Effective date: 27 May 2026 Last updated: 24 October 2026 Data controller: ALUWI Inc., a Barbados company Mailing address: Level 1, One Welches, Welches, BB22025, Barbados Contact: hello@aluwi.ai
Island Slam is a Caribbean dominoes game for phones. Here is the short version:
The rest of this page explains exactly what we collect, why, who receives it, how long we keep it and what you can do about it.
Island Slam is made and run by ALUWI Inc., a company registered in Barbados (“we”, “us”, “our”). We decide how your information is used, so we are the “data controller” under the Barbados Data Protection Act, 2019, and under the GDPR / UK GDPR where they apply.
Our data protection authority is the Data Protection Commissioner of Barbados.
This policy covers the Island Slam apps for iPhone and Android (including the Island Slam App Clip), the game at play.aluwi.ai, and emails you send us. It does not cover Apple’s or Google’s own handling of your account with them, the App Store or Google Play, or other websites you open from the game — they have their own privacy policies.
You sign in with your Google or Apple account. From them we receive your email address (with Apple this may be a private “relay” address that Apple forwards to you) and an account ID. We keep these in Google Firebase Authentication to know it is you each time you play. We do not store your Google or Apple profile photo or your real name, and we never see a password.
We use your email only to run your account and to reply if you write to us. We do not send you marketing email.
Why we’re allowed to: we need it to provide the game you asked for (contract).
You choose a display name, a country flag and an avatar. We also give you a friend code. Other signed-in players can see these. Your ratings, stats and achievements, and your places on the leaderboards, weekly podium, seasons and Hall of Fame (name, flag, avatar and scores) are public in the game. We sometimes post the weekly winners and leaderboards on our social media pages, showing the same name, flag, avatar and scores.
Name check. To keep names friendly, every new or changed display name is checked by word lists and by an AI model (Google Gemini, run in our own Google Cloud project; Google does not use it to train its models). If a name is refused, we replace it with a temporary “Player” name and ask you to choose again, and we keep the refused name on a block list so it can’t be used again. We may be emailed that an account’s name was refused (the account ID and the reason).
Game Center (iPhone). If you use Apple’s Game Center, your weekly Solo Cup points are shared with Apple’s Game Center so they show in Apple’s Games app; Apple handles that under its own privacy policy.
Why we’re allowed to: contract (running the game) and our legitimate interest in keeping the game safe and friendly.
When you play online we store the table: who sits where (account ID, name, flag), the moves, the scores and a “still here” signal from your phone. Your dominoes are visible only to you and the game server. Finished or abandoned tables, with everything on them, are deleted about 30 minutes after the last activity.
From version 2.8.0 your phone can connect directly to our game server (run on Google Cloud). To do that it sends your account’s sign-in token, the app version and your phone’s operating system, and the server sees your IP address. We use the IP address to connect you and to limit abuse (for example, too many requests from one address). Google Cloud’s connection logs may keep the IP address for up to 30 days. Our own game-server logs never contain names, dominoes or plain account IDs.
To help you get back to a match, we keep a short note of the table and seat you are playing (“Rejoin match”) until the match ends.
When you are in the park, other players see your name, flag and table; we remove you from the park list after 5 minutes away. If you have friends, they can see whether you are online and when you were last seen.
Why we’re allowed to: contract.
Chat is not end-to-end encrypted: it is stored on our servers, encrypted in transit, so that it can be shown on every phone in the conversation and so that we can look into reports. We use filters to hide offensive words. You can block a player and report a message or a name. When you report something, we keep a copy of the reported message or name (read from our servers, not from your phone), who reported it, who it is about and why, so that we can act — including warning, muting, suspending or removing a player.
Why we’re allowed to: contract (chat is a feature you choose to use) and our legitimate interest in keeping players safe.
If you allow notifications, your phone gives us a push token so we can tell you about friends’ messages, invites and friend requests. A notification shows the sender’s name and the start of their message, so the text passes through Google Firebase Cloud Messaging and, on iPhone, Apple’s push service on its way to your phone. Play reminders are scheduled on your phone itself and send nothing to us. You can turn notifications off at any time in your phone’s settings.
Why we’re allowed to: your consent (the phone asks you).
Island Slam is free to play and is paid for by ads. Ads appear between matches (never during your turn), and you can choose to watch a short rewarded video, for example to play for 10 minutes without ads. Ads are served by Google AdMob. AdMob may pass an ad request to other ad companies that bid to show the ad; from version 2.8.0 these include Unity Ads, whose code is part of the app. Other bidders receive the request through Google.
To show and measure ads, AdMob and the companies bidding through it collect from your phone:
Your choices:
If you have bought ad-free play, no ads are requested.
