Diamond Boxes
What the game stores, why it needs it, and how to get rid of it.
Diamond Boxes is a two-player strategy game. You can play it on your own device without an account. If you want to play other people online or appear on the leaderboard, you create an account — and that is the only reason any personal data exists at all.
The short version. We store your email, a nickname you choose, and your game results. We do not run ads, analytics, or trackers, and we never sell or share your data for marketing. You can delete everything at any time from inside the game or at diamondboxes.app/delete-account.
Diamond Boxes is made and operated by an independent developer based in Croatia. For anything in this policy, including data requests, write to info@diamondboxes.app.
Nothing leaves your device. Your nickname and chosen theme are saved locally on your phone so the game remembers them. Uninstalling the app removes them.
| Data | Why we need it |
|---|---|
| Email address | To create your account, sign you in, and let you recover access if you forget your password. |
| Password | Stored only as a cryptographic hash by our authentication provider. It is never readable by us. |
| Nickname | Shown to your opponents and on the public leaderboard. Choose one you are happy to be seen by other players. |
| Game data | The moves and result of each online game, plus your rating and win/loss record. This is what makes turn-by-turn play and ranking possible. |
| Notification token | An anonymous device identifier from Google, used only to tell you it is your turn. Created only if you allow notifications, and deleted when you sign out. |
This page itself loads no fonts, scripts, or images from anyone else — reading it tells nobody anything about you.
Running an online game needs a few services. Each one gets only what it needs to do its job, and none of them may use your data for their own purposes.
| Service | What it handles |
|---|---|
| Supabase | Database and sign-in. Holds your account and game data on servers in the European Union. |
| Google Firebase Cloud Messaging | Delivers notifications to your device. Receives the notification token and the message text, not your email. |
| Resend | Sends account emails such as password resets. Receives your email address and the message. |
| Google Play | Distributes the app. Google's own terms cover anything that happens in the store itself. |
Your account and its data stay until you delete them. Delete your account and the account, nickname, rating, notification tokens, and game history go with it — permanently, not into a recycle bin. Games you had in progress are ended and count as losses for you, so your opponents are not left waiting on a move that will never come.
Under the GDPR you can ask us to show you the data we hold about you, correct it, delete it, hand it over in a portable form, or restrict how it is used. The fastest route for deletion is built into the app; for anything else, email us and we will answer within 30 days.
To delete your account: open the game, go to the menu, and choose Delete my account — or use diamondboxes.app/delete-account if you no longer have the app installed.
If you believe we have handled your data badly, you can complain to the Croatian Personal Data Protection Agency (AZOP) or the authority in your own country.
Everything travels over encrypted connections. Access to game and account data is enforced at the database level, so one player cannot read another player's account. No system is perfect, but we keep what we collect small on purpose: data we never took cannot leak.
Diamond Boxes is not directed at children under 13, and we do not knowingly create accounts for them. If you believe a child has made an account, email us and we will remove it.
If this policy changes in a way that affects you, we will update the date at the top and, for significant changes, say so in the app. Continuing to play after a change means you accept the updated policy.