Overview
Doodoohead ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains what information our app collects, how it's used, and the choices you have — including how to delete your account.
Playing Without an Account
You can play Doodoohead's single-player mode (vs. AI opponents) without ever creating an account. On first launch, the app signs you in anonymously via Firebase Authentication so your session has an identifier, but no personal information is collected or required. Your cartoon avatar is generated from that identifier by a third-party image service (see DiceBear below).
Information We Collect If You Create an Account
Creating an account (email + password) is only needed for online multiplayer and to track your game statistics across sessions. If you register, we collect and store:
- Email address and password — handled by Firebase Authentication. We never see or store your password in plain text; Firebase manages it securely.
- Display name — the name shown to other players, chosen by you and editable in the Profile screen.
- Game statistics — games started, games finished, wins, "doodoohead" counts (games where you had the most pile pickups), and how many games a bot played most of for you, from online and party games. You see them in your profile, and your display name, games finished, wins, doodoohead and bot-played counts are also copied to a public profile so other signed-in players can see them (in the waiting room, and on leaderboards in future). Your email address and other account details are never shared. A game counts as yours only if you made most of your own plays; if you step away or stop playing, the game plays your turns for you (see Game records below).
- Online table data — while playing online, the table's record holds your user ID, display name and avatar address, the cards in play, and a timestamp showing that your app is open. It is shown to the other players at your table, and is deleted when the last player leaves the table.
- Game records — when an online or party game ends, a short record is saved: the players' user IDs, who won, who was the doodoohead, and how many of each player's plays were their own versus made for them by the game. Each player adds it to their own statistics, usually within moments, and the record is deleted once everyone has. If a player never opens the app again, their copy may remain until we clear it. It contains user IDs only — no names or email addresses.
Your email address is held by Firebase Authentication; everything else above is stored in our Firebase project (Firestore database). None of it is sold, shared with advertisers, or used for any purpose beyond running the game.
Information We Don't Collect
We do not collect:
- Real name, address, phone number, or other contact info beyond the email you provide at sign-up
- Location data
- Device identifiers used for advertising or cross-app tracking
- Payment information (the app has no purchases)
- Camera images: Party Mode's optional “Scan QR Code” uses the camera on your device only to read a friend's invite code — no photos or video are recorded, stored, or sent anywhere
Analytics
Doodoohead does not use Firebase Analytics or send any analytics events.
Third-Party Services
Firebase (Google)
Doodoohead uses Firebase for authentication and data storage (Firestore). Firebase's privacy policy governs how Google processes this data on our behalf: https://firebase.google.com/support/privacy
DiceBear
Avatars are cartoon images generated by DiceBear (dicebear.com). To show your avatar — and those of the other players at your table — the app requests each image from DiceBear's servers using the player's user ID as the image's seed. DiceBear therefore receives that ID, along with your device's IP address, whenever an avatar is loaded. It receives no email address or display name.
Expo Platform
This app is built using Expo. For development and distribution purposes, Expo may collect anonymous usage analytics. Please review Expo's privacy policy at: https://expo.dev/privacy
Your Choices
- Edit your profile — update your display name any time from the Profile screen.
- Sign out — available from the Profile screen; your data is retained so it's there if you sign back in.
- Delete your account — the Profile screen's "Delete Account" action permanently and immediately deletes your Firebase Authentication account (including your email address), your profile (display name and statistics, including your public profile), and your seat at any table you're in. This cannot be undone. A game record that other players haven't yet added to their statistics may briefly keep your user ID — with no name or email attached — until they do.
Children's Privacy
Our app does not knowingly collect information from children under the age of 13. The game is suitable for all ages and contains no inappropriate content. Account creation (email/password) is optional and not required to play.
Data Security
Access to your account data is restricted by Firebase Security Rules so that only you can read or write your own profile and statistics document, and a game record can be read only by the players who haven't yet added it to their statistics. Table records are readable by signed-in players of the app; the app shows you only the table you're at. Data in transit and at rest is protected by Firebase's standard infrastructure security.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy in the app and updating the "Effective Date" above.
Contact Us
If you have any questions about this Privacy Policy, or want help deleting your data, please contact us at:
- Email: friznani.apps@gmail.com
Consent
By using Doodoohead, you consent to this Privacy Policy.