Dao Bloom · Account privacy

Guest play

You can play without Google or a Dao Bloom account. Guest progress and backups are stored only in this browser; clearing site data, private browsing, or losing the device may erase them. Guest play does not send game saves or account heartbeats to our database. Website hosting providers may still process normal request and security logs.

Signing in is optional. From guest Settings, you can link an account and explicitly copy guest progress into an empty cloud slot. An existing cloud journey is not overwritten or merged. Your browser guest copy remains separate after linking and does not continue syncing with that account.

Optional accounts

Email/password accounts let you play and cloud-save without an email-verification step. The address you enter is an unverified login label, not proof of ownership. These accounts use an isolated internal identity and stay separate from Google accounts, even with the same address. We store the entered address in server-managed account metadata and never store plaintext passwords. Use your own address and keep your password safe: password-reset emails for this sign-in method are not available yet.

Google sign-in connects your Google identity to a Dao Bloom account through Supabase Authentication. We receive your email address and basic profile information, such as your name and profile image, to identify your account. We do not receive your Google password or request access to your inbox, contacts or files. Any separate Dao Bloom password is handled by Supabase Authentication and cannot be viewed by the game administrator.

Progress and activity

For signed-in players, we store your saved progress and recent activity so you can continue your journey on another device. The administrator can view account player statistics, private rankings and moderation history. Browser-only guests are not included in these account statistics. Rankings are not public.

Beta feedback

Optional beta feedback is linked to your signed-in account and visible only in the administrator area. Reports include your chosen answers and written comments; a small progress snapshot is included only if you select it. Please do not submit passwords, sign-in codes or sensitive personal information. Contact support to request help with a feedback report.

Connection addresses

For abuse checks, the application stores the latest connection IP for each signed-in player, accessible only through the protected administrator service. It is hidden after 30 days and automatically purged. Reconnecting refreshes this record. Browser-only guest play does not create this player IP record. Addresses can represent a shared network, VPN or proxy and are not proof of a person’s identity.

Service providers and device storage

Google provides identity verification, Vercel hosts the website and Supabase provides accounts and database storage. These providers may maintain their own operational and security logs under their policies. On your device, essential session cookies keep you signed in, and local storage keeps game backups and appearance preferences. Account-specific backups remain on that device after signing out.

Help with your data

For account help or questions about your data, contact daobloomsupport@gmail.com. Never send passwords or sign-in codes. Signed-in progress saves automatically to your account; player save-file downloads and imports are not available. Administrator resets keep a recovery copy for 30 days; moderation actions are logged for accountability. Manage Google account access through your Google account settings; disconnecting Google does not automatically delete your saved Dao Bloom progress.