Privacy Policy

This policy explains what Doomrank collects, why, who else handles it, and the choices you have. Doomrank was called Cooked, and some versions of the app still show that name. This policy covers the Doomrank app for iPhone and Android, under either name, and this website.

1. Who we are

Doomrank is run by an independent developer, called "we" or "us" in this policy. We decide how your personal data is used, so we are responsible for it.

You can contact us at support@doomrank.app.

2. What we collect and why

Your account

The first time you open the app, it creates an account for you without asking for any details. The account has a random account ID.

You can choose to link Sign in with Apple or Google Sign-In, so you can keep your account on another phone:

• Sign in with Apple. We receive an identifier from Apple, and the email address and name that Apple shares with us.
• Google Sign-In. We receive an identifier from Google, and basic profile details that Google shares with us, such as your email address and name.

Phone number. If you use Find friends from contacts, we verify your phone number with a text message (SMS) and link it to your account. It is used for contact matching, so friends who have your number can find you. It does not let you sign in on another phone. Only Sign in with Apple or Google Sign-In keeps your account when you change phones.

These sign-in details, including your verified phone number, are held by our sign-in provider, Firebase Authentication. They are not shown to other users. We use them to keep you signed in, to let you use your account on another phone (Apple and Google only) and, for your phone number, to make contact matching work.

Your profile

Your account has a profile with:

• A username. The app picks one at random. You can change it during setup or on the Profile tab.
• An avatar code. A random code that draws your cartoon avatar. You can make a new one at any time.
• Your country. The app reads it from your phone each time it opens. On iPhone, it comes from your Region setting. On Android, it comes from your SIM card, then your mobile network, then your phone's language and region settings. If the app cannot work out a country, none is set. You cannot change it in the app.
• Technical details: your platform (iPhone or Android), the sign-in method you use, the date your account was created and an invite code, which is your account ID.
• Your tier, which our server works out from your screen time (see below).
• A friend code, created the first time the app shows you yours.
• Your birth year, only if you add it (see below).
• A phone-number code, only if you use contact matching (see below).

We use your profile to show you on the boards, to put you on the right boards and to let friends find you.

Screen time

With your permission (Screen Time access on iPhone, Usage Access on Android), the app reads how long you used your phone each day.

Only one number leaves your phone for each finished day: that day's total, rounded down to the nearest 15 minutes, with the time it was sent. Today's number is never sent. A day is sent only after it has ended, and not before 1:00 a.m. your local time. If the app missed some days, it can send up to the last 7 finished days. Once a day's total is sent, it cannot be changed.

On Android, finished days are sent in the background about once a day, even when the app is closed. On iPhone, they are sent when you open the app.

We use these totals to rank you on the boards, to work out your tier and to show you your own history. Each board ranks people by their average daily screen time over its period: yesterday, the last 7 days, the month or the year.

Your tier

Your tier is a label based on your average daily screen time over your 7 most recent days with data. Only you can see it.

Birth year (optional)

You can add your birth year in Settings. We store the year only, never a full date of birth. We use it only to place you in a broad age group (for example, 18–24) for age-group boards and the age-group filter. Age-group boards are for people 18 and over: if you're under 18, your birth year doesn't put you on any board. Other people never see your birth year. However, anyone who views an age-group board can tell that the people listed on it are in that age group. You can remove your birth year at any time in Settings.

Friends

When you follow someone, we store the request, whether it was accepted, when, and a copy of both usernames and avatar codes so the friends lists can show them. Only the two people involved can see it.

Anyone signed in to Doomrank who enters your friend code can see your username and avatar, so they can send you a follow request.

Contacts and phone number (optional)

Find friends from contacts is optional. To use it, you first verify your phone number by text message.

On your phone, the app reads only the phone numbers in your contacts, not names or any other details. It turns each number into a code (a SHA-256 hash) and sends only these codes to our server. The server compares them with the codes of people who have used contact matching and returns any matches, with their username and avatar. We do not store the codes you send. We do keep a count of how many you checked in the last hour, to limit misuse.

When you use this feature, we also store a code made from your own verified phone number. This lets people who have your number in their contacts find your username and avatar, but only if they have verified their own phone number. A hash is not encryption: someone who already has a phone number can make its code and check it. The limits on checks and the need for a verified number make large-scale searching slow, but they do not make it impossible.

