Privacy Policy
Effective September 30, 2026. Applies to the Cuban Dominoes game on desktop, iPhone and Android, and to this website and playcubandomino.com.
The short version
How you play stays on your own device — your fichas, your moves and your record never leave it. Three things do leave: an anonymous count of games played, so we can tell whether people are enjoying the game, whether it is crashing and which of our ads work; if you play at a private table with friends, exactly what it takes to run that table — an anonymous player id, the name you chose to show at the table, and your moves; and, when a table is invited, the invitation link itself, which is made and read by a deep-linking service so that it still works for a friend who has to install the game first. There are no ads in the game, no tracking, no profiling, and nothing is sold or shared with data brokers. The game asks for no email address, no password and no phone number. The one place an email address enters the picture is the optional launch list on playcubandomino.com, which exists to send you one message when the Android app is out.
Who we are
Cuban Domino League LLC (trading as The Cuban Domino League), a Florida limited liability company in St. Petersburg, Florida, United States, is the controller of the personal information described here. Contact: privacy@thecubandominoleague.com.
Playing on your own — no account, and nothing sent to our servers
Playing on your own needs no account of any kind, works with no connection at all, and sends nothing to our game servers. Nothing about how you play — your fichas, your moves, your hands, your record — ever leaves the device.
What solo play does send is a small anonymous count of activity to our analytics provider, so we can tell whether the game is being played and whether it is crashing. That is described under How we measure whether the game is working. On iPhone the app also contacts the deep-linking service described under Invitation links when it starts, so that an invitation somebody sent you still works — that happens whether or not you ever play online. On iPhone the app also asks Apple, until it has an answer, whether it was installed from one of our ads, as described under How we measure whether the game is working. Those three are everything solo play transmits, and nothing about how you played is in any of them.
The game stores the following in its own private storage on your device (on desktop, in your browser's local storage for the site you are playing on):
- The name and settings you chose.
- Your record: experience points, levels, streaks and game counts.
- The match currently in progress, so closing the game does not lose it.
- A random identifier the app generates for itself, tied to nothing else.
- A copy of the last crash, if there was one, so it can be shown to you on the next launch.
None of this is sent anywhere — in particular, the identifier above is never transmitted, and neither is the name you chose. Deleting the app, or clearing your browser's data for the site, deletes all of it.
Private online tables — what is transmitted
Choosing Play With Friends connects to our table server, hosted on Supabase, because a table shared by four people has to live somewhere. That transmits:
- An anonymous account. The server issues an anonymous user id the first time you use an online feature. No email address, no password, no phone number, no sign-in of any kind. It exists so that your seat at a table stays yours.
- The name shown at your seat, visible to the other people at your table. It is whatever you typed; it does not have to be your real name.
- The table itself. The room code, the seats, the moves, the scores and the shuffled deal. The server holds these because it referees the game — it deals and holds every hand precisely so that no player's device ever receives another player's fichas.
- Operational records. Connection timestamps and technical logs needed to run and debug the service, held by our hosting provider.
Invitation links
An invitation is a link, and a link can be tapped by somebody who does not have the game yet. So that the table is still waiting for them after they install it, invitation links are made and read through ChottuLink, a deep-linking service. Our server makes one link per table. On iPhone the app also contacts ChottuLink when it starts, whether or not you ever play online.
- An anonymous device identifier that ChottuLink generates for the installation. It is not your device's advertising identifier — this app does not use one, and never asks permission to track you, because it does not track you.
- The invitation itself — which link was made or opened, and when. An invitation link contains the six-character room code, so ChottuLink sees room codes. It sees nothing else about the table: no names, no hands, no moves, no scores.
- Nothing that says who you are. We never send ChottuLink your name, your anonymous account id, an email address or a phone number.
Anyone who taps an invitation passes through ChottuLink's redirect, whatever device they are on. On Android the link opens this website rather than the app, and the Android app does not contact ChottuLink at all.
How we measure whether the game is working
We need to know whether people come back to play, whether games get finished, and whether the app is crashing. The game therefore sends a small, fixed set of anonymous events to PostHog, our product analytics provider. There are exactly five, and this is all of them:
- A game started — whether it was on your own or at a private table, how many of the seats were people rather than computer players, and whether it was your first game.
- A game finished — the same facts, plus how long it lasted, how many hands it took, whether you won, and whether it ended because someone played their last ficha or because the table locked.
- An invitation was sent — the fact that one was, and nothing about it.
- An invitation was accepted — that somebody sat down at a table they were invited to, and whether they arrived by following a link or by typing the code in.
- An account was created — that an anonymous online account was made, the first time somebody uses an online feature.
The game also tells the provider when it was opened and closed, and which version it is, so we can see how much it is being used and which release a fault belongs to. It does not record which screens you look at or what you tap.
