Privacy Policy

Bones Live ("the app") is a real-time domino scoreboard for iPhone, made by an independent developer in Denver, Colorado, United States ("we," "us"). This policy says what the app collects, why, who else handles it, how long it is kept, and how to delete it. The short version: we collect what it takes to keep a scoreboard in sync, we don't sell it, and there are no ads, no analytics and no tracking in the app.

At a glance

Every purpose the app processes personal data for, the service used, and the data involved.

What we collect, in detail

• An anonymous user ID. The first time you open the app, our server issues a random ID and a token for it, which your phone keeps so it can reconnect to your rooms and your stats. Nothing about it comes from your device, and on its own it does not identify you.
• Names typed into a game. The scorekeeper types the players' names. Those names are shown to everyone in the room. Please use first names or nicknames; nobody needs a full name to keep score.
• Game data. Room codes, targets, each score entered, rounds, and the final result. This is what the live scoreboard is made of.
• Career stats. Games played, wins, total points and high score, kept against your anonymous ID.
• Saved games (PRO, signed in). If you are signed in with Apple and have PRO, each finished game is saved to your Game History: its scores, the other players' names, the round-by-round sheet and the recap. Guests and free players do not get a saved copy, so nothing extra is stored for them.
• Sign in with Apple (optional). If you sign in, we store Apple's identifier for you, the name and email address Apple gives us (a private relay address if you hid yours), and the token Apple requires us to keep so we can revoke the sign-in when you delete your account. You can play every game without signing in.
• Purchases. Whether you have PRO and which skins you own. Payment happens with Apple; RevenueCat tells our server what you are entitled to.
• Your phone's language. Stored so the recap is written in your language.
• Reports and blocks. If you report or block a player, we store the name you reported or blocked and, for a report, the room code and the reason you gave.
• Connection data. Like any website or online service, our host receives your IP address and basic request details whenever the app talks to the server. We use the IP address to limit how fast any one source can make requests, which stops people guessing room codes. It is not stored in our database.

What stays on your phone

Some things are kept only on your phone: small settings such as whether you have already seen a tip, and scores you have typed but not yet submitted. Your phone also keeps the token for your anonymous ID, which it shows our server each time it connects. The scorekeeper's phone also checks its own battery level so the room can warn the table and close cleanly before the phone dies. The battery reading itself is never sent anywhere; the only thing other phones learn is that the room closed because the scorekeeper's battery ran out.

What we don't do

• No advertising of any kind, and no advertising SDKs.
• No analytics, crash reporting or session recording tools.
• No tracking across other apps or websites, and we never ask for or read your advertising identifier. That is why the app never shows Apple's "Allow Tracking" prompt.
• No access to your contacts, photos, camera, microphone, location or health data.
• No selling or renting of your data, to anyone, for any purpose.
• No analytics, advertising cookies or trackers on this website.

The services we use

We use three outside companies, each only for what it is listed for above. Each one handles data under its own privacy policy and its own security commitments.

• Cloudflare hosts the app's server, its database, the AI model that writes recaps, and this website. Cloudflare privacy policy.
• Apple provides Sign in with Apple and processes App Store payments. Apple privacy policy.
• RevenueCat checks App Store purchases and tells our server whether your subscription or skins are active. RevenueCat privacy policy.

The recap model runs on Cloudflare's own infrastructure. Before a game is sent to it, every player name is replaced with a stand-in, and the real names are put back only after the recap comes back. The model never sees a name anybody typed.

We may disclose data if a valid legal process such as a subpoena or court order requires it, and we will push back on requests that are broader than the law allows.

How long we keep it

• Live rooms are deleted from the server once nobody has used them for a day, and after three days at most, whatever state they are in.
• Your stats, saved games, sign-in details, language, reports and blocks are kept until you delete your account.
• Server logs held by Cloudflare are kept for up to seven days for troubleshooting and security, then removed automatically.
• Emails to support are kept as long as needed to help you, and deleted on request.

Deleting your data

If you signed in with Apple: Delete Account, on the Account screen in the app, erases what is on our servers straight away: your display name and stats, every saved game, the reports you filed and the players you blocked, your language setting, and your Apple sign-in, which we also revoke with Apple at the same moment. It cannot be undone.

On any phone: Delete My Data, in the menu and on the Privacy screen, erases everything the app has stored on that phone, including its link to your anonymous ID. If you played as a guest and also want the stats kept under that ID removed from our server, email us before you use it, from the Support link in the app, and we will delete them.

Two records are kept after deletion, and neither contains anything about you: your random user ID, marked as deleted with no name or stats attached so that it is never handed to anyone else, and the time of the last subscription event, so that a delayed message from the App Store cannot restore access to a deleted account. Apple and RevenueCat keep their own records of purchases you made, as they are required to. If you want RevenueCat's record removed too, email us and we will request it.

If you cannot use the in-app options, email support@slvrliningdesign.com and we will delete your data within 30 days.

Your rights

Wherever you live, you can ask us for a copy of the data we hold about you, ask us to correct it, or ask us to delete it. If you live in the European Economic Area, the United Kingdom or California, the GDPR, UK GDPR or CCPA also give you the right to object to or restrict processing and to receive your data in a portable format, and you may complain to your local data protection authority. Email support@slvrliningdesign.com to make any request; we answer within 30 days.

We process your data because it is needed to provide the app you asked to use (to run your game, keep your stats and deliver what you bought), and, for security logs and rate limiting, because we have a legitimate interest in keeping the service safe and available.

Where your data is processed

We are based in the United States, and Cloudflare, Apple and RevenueCat may process data in the United States and in other countries where they operate. Wherever it is processed, it is handled as this policy describes.

Children

Bones Live is a general audience app for people keeping score at a domino table. It is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has given us personal information, email us and we will delete it.

Security

Everything the app sends is encrypted in transit with HTTPS. Data at rest on Cloudflare is encrypted. Only members of a room can read or change it, and only the scorekeeper can change the score. No system is perfectly secure; if you find a vulnerability, email support@slvrliningdesign.com with the subject "Security Report" and we will respond promptly.

Changes to this policy

When we change how the app handles data, we update this page and the date at the top, and a significant change is also described in the app's release notes on the App Store.

Owner and contact

Bones Live is owned and operated by its independent developer in Denver, Colorado, United States, who is the data controller for the app.
Contact: support@slvrliningdesign.com