Privacy Policy

1. Introduction

Dopame Pte. Ltd. (“Dopame”, “we”, “our”, or “us”) is a sports technology company located in Singapore. This policy concerns the Dopame website at https://dopame.org and, conditionally, any Dopame-operated mobile applications or related services (“Services”).

For privacy questions, contact f.berre@dopame.org. This policy applies to the website and is intended to cover Dopame-operated services where applicable. A specific app may have a separate or supplemental notice; app-specific practices must be confirmed before relying on this policy for that app.

2. Information we process

Website support and deletion forms

When a person submits the current support form, the website records the submitted name, email address, subject, optional application, message, and privacy acknowledgment. The deletion-request form records the selected application, account identifier supplied by the requester, contact email, request type, optional additional information, and acknowledgment. Request details and acknowledgment are stored in existing PostgreSQL inquiry records for handling. An anti-spam honeypot value and form-start timestamp are also sent for validation but are not added to those records.

The website’s legacy inquiry endpoint also accepts organization, role, country or region, organization type, and area of interest. Those are legacy inquiry fields, not required fields in the current support form.

For rate limiting, the running process holds a SHA-256 hash derived from the network address against a 15-minute submission window. Expired entries are removed when another submission is processed, or when the process ends; this is not a guarantee of erasure exactly 15 minutes after collection. This value is not saved as a request field. Application logs record route, method, status, and timing, not submitted form contents. Request bodies are limited to 32 KiB.

Separate applications

Depending on the particular application and features, account details, gameplay results, technical identifiers, diagnostics, communication, or sensor-derived information could be processed. We have not inspected the separate apps to verify whether these categories are collected, their exact contents, or whether information leaves a device. Do not infer that an app collects any listed category solely because it is described here conditionally.

3. How information is used

Website form information is used to receive and handle the support, business, privacy, or deletion inquiry submitted. An account-deletion request submitted on this website is a request for review; this website form does not execute deletion in a separate app system.

For separate apps, functions such as account management, gameplay, rankings, security, diagnostics, or support may involve personal information only if those features and processing are present. Their actual purposes, legal grounds where required, and data flows need app-specific confirmation. No legal-compliance certification is claimed by this policy.

4. Accounts and authentication

The current website does not offer user registration or login.

Whether any listed mobile application supports account creation, how authentication works, and which provider (if any) processes credentials have not been verified. If an application offers accounts, its in-app notices and provider arrangements should explain those practices. Do not send passwords or authentication tokens to Dopame support.

5. Gameplay results and public features

We have not verified whether individual apps store scores, progress, achievements, public names, rankings, leaderboards, team choices, duel or multiplayer records, or participation history, or whether any such information is visible to other players. These features and their visibility must be confirmed for each app before they are described as available or collected.

6. Service providers and sharing

Website infrastructure currently uses Replit hosting, a PostgreSQL database, and Resend for email notification. The contractual database provider and processing region, hosting/CDN logs and cookies, regions and retention, and applicable provider terms have not been verified. Email notification acceptance is not a guarantee that a message reaches an inbox.

Submitted support and deletion request fields are stored in PostgreSQL inquiry records. The site sends email notifications through configured Resend integration. We have not verified the applicable contractual and cross-border safeguards for all providers and locations. Provider access, retention, and processing details require confirmation.

We have not audited separate app providers or SDKs, including authentication, analytics, advertising, crash reporting, hosting, payment, or database services. Their presence, roles, data categories, and contractual safeguards remain unknown. No blanket claim about selling data, advertising, or third-party app processing is made here.

7. Security

The website uses server-side form handling, input validation, request-size limits, and short-lived rate limiting for its public submission endpoints. These implementation measures are not a guarantee of security and do not establish the security practices of separate apps or providers. No internet service can be guaranteed completely secure.

If you are concerned about a website request, contact f.berre@dopame.org. Do not include passwords, authentication tokens, or identity documents in a message or form.

8. Retention

Website support and deletion submissions are stored in existing PostgreSQL inquiry records. We have not verified an automatic purge for those records, a retention schedule, database backups schedule, or the schedule for any retained records. We therefore cannot publish a specific website request retention period.

Retention and deletion practices for account data, gameplay records, diagnostics, app databases, and backups have not been confirmed. The categories, objective retention criteria, exceptions, and timing require operational and app-specific review. Do not assume that a submitted deletion request is itself deleted on a particular schedule.

9. International processing

Dopame is located in Singapore. Hosting, database, and email providers may process information in other places, but the specific regions and relevant contractual safeguards have not been verified. Whether separate apps or their providers process data internationally is also unknown.

Cross-border transfer mechanisms and safeguards must be confirmed against actual provider terms and applicable requirements. This notice does not claim that a particular transfer safeguard has been implemented or certify legal compliance.

10. Privacy requests and rights

Depending on applicable law and the circumstances, a person may have rights concerning personal information, such as asking about its use, requesting access or correction, or requesting deletion. The applicable rights and response requirements depend on the request and relevant law; this statement is not a certification of compliance or a guarantee of eligibility.

To make a privacy inquiry, use the Contact page or email f.berre@dopame.org. We may need to verify identity through an appropriate trusted account or app provider before disclosing or changing account information. No response deadline is promised here.

11. Account and data deletion

You may submit a request through dopame.org/account-deletion or email f.berre@dopame.org. If your app provides an in-app deletion option, you may use it; availability is not verified across the apps listed above.

The website securely records requests for review but does not authenticate into app accounts or delete account data. A request is not a completed deletion. Before action, the relevant app owner must verify identity through a trusted app or account provider, confirm which systems and information are in scope, and perform any manual app-owner action. Data scope, exceptions, processing times, and app-specific pathways have not been confirmed. Some records may need to be retained where required or permitted, but the categories and periods are not verified.

Deletion may affect account features or saved information if those exist in a particular app. Their existence and deletion consequences require app-specific confirmation. Do not send passwords, tokens, or identity documents with a request.

12. Children’s privacy

Minimum ages, intended audiences, and parental controls have not been verified for the separate applications. We cannot state that a particular app is or is not directed to children, or that a parental consent mechanism is implemented. Age eligibility and applicable child privacy safeguards require review for each app and relevant region.

Parents or guardians with a privacy question may contact f.berre@dopame.org.

13. Cookies and similar technologies

In the website code inspected, no active analytics SDK, cookie-setting code, localStorage use, camera/sensor access, or game iframe is configured; local fonts and media are used, and demo/video URLs are unset. This describes inspected application code only. Hosting and CDN provider logs, cookies, region, and retention remain unverified, so this is not a claim that no cookies or provider-side logging occur.

We have not audited cookies, local storage, analytics, tracking, advertising, or sensor use in the separate apps. Those practices and any related notice or choice controls need confirmation before publication as app facts.

14. Third-party services

This website may link to other websites. Their operators control their own services and privacy practices; review their notices before sharing information. The website implementation inspected has no configured game iframe or active demo/video embed. Separate app links, SDKs, and embedded services have not been audited.

15. Changes to this policy

This policy may be revised when website or app practices, provider arrangements, or applicable requirements change. The current version is available at dopame.org/privacy-policy. The “Last updated” date should be revised when a new version is published. Any app-specific notice should be kept consistent with that app’s actual behavior.

16. Contact information

For privacy questions, support, or account-deletion requests, contact: