Privacy Policy

Applies to the DoomSunder Android app (package app.doomsunder) and to this website.

Who we are

DoomSunder is a trading name of Lakebridge Digital Studios Limited ("we", "us"), a company registered in England & Wales (company number 17374164), registered office 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ.

Contact: [email protected]. We are the data controller for the limited processing described below.

The short version

DoomSunder has no user accounts, no advertising, and no tracking. Data leaves your device in only two cases - both your deliberate choice:

• Feedback you choose to send through the in-app Rookery - a one-way message delivered to our support inbox.

There is no usage-statistics feature in this version of DoomSunder. See Usage statistics below for what happens if we ever add one.

Subscription payments are handled entirely by Google Play; we never see your payment details. The onboarding Oath promises "Nothing leaves unless you send it" - that is the standard this policy holds the app to.

Data that stays on your device

The following is processed locally and is never transmitted to us or any third party:

• Your name (optional) - a display name you type during setup, or skip as a "nameless wanderer". Device-local only.
• Watched apps - package names and labels of apps you monitor, plus the per-session and daily limits you set. Device-local database.
• Settings & preferences - sound, haptics, scanlines, patrol mode, curfew schedules, commitment tier, lock duration, quest types, colours.
• Usage event log - monitoring events (limit reached, quest completed, lock started) with timestamps and the relevant package name. Drives your stats and streaks. It does not record what you do inside any app.
• In-app economy - gold balance, lifetime totals, owned/equipped items, virtue minutes, clean days, rank.

The app sets android:allowBackup="false", so Android's cloud backup does not copy any of this to Google's servers.

Data you choose to send: feedback ("The Rookery")

If you use the Rookery and tap "Release the Raven", a single encrypted HTTPS message is sent to our support inbox containing: the feedback text you wrote, the category you selected, and your app version, Android OS version and device model (e.g. "Pixel 9").

That device context is the whole of what a message tells us about where it came from: which phone, which version of Android, and which build of the app. We use it to reproduce the problem you are describing. The Rookery is a screen inside the app rather than a web page, so no browser, cookie or web identifier is involved at any point.

We do not send your name, email, advertising ID, location, or any persistent device identifier. Submissions are one-way: we never ask who you are, and we cannot reply to or retract a message once it is sent. Because the feedback field is free text, it contains whatever you choose to type, including your own email address if you type one into the message.

• Recipients: the message is relayed by Cloudflare, our hosting provider, and delivered by Brevo, our email provider. Brevo stores data in the EU, which the UK recognises as providing adequate protection for personal data, so no additional safeguard is needed there. Cloudflare may process your message outside the UK while relaying it; where it does, the transfer relies on the standard contractual clauses in Cloudflare's data processing addendum together with the UK International Data Transfer Addendum - a copy is available at Cloudflare's data processing addendum.
• Your IP address is processed transiently in the course of delivery and to prevent abuse. We do not store it, and it is not attached to your message.
• Legal basis (UK GDPR Art. 6(1)(f)): our legitimate interest in receiving feedback you voluntarily send.
• If you never open the Rookery or never tap send, no data ever leaves your device.

Usage statistics

There is no usage-statistics feature in this version of DoomSunder. The app sends no counts, no snapshots and no measurements of any kind, and there is no setting to switch on. Nothing is collected on your device for that purpose and held back either.

We may add one later, because whether the app actually helps people is hard to learn any other way. If we do, all of the following will be true before a single figure is sent:

• it will be off by default, and the app will work exactly the same if you never turn it on;
• we will ask you inside the app - you will not find it quietly switched on after an update;
• we will update this policy first, naming the provider, what it receives, and the country the data is held in;
• what is sent will be counts and totals about how the app is used - never the names of the apps you watch, never the content of anything, and never your name, email or location.

We are describing this now rather than staying silent about it because the alternative - introducing data collection with no warning - is exactly the behaviour this app exists to argue against.

Subscription billing

DoomSunder offers a paid subscription (a 7-day free trial, then a monthly or annual plan) through Google Play. All payment processing is handled by Google Play - we do not receive or store your card details, billing address, or Google credentials. Google Play tells the app whether your subscription is active; that result is cached locally. Your use of Google Play is governed by Google's privacy policy.

Permissions and what they do

• Usage Access - reads how long each app is in the foreground so limits can be enforced. Granted manually by you. Does not reveal what you do inside an app.
• Draw over other apps - shows the full-screen quest overlay. Cannot read or record the underlying app.
• Vibrate - a haptic pulse when the overlay appears.
• Internet - used only for the voluntary Rookery feedback and (if opted-in, once activated) the daily anonymous snapshot. No background collection, syncing or tracking.
• Foreground Service - keeps monitoring running so limits are checked in real time (Android shows a persistent notification).
• Run at startup - restarts monitoring after a reboot.

We deliberately do not request QUERY_ALL_PACKAGES and do not use an Android Accessibility Service.

What we do NOT collect

• No email or password - there are no accounts
• No location, contacts, camera or microphone
• No content of the apps you use
• No advertising identifiers
• No third-party analytics, crash-reporting or advertising SDKs (no Firebase, Crashlytics, Amplitude or equivalent)

Crash reports. If you have turned on "Usage & diagnostics" in your device's Google settings, Google Play may send us anonymised reports when DoomSunder crashes or freezes. We see counts and technical stack traces, never anything that identifies you. This is collected by Google, not by DoomSunder, and you can turn it off at any time in your device's Settings → Google → Usage & diagnostics. We add no crash-reporting service of our own.

This website

This website (doomsunder.app) is a static site served by Cloudflare, our hosting and security provider. It sets no cookies and has no forms - we collect nothing that identifies you through it. We use Cloudflare Web Analytics, a cookieless measurement tool that shows us aggregate counts (page views, referrers, country, browser type) without personal identifiers, fingerprinting, or tracking across sites - which is why the site needs no cookie banner. To deliver the site and protect it from abuse (for example, DDoS mitigation), Cloudflare also processes visitors' IP addresses and request metadata transiently as part of operating its network; see Cloudflare's privacy policy. We do not receive or store this information.

Data retention and deletion

All your data lives on your device - there is no server-side account or copy to delete. To remove everything, uninstall DoomSunder; Android deletes the app's local storage as part of uninstall. Rookery feedback is kept in our support inbox for as long as our legitimate interest in acting on it lasts, and in any event is deleted within 24 months of receipt.

How to ask us to delete your DoomSunder data

On-device data - your watched apps, limits, gold, statistics and history. Uninstall DoomSunder and Android removes all of it. None of it is ever sent to us, so there is nothing for us to delete.

Rookery feedback - the only thing that reaches us. To have a message deleted, email [email protected] and tell us roughly when you sent it and what it said. We never ask who you are, so we cannot look you up - but if you can point us at the message, we will delete it, and confirm once it is done.

What we keep either way - nothing that identifies you. Feedback we have not been asked to delete is removed within 24 months of receipt at the latest.

Your rights

You have the usual rights under UK data protection law: to ask what we hold about you, to have it corrected or deleted, to restrict or object to how we use it, and to receive it in a portable form.

We do not hold anything that identifies you unless you put it there yourself. Your apps, limits, statistics and history never leave your phone. The one thing you can send us is Rookery feedback, and we never ask who you are - but the message is free text, so if you type your name or email address into it, then we hold that.

Objecting to the Rookery. We rely on legitimate interests for one thing only: feedback you send through the Rookery. You have the right to object to that processing at any time under Article 21 of the UK GDPR. In practice the simplest way to exercise it is not to send anything - nothing leaves your device unless you tap "Release the Raven".

If you have already sent feedback and want it deleted, tell us roughly when you sent it and what it said. We collect nothing that would let us look you up, so under Article 11 of the UK GDPR we are not obliged to gather more information purely to identify you - but if you can point us at the message, we will delete it.

For on-device data you are in control: change it in settings, or uninstall. If you believe we hold personal data about you, contact [email protected]. You may also complain to the UK Information Commissioner's Office at ico.org.uk.

Children

DoomSunder is intended for users aged 18 and over and is not directed at children. We do not knowingly collect personal information from anyone under 18.

Contact

Lakebridge Digital Studios Limited - [email protected]