Privacy Policy

Last updated 9 October 2026 (synced Doughnut Run profile and Doughnut Town added)

1. Who is responsible

doughnut.com and its games are run by GODFATHER AI LTD, trading as Doughnut.com ("we", "us"), a company registered in England and Wales with company number 11092714, whose registered office is at 2a Connaught Avenue, London, England, E4 7AA. We are the data controller for the information described here. Contact us about anything in this policy through our contact form (choose “Privacy or my data”), on X at @jagdotme, or by post at the address above.

2. What we collect and why

• Playing without an account. Your level progress, best times and sound settings are saved in your own browser's local storage. They aren't sent to us.
• Account details. Your email address and a securely hashed password (we can't read it). If you sign in with Google, we receive your Google account ID and verified email address. We use these to run your account, verify your email, and send password resets. Legal basis: performing our contract with you.
• Player profile and scores. Your player name, optional social profile link, and your best runs. In Doughnut Escape: the level, doughnuts saved and lost, time, stars, and the list of tool placements in your run. In Doughnut Slingshot: the level, score, time and the list of shots you took. Both lists let our server replay and verify the run. In Doughnut Run: distance, sprinkles collected and run time. In Doughnut Sniper: your best score, hits, shots fired, rounds cleared, farthest hit and run time. Your player name, social link and results are shown publicly on the leaderboards. Legal basis: contract.
• Synced game progress. If you're signed in, we store your Doughnut Run profile (your sprinkle bank, Sprinkle Shop items and upgrades, what Sprinkles is wearing and your daily missions) and your Doughnut Town total (how many doughnuts you've rescued), so they follow you to every device. Signed out, they stay in your browser. Legal basis: contract.
• Challenge links. When you send a friend a challenge, we store the game, level and score to beat, your player name (or “A friend” if you aren’t signed in), and how many times the link is opened, so the link can show your score. Legal basis: legitimate interests (running the feature you asked for).
• Emails we send you. Account emails (verifying your address, password resets) and two optional alerts: when someone outbids your advert, and when someone beats a #1 leaderboard record of yours. Turn either alert off in My account → Settings, or with the one-click link in every alert. We never send marketing emails or share your address. Legal basis: contract (account emails) and legitimate interest (alerts about your own adverts and records).
• Contact form. If you send us a message, we keep your name, email address, topic and message so we can reply. We email a copy to our own inbox. To stop spam, the form uses a hidden field, a timing check and a small calculation your browser does automatically; none of these use cookies or store anything on your device. Legal basis: legitimate interest in answering you.
• Adverts. Your advert's name, link, logo and other advert details, your bids, and payment records (order reference, amounts, status and Stripe session reference). Adverts are shown publicly in our games and on doughnut.com. Legal basis: contract, plus our legal duty to keep financial records.
• Security. We use a session cookie to keep you signed in. To stop abuse we count requests per action from each IP address. We store only a one-way hash of the IP, and those counts expire within an hour. Our host also keeps standard server logs. Legal basis: our legitimate interest in keeping the site secure.
• Advert views and clicks. When a game shows an advert, or someone taps one, the game tells our server which advert and which game. We only add these up into daily totals per advert, so advertisers can see how their advert is doing. Nothing about you is stored with them: no cookie, no account and no IP address. Legal basis: legitimate interest in reporting advert performance to advertisers.
• "Playing now" counter. While the game is open, it tells our server every 30 seconds that a game is running, using a random code that exists only in that browser tab. It isn't stored on your device and isn't linked to you, and we delete it after 10 minutes. Legal basis: legitimate interest in showing how many people are playing.
• Analytics. The game uses Google Analytics to measure visits and how the site is used. It sets cookies and collects details like your approximate location, device and pages viewed. It only runs if you accept analytics on our cookie banner. Legal basis: your consent.

3. Cookies and local storage

• dn_session: essential. It keeps you signed in and protects forms. It's deleted when you close your browser, or after two hours of inactivity.
• Google Analytics cookies (_ga, _ga_*): used for visit statistics. They only load if you choose Accept on our cookie banner. You can change your mind any time with Cookie settings.
• Local storage in your browser: game progress, settings, and a run you've asked to post after signing in. You can clear it at any time in your browser settings.

4. Who we share data with

We use these service providers, only for the purposes above:

• Hostinger: hosts the website and database.
• Stripe: processes advert payments under Stripe's privacy policy. Stripe receives your card details directly. We never do.
• Google: Google Analytics, and Google sign-in if you choose it.
• Our email delivery provider, which sends verification and password-reset emails.

We don't sell your personal data or use it for advertising profiles. We may disclose data if the law requires it. Some of these providers process data outside the UK. When they do, they use recognised safeguards such as the UK International Data Transfer Addendum or standard contractual clauses.

5. How long we keep it

• Account, profile and score data: until you delete your account. You can do that yourself at any time.
• Adverts: until you delete them or your account.
• Contact form messages: 12 months, then deleted automatically. Ask us to delete yours sooner at any time.
• Payment records: six years, to meet UK accounting and tax rules. This applies even if you delete the advert or your account. When an account is deleted, its payment records are kept without your email address or any other contact details.
• Rate-limit counters: up to one hour. Sign-in and verification links: until they're used or expire.

6. Your rights

Under UK data protection law you can ask us to access, correct, delete or export your personal data. You can also object to or ask us to restrict how we use it, and withdraw consent at any time.

Do it yourself, instantly: sign in and go to My account. Under Your data, Download my data gives you a copy of everything we hold about you. Delete my account erases your account, player name, scores, social link and adverts. You can change your player name, link and advert details on the same page, or delete a single advert.

For anything else, message us on X at @jagdotme and we'll respond within one month. If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk.

7. Children

Anyone can play the game without an account. Accounts are for people aged 13 and over. If you believe a child under 13 has created an account, contact us and we'll delete it.

8. Security

The site uses HTTPS. Passwords are stored as one-way hashes. Scores and payments are verified on our server. No system is perfectly secure, but we work to protect your data and will act quickly if something goes wrong.

9. Changes

We'll update this page if how we use data changes. The date at the top shows the latest version.