Privacy policy
Domino collects as little as it can: what it needs to run your account and the features you choose. There are no ads, no analytics and no tracking.
Who is responsible
The controller under the GDPR is Nico Domino, Germany. Contact: [email protected]. Full details are in the imprint.
What we process, and why
- Your account: username, name, email address, a hashed password (we never store the password itself) and any passkeys you add. With Google sign-in, also the name, email address and profile picture Google shares. Needed to provide the service (Art. 6(1)(b) GDPR).
- Sessions: when you sign in, we store a session with your IP address and browser details. We use them to keep you signed in, to limit sign-in attempts and to keep accounts secure (Art. 6(1)(b) and (f) GDPR; our legitimate interest is the security of the service).
- Your settings: the regions, desks, topics and country you pick, the narratives and publishers you follow, and your thumbs up and down on For You. Needed to provide those features (Art. 6(1)(b) GDPR).
- Reading history, only if you turn it on: which stories you open, for Blindspot. It’s off by default. You can turn it off on your account page at any time, which deletes it immediately (consent, Art. 6(1)(a) GDPR).
- Your country: worked out from your connection on each visit to show publishers from your country first. It isn’t stored unless you pick a country yourself (Art. 6(1)(f) GDPR).
We don’t build a profile of your political views, and we don’t use your data for advertising.
Who else receives data
- Cloudflare delivers the site and protects it from attacks, so it handles every request, including your IP address. Cloudflare is certified under the EU–US Data Privacy Framework.
- Hosting: our servers are run by the operator.
- Google, only if you choose to sign in with Google. Google’s own privacy policy applies to that sign-in.
We don’t sell or share your data with anyone else.
AI
The language models that write summaries run on our own servers. They only see publishers’ headlines and descriptions, never anything about you. Your data isn’t sent to AI providers or used to train models.
How long we keep it
| Data | Kept |
|---|---|
| Account details | Until your account is deleted |
| Sessions, with IP address and browser | 30 days after sign-in, then deleted |
| Your picks, follows and country | Until you change them or your account is deleted |
| For You thumbs up and down | 30 days; what they taught For You fades over 30 days |
| Reading history (only if you turn it on) | 30 days; deleted at once when you turn it off |
| Database backups | 14 days |
Your rights
You can ask for a copy of your data, have it corrected or deleted, limit how we use it, receive it in a portable format, and object to processing based on our legitimate interest (Arts. 15–21 GDPR). Where you gave consent, you can withdraw it at any time.
To delete your account or use any of these rights, email [email protected]. We reply within one month.
You can also complain to a data protection authority, for example the one where you live.
Changes
If this policy changes, the date above changes with it. We’ll email you about important changes.