Privacy · Dosa Tycoon

Last updated 17 October 2026

The by-two version. Half the size, like a by-two coffee; the full serving is below.

Play without an account and your game stays in your browser.
We collect anonymous play statistics: how long people play, what they do in the game, where they get stuck, and what breaks. Never a name, anything you type, or a save. Some visits are also recorded, with what you type hidden. You can switch them off, and in Europe they are collected only if you say yes.
Sign in with Google and your saved games follow you between devices. You choose a username, and your profile is public under it unless you make it private.
No adverts, nothing sold to anyone, and you can delete everything from inside the game.

Playing without signing in

Your career, settings and challenge medals stay in your browser's own storage on your device. We cannot see them and they are not sent to us; clearing your browser's site data removes them. Only the anonymous play statistics, described next, reach us.

Anonymous play statistics

To learn where the game is too hard, too slow or broken, it sends us short notes on how it is played, signed in or not: that the game was opened, how long it was played and how long it sat idle; what you do in it, such as building, hiring, setting prices and opening windows; milestones such as tutorial steps, days, ranks and outlets; whether you are signed in (yes or no, nothing more); errors, failed saves and how smoothly the game runs; your kind of device and browser; and roughly where you are.

The full list, for the curious

that the game was opened, whether it was a first visit and on what date that was, roughly how long since the last visit, and how many sessions this browser has had;
how long the game was on screen, how long it was actually being played and how long it sat idle; and, when you leave, which screen or window was open, the last kind of thing you did, the tutorial step you were on, the game speed, and how many internal errors the game had caught;
which screens and windows you open and for how long, the tabs inside them, the game speed and sound settings you choose, and taps that seem to go nowhere (several quick taps on one spot, or a tap on a button that is switched off);
what you do in your restaurants, by kind and never by name: what you build, move, turn or sell, the floor tiles you lay, the staff you hire, train or let go, menu prices (the dish and the new price), dishes on and off, research, campaigns, loans as ranges, delivery and protection settings, opening and closing, and the incidents, cards and decisions that come up with the choice you made;
a short end-of-day note: guests, share served, rating, and profit and cash as broad ranges (such as “1L” to the next mark), never exact money;
that the title screen came up, and how many careers are on the device;
which buttons on the title screen you press, how long each tutorial step takes, taps away from what the chef points at, and on your first career how long until the first guest arrives;
the first time this browser reaches each early step: the title screen, a new game, a first build, a first opening, a first day, a first promotion, a second outlet, a sign-in;
milestones: a career started or continued (its difficulty, whether it is a sandbox, a scenario (and which one) or the daily challenge, and its rules version), the steps of the tutorial and whether it was finished or skipped, the day reached (as a range), ranks, how many outlets, extra floors and land, levels, quests, achievements, trophies, perks, grades and cities, company money as broad ranges, a career won or ended (with the medal, for a scenario or daily challenge);
for duels: that one was created, joined, started, finished or left, with its length, difficulty and number of seats and players, whether it had a set start, was a rematch or was joined late, and when it finished your place and the day you reached (as a range); never the duel itself, its link, who was in it, or any score;
for the Founders' League: that its card or the move's confirmation was opened or closed, and that a career moved to today's Hall of Fame, with how much its score changed (as a range); never the career's name or score;
that the game paused itself because nobody was playing, the speed it was running at, and roughly how long it waited (as a range);
that the “staff are waiting” or “while you were away” screen appeared, and after how many days away;
whether the sign-in question was shown, whether a sign-in was completed, and whether you are signed in: yes or no, nothing more;
that saving or signing in ran into trouble (what kind, and whether on the device or in your account), and that a request to our server failed (which kind of request, and the error number);
error reports: when part of the game fails, the kind of error, its message and the place in the game's own code where it happened (file, function, line). Any of your names that might appear in a message is replaced with asterisks before it is sent, as is anything that looks like an email address or a phone number;
how smoothly the game runs: how long it took to load and to first draw, the kind of connection your browser reports (such as 4g), frames per second for a few seconds every few minutes, how much memory it uses, as ranges, and whether the last visit ended without the page closing normally (a crash, or the browser shutting the tab);
the game's version, whether you are on a phone, a tablet or a computer, the family of your operating system and browser engine, your browser's name, the size range of the window and of the screen, which way up it is, the screen's sharpness, the rough class of the device (its number of processor cores and memory, as ranges), whether it has a touch screen, your browser's language, whether the game is installed as an app, and, on your very first visit only, the name of the site you came from;
on the Hall of Fame and on public profiles: only that the page was seen (which board, never whose profile);
where you appear to be: the country, region and city your IP address appears to belong to, with the postcode area, time zone and map position a public address database lists for it. Our host also tells the game your country (two letters, such as IN).