Why we’re allowed to: your consent where the law requires it (Apple’s tracking prompt, Google’s consent form); otherwise our legitimate interest in funding a free game.
On iPhone you can pay once through Apple In-App Purchase to remove ads. Apple handles the payment; we never see your card or billing details. The app checks with Apple on your phone whether you have bought it. Some players bought ad-free play on our website through Paddle (Paddle was the seller, and accepted PayPal). For those players we keep a record of the purchase’s status and Paddle subscription ID against the account. We are closing the Paddle option.
Why we’re allowed to: contract, and keeping records the law requires.
Report a problem (Settings, or from the Leave menu): we receive your message, your display name and account ID, the problem type, and details that help us find the fault — app version, phone platform and browser details, language, the screen you were on, and the table code, game mode, seat and round. Each report is emailed to our support inbox (hello@aluwi.ai) and to our owner’s inbox so that someone sees it quickly. If you email us instead, we receive whatever you write and your email address.
Report this game: nothing is sent unless you tap Send report. Until then, the app keeps the record of your last two games only on your phone. When you send it, we receive that game’s record: every move and when it was played, the tiles your phone could see, the scores, the messages the game showed you, the display names at the table and, for an online game, the other players’ moves, the table code and how our server answered. If a tile you dragged earned a +10, it also shows where your finger went down and where you let go. With it we receive your account ID, app version, phone type, screen size and any note you write. We keep each game report for 14 days, then a daily clean-up deletes it.
Why we’re allowed to: your consent (you choose to send each report) and our legitimate interest in fixing the game.
Sentry (Functional Software, Inc., USA) receives error reports and short “health” reports when something goes wrong in the game: the error, where in our code it happened, app version, phone platform and system details, and the state of the game at that moment (game mode, round, seat, screen, table code). We remove email addresses and do not attach your name, email or IP address to these reports; Sentry’s servers still see the IP address the report comes from. Nothing is sent from the App Clip.
Google Analytics for Firebase records events such as screens opened, matches started and finished, ads shown and features used, together with an app-instance identifier, phone type and system, and the city, region and country Google estimates from your IP address. We do not attach your account ID or name. We use it to understand which parts of the game are used and how long people play.
Why we’re allowed to: our legitimate interest in a working, improving game.
The app stores your settings, sounds, your blocked-player list, solo stats, the last two games’ records (for Report this game) and similar game memory on your phone. These are not sent to us unless this policy says so. Deleting the app removes them.
Our website at play.aluwi.ai uses Google Analytics to count visits and record which app-store button you tap, so we can see whether visitors choose Android or iPhone. It also uses the Meta pixel (from Meta Platforms Ireland Ltd) to measure whether our Facebook and Instagram ads work. Meta receives your IP address, browser and device details, the fact of your visit and any app-store button you tap. These run only on the website, not in the apps.
If your browser’s time zone is in the UK or Europe, the Meta pixel does not run at all. We detect this from your browser’s own time zone; no location lookup is made. Google Analytics still runs there, with Google’s advertising features switched off. You can block both with your browser’s tracking protection or an ad blocker, and the page works normally either way.
Why we’re allowed to: our legitimate interest in measuring our own website (Google Analytics); your consent where the law requires it for the Meta advertising cookie, which is why it does not run where prior consent would be needed.
We do not sell your personal information for money. These companies receive information to run the game for us, or as described above:
| Who | What they receive | Why | Where |
|---|---|---|---|
| Google — Firebase (Authentication, Realtime Database, Cloud Functions, Cloud Messaging, Analytics), Google Cloud (our game server, load balancer and logs, database backups) and Vertex AI (Gemini name check) | Account email and ID, profile, game and chat data, push tokens and notification text, analytics events, IP addresses for connections, display names for the name check | To run the game, its servers and notifications, keep names safe, and measure use | United States |
| Google AdMob and the ad companies bidding through it, including Unity Ads | Advertising and device identifiers (where allowed), IP address / approximate area, ad interactions, device and app details | To show, measure and protect ads (players without ad-free) | United States and other countries where they operate |
| Google Analytics (play.aluwi.ai website only) | Page views, which app-store button was tapped, approximate area from IP address, device and browser details | To measure the website and see whether visitors choose Android or iPhone | United States and European Union |
| Meta Platforms Ireland Ltd (play.aluwi.ai website only; not run for the UK or Europe) | Website visit, which app-store button was tapped, IP address, device and browser details | To measure our Facebook and Instagram advertising | United States and European Union |
| Apple | Sign in with Apple, In-App Purchase, push notifications to iPhones | Sign-in, payments, notifications | Apple’s own systems |
| Sentry (Functional Software, Inc.) | Error and health reports | Finding and fixing crashes | United States |
| Email providers — Zoho (our hello@aluwi.ai mailbox) and Google (Gmail) | Problem and chat-report alerts and emails you send us | Answering you and dealing with reports | United States / Zoho’s data centres |
| Paddle (only players who bought ad-free on our website) | Purchase and subscription details | Selling and managing the purchase | Paddle’s systems |
We may also share information when the law requires it (for example a court order), or when we honestly believe it is needed to protect someone’s safety or our rights.