Profile photo (optional)

You can set a profile photo from your camera or photo library. It is saved only in the app's storage on your phone. It is never uploaded, and other people see your generated avatar instead. This is the only reason the app asks for camera and photo access.

Blocks and reports

If you block someone, we store their account ID, a copy of their username at that time and the date. If you report someone, we store your account ID, the reason you chose and the date. With each reported account we also store its username, the number of reports and their reasons. No user can read reports or another person's block list. We use reports to review accounts and enforce our Terms, and we keep a count of your recent reports to limit misuse.

Crash reports

When the app hits an error, it sends a crash report to Firebase Crashlytics. This is always on. A report contains the error, technical details about where it happened, your account ID, your device model and operating system version, and short technical notes about what the app was doing, such as which step was running and how many items it handled. If you block, unblock or report someone, these notes also record that you did, with that person's account ID and, for a report, the reason you chose. Crash reports do not contain your screen time, username, country, avatar code, birth year, contacts or phone number. We use them only to find and fix bugs.

Purchases

Doomrank Pro may not be available in every version of the app yet. In versions where it is, the app sends your account ID to our billing provider, RevenueCat, when it starts, so the app knows whether you have bought Doomrank Pro. If you buy it, you pay through Apple or Google, which handle the payment, and RevenueCat receives the status of your purchases. We never see your card details.

Emails to us

If you email us, we receive your email address and your message. We use them only to answer you and to deal with your request.

Legal bases

Where the law requires a legal basis (for example, in the European Economic Area and the UK), we rely on:

• Providing the service you asked for: your account, profile, screen-time totals, boards, friends and purchases.
• Your consent: Sign in with Apple or Google, your phone number and contact matching, your birth year and your profile photo. You can withdraw consent at any time. Remove your birth year or profile photo in the app, or turn off a permission in your phone's settings. Turning off contacts access stops new matching, but people who have your number can still find you. To stop that, or to unlink Apple, Google or your phone number, email support@doomrank.app or delete your account.
• Our legitimate interests in keeping Doomrank safe and working: crash reports, limits on misuse, blocks and reports, and keeping reports after an account is deleted so that deleting an account cannot erase a record of abuse.
• Legal obligations, for example records that the law requires us or our providers to keep.

3. What other people can see

People see your rank, not your minutes.

• On the boards: your rank, your username, your country flag, your generated avatar, and a marker if you are ranked first in your country for that period. Their app also receives your account ID, a random code that identifies your account.
• Which boards: Global shows everyone. Local shows people in the same country. Friends shows the people someone follows who accepted their request. If you're 18 or older and add a birth year, you also appear on your age group's board. Each board shows the top 100 and the people ranked around the viewer.
• In friends lists: people you follow, people who follow you, and people you send a follow request to can see your username and avatar.
• Through your friend code: anyone signed in who enters it can see your username and avatar.
• Through contact matching: if you have used Find friends from contacts, anyone who has your phone number and has verified their own can see your username and avatar.
• In invite links: the link shared by the Invite Friends button on the Profile tab contains your account ID.
• After you block someone: they can no longer follow you, but they can still see your rank and username on public boards, such as Global and Local.

Other people never see your minutes or hours, your tier, your charts, your birth year, your phone number, your email address, your profile photo, or anything about which apps you use.

4. What we do not collect

• Which apps you use, how long you spend in each, or how often you unlock your phone. On iPhone, some of these details are kept on your phone for the app's own use, but they are never uploaded.
• Today's screen time.
• Your contact list, or the names and other details of your contacts.
• Your precise or approximate location. The app does not ask for location access. We only record a country code (see Your profile).
• Your profile photo.
• Your full date of birth.
• Advertising identifiers. We do not use advertising or analytics tools, and we do not track you across other companies' apps or websites.

5. Who else handles your data

We do not sell your personal data, and we do not share it for advertising. We use the following providers to run Doomrank. Each one receives only what it needs.

Google Firebase (Google)

Sign-in (Firebase Authentication, including any email address, name and verified phone number), our database (Cloud Firestore: your profile, daily totals, follows, blocks and reports), our server code (Cloud Functions), crash reports (Crashlytics) and this website (Firebase Hosting).

Upstash

Runs the leaderboard index. For each board, it holds your account ID and your score. It also keeps notes of your country code and age group, which expire 70 days after their last update, so boards can be updated and cleaned up.