We do not store your IP address with the statistics. Like every request on the internet, they arrive from an IP address; the statistics service works out the location above from it, and the address itself is then discarded.

The random id is kept in your browser's local storage, under dosaTycoon.aid.v1. It is not derived from anything about you, and signing in does not attach your name, email or account to it. No cookie is used.

In Europe the question reads “Help improve Dosa Tycoon?”. Until you answer, your browser keeps only a note that you were asked and on which day. If you say no, it keeps only that.

If the game cannot reach us when you leave (you are offline), the notes it could not send wait in your browser's local storage, under dosaTycoon.aq.v1, for up to three days, and go the next time you play. Switching the statistics off deletes them.

Deleting your data with “wipe this device too” removes the random id as well.

Never in them: your name, email address, username, the names of your careers or outlets, anything you type, your saved game, or an exact money figure from it.

Your IP address is not kept with them. The statistics service uses it once to work out roughly where you are, down to the city (the nearest town your internet provider uses, not your home), and then discards it.

A random id, not a cookie. So that one player is not counted as many, your browser keeps a random id, made up on your device and never linked to your account.

In Europe you are asked first. In the European Economic Area, the United Kingdom and Switzerland, nothing is collected and no id is made unless you say yes. The game asks once, once more on a later day if you did not answer, and then never again. Everywhere else the statistics are on unless you switch them off.

Rather not be counted? No tension. In a game, open the pause menu (Settings) and use Help improve the game: share anonymous play statistics. Off: nothing more is sent, and the random id is deleted from your browser. You can change your mind there at any time, whatever you answered before. If your browser sends a Global Privacy Control or Do Not Track signal, nothing is sent, no id is made and you are not asked, whatever the switch says.

Some visits are recorded, without your words. To see where people get lost, the game records some play sessions (every first visit, and some later ones): the game's buttons, windows and menus as they change, small pictures of the restaurant view, and where the pointer moves and taps. Every text field is recorded as asterisks, and so is every name of yours in the game's text: your careers, your outlets, your username, display name and Google name. Other players' usernames and display names are recorded as asterisks too. The restaurant view is recorded as it looks, so the name on an outlet's sign can be read in a recording. The account and profile panels, your Google picture, the duel panels and windows, the duel button and your Hall of Fame standing are recorded as blank boxes; the Hall of Fame, profile pages and Google sign-in pages never are. Recordings follow exactly the same rules as the statistics: in Europe only after your yes, never with Global Privacy Control or Do Not Track, and the switch above stops them at once.

Our sign-in service (named below) receives from Google, and keeps, your name, your email address and the address of your profile picture, the link to your Google account, and a record of each signed-in browser with its IP address and browser type.

The game itself stores your Google name and picture address (shown only to you), your username and a display name if you add one, your saved careers (up to six) with the names you give them and your outlets, your medals and daily-challenge results, and when you joined and last played. The game's own records do not contain your email address, and we do not use it to send you anything unless you ask.

If you tick Email me about new releases, new features and more (when you sign in, or in Settings → Account), the game notes your yes, when you gave it, and the words you said yes to. We will send that news to the email address your Google sign-in gives us, and to nothing else; every email will have a one-tap way out, and you can untick it in Settings at any time. It is never ticked for you.

Item by item

The sign-in service receives from Google and keeps:

your name, your email address and whether Google has verified it, and the address of your Google profile picture;
the link to your Google account (Google's id for it, and the tokens Google issues to the sign-in service);
one record per signed-in browser, with its expiry and the IP address and browser type the sign-in service recorded.

The game itself then stores:

your name and picture address as Google gave them, shown only to you;
the username you choose (called a profile name before version 4.4) and a display name if you add one, whether your profile is public, and which of your careers it shows first;
your saved careers (up to six, sandbox games included), each with the name you give it, the names you give your outlets, and a summary of it (rank, level, score and company numbers);
for a career you delete, a random id and the date, kept for 180 days so that a copy on another device cannot be uploaded again; nothing of the game itself;
your scenario medals and daily-challenge results;
whether you asked for emails about new releases and features, and when, where and to which words you said so;
for each duel you create or join: its settings and times, your seat, and your numbers in it (place, score, best day's profit, the day you reached, level, rank, number of outlets, and your score by game day). These are kept for as long as your account exists. The saved company you play in a duel is kept from your first day in it until 7 days after the duel ends, and then deleted. A duel that is called off, or that runs out before it starts, is deleted after 30 days;
for a career that moved to today's Hall of Fame: the game day it moved, so that an older copy of the career brought back later can be told apart, and a copy of its place in the Founders' League as it was that day. Both go when you delete that career;
when you joined and when you last played.

What other people can see

If you play without signing in: nothing.

When you sign in, the game asks you to choose a username. It is not optional: if you would rather not have one, you can sign out on that card and keep playing on your device. Choosing a username makes your profile public unless you switch it to private, on the same card or at any time afterwards in the game's account panel.

