes is a game with broad appeal and this site is not directed at children under 13. We do not knowingly collect information from anyone, of any age, because we do not collect information at all.

Your rights

Data-protection law gives you rights to access, correct and erase personal data held about you. In our case those rights are satisfied by design: the only data is on your device, you can inspect it in your browser's developer tools, and you can erase it by clearing site data. We hold no copy to disclose or delete.

Where advertising is served, Google acts as an independent data controller for the information it processes. Requests about that data should be directed to Google, whose privacy policy is at policies.google.com/privacy.

Security

The site is served over HTTPS only, with a strict Content Security Policy that blocks scripts from any origin we have not explicitly allowed. Because there is no login, no database and no server-side code, the usual categories of breach have nothing to act on: there are no credentials to steal and no records to exfiltrate.

Changes

If this policy changes in a way that affects what is collected, the change will be described here rather than quietly applied. See also the cookie policy for the specifics of what is stored on your device.