On iPhone, the app sends Apple a one-time code that Apple's own software creates on your device, and Apple answers whether the game was installed from one of our ads on the App Store and, if so, which one. That answer is attached to these events so we can tell which of our ads work. The code does not identify you and does not use your device's advertising identifier.
These are attached to a random identifier generated for the installation, which is not connected to you, your name, your device's advertising identifier or your online account. Deliberately absent: the name you chose, room codes, invitation links, who you invited, your fichas, your moves, your scores, and your location — we switch off the provider's location lookup.
The app also reports crashes and errors to the same provider, so a fault that only happens on somebody else's phone can be found and fixed. A report contains the error and where in our code it happened.
This is not advertising, not profiling, and not sold or shared with anyone. Under Apple's App Tracking Transparency rules it is not tracking, and no permission prompt is shown, because nothing here is combined with data from other companies. If that ever changes, the prompt appears and this policy changes with it, in the same release.
The launch list on playcubandomino.com
Until the Android app is on Google Play, playcubandomino.com/android offers to tell you the day it is. That is optional, and it is the only form on either website. If you use it we store:
- The email address you typed, so we can send that one message. It is used for nothing else — no newsletter, no marketing, and it is never joined to a game account, which stays anonymous.
- A one-way hash of your IP address, kept only so that the form cannot be flooded from one connection (a cap per address per hour). The address itself is not stored.
- Which page and platform you signed up from, so the right message goes to the right people.
The list lives in our Supabase database alongside the table server, and nobody else receives it. To be removed at any time, write to privacy@thecubandominoleague.com from that address; we delete the entry and confirm.
How long it is kept
- The launch list: until the message it exists for has been sent, plus 30 days for anyone who replies; then deleted. Earlier on request.
- Analytics and error reports: held by PostHog under our account for as long as they are useful for the measurements above.
- Invitation links: held by ChottuLink under our account. A link has to keep working for as long as somebody might tap it, so these are not swept on the 24-hour table schedule below. The table behind an old link is long gone; the link then simply leads to this website.
- Tables: a room and everything in it — seats, moves, scores, deal — is deleted automatically once it has been closed, and in any case within 24 hours of its last activity. This is an automated sweep in the database, not a manual process.
- Your anonymous account: kept until you ask us to delete it. See Account deletion.
- On-device data: kept until you delete the app or clear the site's data. We cannot reach it and cannot delete it for you.
What the game does not do
- No ads in the game, and no advertising identifiers are read.
- No providers other than the ones named below. The game measures whether people play, whether it crashes and which of our ads brought them; it does not build a profile of you, and it sends nothing about how you played.
- Nothing is sold, rented or shared with data brokers. We do not "share" personal information for cross-context behavioural advertising as those terms are used in California law.
- No chat, no voice, no recordings of any kind.
- No access to your contacts, photos, camera, microphone or location. Inviting a friend uses your own device's share sheet, or copies a link to your clipboard; we never see your contacts.
- No cookies are set by this website or by playcubandomino.com. The game uses your browser's local storage for your own settings and record, which never leaves your device.
Who else touches the data
Three processors. Supabase hosts the table server, the database and the anonymous authentication. PostHog receives the five anonymous game events, the app-open and app-close records, which of our ads the game was installed from, and the crash reports described above. ChottuLink makes and resolves the invitation links described above, and receives the anonymous device identifier its own software generates on iPhone. All three process this data on our instructions in order to run and maintain the service. Apple, which runs the App Store ads we buy, tells the app which of those ads it came from, as described above. We use no other advertising networks, no marketing analytics providers and no customer-data platforms.
Your rights
You can ask us what we hold about you, ask for it to be corrected, and ask for it to be deleted. Because game accounts are anonymous and carry no email address, we can only act on a request that identifies the account — see Account deletion, which explains how to find your player id. Write to privacy@thecubandominoleague.com; we answer within 30 days. We do not charge for this and we will not treat you differently for asking.
Depending on where you live you may have additional rights under laws such as the California Consumer Privacy Act, the Florida Digital Bill of Rights, or the GDPR. Where the GDPR applies, our lawful basis is the performance of a contract with you — running the table you asked to play at — and our legitimate interest in keeping the service working and free of abuse.
Children
The game is not directed to children under 13 and we do not knowingly collect personal information from them. There is no chat, no user-created content beyond a display name, no purchases and no ads. Private tables can only be joined with a room code or invite link passed from one person to another. If you believe a child has given us information, write to privacy@thecubandominoleague.com and we will delete it.
Security
Traffic is encrypted in transit. The server is the sole authority on game state — nothing a player's device claims about the table is trusted — and database access rules prevent one player from reading another player's hand or another table's data. No system is perfect, and we do not claim otherwise.
Changes
If this policy changes materially we will update the effective date above and, where the change affects what is collected, note it in the release that makes the change.
Contact
Cuban Domino League LLC, St. Petersburg, Florida, United States
privacy@thecubandominoleague.com