While it is private, nobody else can see your profile or your username, and you are not listed in the Hall of Fame.

While it is public, anyone can see your username and display name, your careers by name with their rank, level, score and company numbers, the names you gave your outlets, your medals and daily-challenge results, and your places in the Hall of Fame. The exact list is below.

Never public: your Google name, picture or email address, your saved games themselves, your sandbox games, or any account id.

In a duel. A duel is played against people you chose or who were sent your link. The other players in a duel you have joined can see your username, your display name and your numbers in that duel: place, score, best day's profit, the day you have reached, level, rank, number of outlets, your score by game day, and when you last played. If someone invites you by your username, the others in that duel can see that you were invited. They never see the names of your outlets, your other careers, your saved game, or your Google name, picture or email address. Somebody who only has a duel's link sees who created it and its settings, and nothing else: not who was invited, who joined or any score. If your profile is public it also shows how many duels you have played and won and your last ten results; an opponent is named there only if their own profile is public.

Exactly what a public profile shows, and notes for older accounts

your username and, if you have added one, your display name, and when you joined and last saved;
the career your profile shows: the name you gave it and its summary (rank, level, score, company numbers, awards and achievements, the names you gave your outlets);
for each of your other careers: its name, difficulty, level, score, rank, day, number of outlets and company value;
your medal counts and daily-challenge results;
your places in the Hall of Fame, each with the career that earned it;
for each career, whether it is in the Founders' League (careers started before version 4.6, being phased out) or today's Hall of Fame, and the day it moved if it did; and a “Founding member” mark if your account was made before leagues opened.

The username the card suggests is made up at random (a dish and a number); it is not taken from your Google name or your email address.

If you signed in before version 4.4 and never chose a profile name, you are asked the next time you open the game, and until you answer nothing about you is public.

If you had chosen a profile name before version 4.1 and left your profile private, it was switched to public when 4.1 was released. You were shown a notice at your next sign-in with a button to make it private again.

Cookies and storage

We set one cookie that keeps you signed in, and short-lived ones for about ten minutes while a sign-in is in progress. They are first-party and cannot be read by scripts. While you are signing in you pass through Google and the sign-in service, which may set cookies of their own on their own sites. There are no advertising or tracking cookies.

Your saves and settings sit in your browser's local storage, along with the random id for the play statistics (unless they are off, or you are in Europe and have not said yes) and, while a tab is open, a note of the play session in progress.

Who else handles the data

Vercel hosts the site and counts page visits, Neon runs the database and the sign-in service (Neon Auth), Google signs you in and serves the fonts, and PostHog, in the United States, receives and stores the anonymous play statistics and the recordings.

What each of them sees

The host, like any web host, keeps request logs: time, the page or address requested, IP address and browser type. It also tells the game which country a request appears to come from.
Page visits are counted with the host's own counter. It uses no cookies, keeps no profile of you and does not follow you to other sites; it records things like which page was opened, the country, and the kind of device and browser.
The database and the sign-in service hold what is listed under When you sign in with Google.
Google signs you in, and serves the fonts the site uses.
The play statistics travel to the statistics service through our own site, so your browser never contacts it directly and it sets nothing in your browser. It is set not to keep IP addresses. It also receives the error reports and recordings described above.
Our own logs record only that an error happened and where; never your save, name, email or sign-in details.

Deleting your data

In the game, open Settings → Account → Delete my online data. This removes, at once, your account record, every saved career, profile, medals and daily results, and then the sign-in account itself, including its link to Google and its sessions. Signing in afterwards starts a new, empty account. If that last step ever fails, write to us and we will remove the sign-in account by hand.

A few things can outlast a deletion briefly.

Cached copies of a public profile or leaderboard (a few minutes) and of a share picture (up to a day).
Any preview a chat or social app has already fetched, which is out of our hands.
A bare account id with no name or email, normally kept for about an hour so a still-open sign-in cannot recreate the account.
The database provider's own recovery history, which ages out on its own.

Duels are the one place where something of yours stays after a deletion, because the result belongs to the other players too. Your seat in a duel that has finished remains as a place and a score with no name attached, so nobody else's result changes. Your saved duel companies are removed at once, a duel you were still playing counts as left, and a duel that had not started loses you from its list.

You can also delete a single career and keep your account, username and other careers. It is removed at once; we keep only a random id for it and the date, for 180 days, so that a copy on another device cannot be uploaded again by accident.

Children

The game is suitable for all ages and can be played in full without an account. Signing in uses a Google account and is subject to Google's own age rules.

Changes and contact

If what we store changes, this page will change with it and show the new date. Questions, or a request about your data: namaskara@dosatycoon.com.

That is all of it, with nothing kept under the counter. Made in Bangalore, over filter coffee.