We are in Barbados, but our service providers store information mainly in the United States. Where the law requires a safeguard for sending information abroad, we rely on our providers’ data-protection terms, including the European Commission’s Standard Contractual Clauses and, where a provider takes part, the EU–US Data Privacy Framework, and on the cross-border transfer rules of the Barbados Data Protection Act, 2019. Email us for a copy of the relevant terms.
| Information | How long |
|---|---|
| Account (email, account ID), profile, ratings, stats, friends, blocks | Until you delete your account |
| Leaderboards, weekly podiums, seasons, Hall of Fame | While those boards exist; your entries are removed when you delete your account |
| Online tables, table chat and quick talk | Deleted about 30 minutes after the table’s last activity |
| Park chat | At most 2 hours (newest 60 messages) |
| Direct and group messages | 90 days (newest 200 per conversation) |
| Game invites | 30 minutes |
| Game reports (Report this game) | 14 days |
| Problem reports and chat or name reports | Until we have dealt with them. Today we delete them by hand on request; we are adding an automatic clean-up so none is kept longer than 12 months |
| Record that an account was deleted (former account ID and date) | Kept to show that we carried out the deletion; we are adding the same 12-month clean-up |
| Connection logs with IP addresses (game server, Google Cloud), server logs | Up to 30 days |
| Database backups | 30 days |
| Error reports (Sentry) | Up to 90 days |
| Analytics | Up to 14 months |
| Purchase records | As long as the law requires us to keep business records |
No system is perfectly safe. If a breach puts your information at risk, we will tell the Data Protection Commissioner of Barbados (and any other authority the law requires) within 72 hours of finding out, and we will tell you directly where the risk to you is high.
Island Slam is for players aged 13 and over (rated 13+ on the App Store and Teen on Google Play). When you create an account you confirm you are 13 or older. We do not ask for a date of birth, so we do not know any player’s exact age, and the app treats every player the same way: the ad choices in section 3.6 apply to everyone, and we do not sell anyone’s information. Apple and Google add their own protections for younger players: on iPhone and iPad, players under 18 who are signed in with their Apple Account cannot allow apps to track them, and Google says it turns off personalised ads and limits sensitive ad categories (such as gambling and alcohol) for signed-in Google Accounts of people under 18.
If we learn that a player is under 13, we suspend the account at once and delete it and its information within 15 days. Parents or guardians can email hello@aluwi.ai to see, correct or delete their teenager’s information.
Under the Barbados Data Protection Act, 2019, and in the EEA, UK and Switzerland under the GDPR / UK GDPR, you can ask to see the information we hold about you, get it in a portable format, correct it, delete it, restrict or object to how we use it, and withdraw consent at any time (this does not affect what we did before). Players in US states with privacy laws (for example California) also have the right to know, delete, correct and opt out of the “sale” or “sharing” of personal information for targeted ads; we do not sell personal information for money, and you can opt out of targeted ads as described in section 3.6. We give these rights to every player wherever they live.
Email hello@aluwi.ai. We answer within 30 days and may ask you to confirm the request from your account’s email. You can also complain to the Data Protection Commissioner of Barbados or to your local data protection authority.
The apps don’t use advertising cookies. They store game memory on your phone (section 3.10) and use identifiers described above: a Firebase installation ID and an analytics app-instance ID (Google), and the advertising identifiers used by ads (section 3.6).
Our website at play.aluwi.ai uses Google Analytics cookies (to count visits and app-store button taps) and a Meta pixel cookie (to measure our Facebook and Instagram ads); see section 3.11. These are not in the apps. The Meta pixel does not run for visitors whose browser time zone is in the UK or Europe. The website also stores its files on your device so it loads quickly and works offline.
When we change this policy we update the date at the top and post the new version at this address. If a change adds a new kind of information, a new company that receives it, or affects your rights, we will also tell you in the app before it applies.
Email: hello@aluwi.ai
Post: ALUWI Inc., Level 1, One Welches, Welches, BB22025, Barbados
Complaints: the Data Protection Commissioner of Barbados, or your local data protection authority.
Island Slam — Caribbean dominoes, done right. © 2026 aluwi.