RevenueCat

In versions of the app where Doomrank Pro is available: your account ID and the status of your purchases.

Apple and Google

Sign-in, if you use Sign in with Apple or Google Sign-In, and payment for in-app purchases.

DiceBear (api.dicebear.com)

Draws the cartoon avatars. Each time the app shows an avatar, the phone showing it asks DiceBear for the picture. DiceBear receives the avatar code (for an account without one, its username or account ID) and that phone's IP address.

Porkbun and Google (Gmail)

Email sent to support@doomrank.app passes through Porkbun's mail forwarding to an inbox hosted by Google.

People and apps you share with

If you share your friend code or an invite link, it goes to whoever and whatever you choose.

We may also disclose data if the law requires it, or where it is needed to protect the safety of our users.

6. How long we keep it

• Your account, profile, daily totals, follows and block list: until you delete your account. A follow ends earlier if either of you unfollows, removes the other, declines the request or blocks.
• Leaderboard index: each board deletes itself automatically. A day board is deleted 9 days after its last update, a Last 7 days board after 21 days, a month board after 70 days and a year board after 750 days.
• Reports: kept with no fixed end date, including after an account is deleted, so that deleting an account cannot erase a record of abuse.
• Limit counters (a start time and a count, used to limit reports and contact checks): kept with no fixed end date, including after an account is deleted.
• Crash reports: kept by Google for 90 days. After that, Google starts deleting them.
• Billing and purchase records: RevenueCat keeps its record of your account ID, and Apple, Google and RevenueCat keep any purchase records, for billing, refunds and legal reasons.
• Emails to us: kept as long as we need them to deal with your request.

When you delete your account, most of your data is removed immediately. Delete your account lists exactly what is removed and what may remain, and for how long.

7. Your choices and rights

• See your data. Your profile and screen-time history are in the app. To get a copy of everything we hold about you, including your tier, email us.
• Correct it. Change your username, avatar and birth year in the app. Your country follows your phone's settings. For anything else, email us.
• Delete it. Delete your account in the app, or ask us by email. See Delete your account.
• Stop collection. Turn off Screen Time access (iPhone) or Usage Access (Android) in your phone's settings. No new days are sent after that. You can also turn off contacts, camera and photo access in your phone's settings.
• Remove optional data. Remove your birth year in Settings, and your profile photo on the Profile tab. To remove your phone number and stop contact matching from finding you, email us or delete your account.

Depending on where you live, you may also have the right to access, correct or delete your data, to restrict or object to how we use it, to receive it in a portable format, and to withdraw consent. To use any of these rights, email support@doomrank.app. We may ask you to show that the account is yours, for example by sending the username or friend code shown in the app, or by writing from the email address linked to the account. We reply within the time the law requires (one month in the EEA and the UK). You also have the right to complain to your local data protection authority.

We do not sell or share personal information for cross-context behavioural advertising, as those terms are defined in California law.

8. Children

Doomrank is not for children under 13. We do not knowingly collect personal data from children under 13. If you believe a child under 13 is using Doomrank, email support@doomrank.app and we will delete the account.

9. Security

Data travels between the app and our servers over encrypted connections. Our database rules allow only you to read your own profile and screen-time totals, and no user can read reports or another person's block list. No system is perfectly secure, so we cannot promise that your data will never be accessed without permission.

10. International processing

Our providers may process your data in countries other than yours, including the United States, where data protection laws may differ from those where you live.

11. This website

This website (doomrank.app and cooked-42778.web.app) has no accounts, cookies, analytics or trackers. It is hosted on Firebase Hosting, which processes your IP address and basic request details, such as the address of the page you asked for, to deliver the pages. Everything on the pages, including the fonts, comes from this website. The invite page (/join/) loads nothing else and does not send you anywhere. If the invite link includes a friend code, the page shows it, using only your browser.

12. Changes to this policy

We may update this policy. We will post the new version on this page and change the effective date at the top. If we make a significant change, we will make that clear on this website. This version replaces the policy dated September 2026.

13. Contact

Email support@doomrank.app with any question about this policy or your data.

Our old address, feedback@cooked.app, no longer works. Settings > Send Feedback opens it in some versions of the app, so email support@doomrank.app instead.

Effective 6 October 2026.