Privacy Policy

Last updated: 22 October 2026

This policy covers the website ludisto.com and our app Dominion Minion. What the Shell and Sonow have their own privacy policies: see whattheshell.games and sonow.app.

Who is responsible

Email: legal [at] ludisto.com

The website

This site sets no cookies, uses no analytics or tracking, and loads nothing from third parties: no fonts, scripts or embedded videos.

Server logs. Our hosting provider keeps standard HTTP access logs, such as your IP address, browser, the page requested and the time, for security and operations, usually for no more than 30 days. We do not use these logs for analytics. The legal basis is our legitimate interest in running a secure website (Art. 6(1)(f) GDPR).

Contact form. If you use the contact form, we receive your name, email address and message, and use them only to reply to you. They are delivered to our mailbox by email and kept only as long as needed for the conversation. The legal basis is Art. 6(1)(b) GDPR where your message concerns one of our apps or a request you make, and our legitimate interest in answering inquiries (Art. 6(1)(f) GDPR) otherwise.

Email. If you email us, the same applies: we use your address and message only to reply.

Dominion Minion

Dominion Minion collects no personal data. It has no account, no analytics, no advertising and no tracking, and it sends nothing to us or to anyone else. Your settings, such as your expansions and forbidden cards, are stored only on your device. The app is sold through Apple’s App Store, which handles the purchase under Apple’s privacy policy.

Service providers

We use these service providers (“processors” under the GDPR), with data processing agreements in place:

• Vercel Inc. (Covina, California, USA) hosts this website and the contact form and keeps the server logs. Processing takes place in the United States.
• Resend (Plus Five Five, Inc., San Francisco, California, USA) delivers contact form messages to our mailbox, from servers in the EU (Ireland).
• Fastmail Pty Ltd (Melbourne, Australia) hosts our email, on servers in the EU (Amsterdam), with emergency backups in the United States.

Where personal data is transferred outside the EU, the transfers rely on the European Commission’s Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework. You can request a copy of the relevant safeguards by emailing us.

We do not sell or share your data with anyone else.

Your rights

Under the GDPR you have the right to access, correct or delete your data, to restrict or object to its processing, and to data portability. You also have the right to complain to a supervisory authority. In Berlin that is the Berliner Beauftragte für Datenschutz und Informationsfreiheit (datenschutz-berlin.de), and you can also complain to the authority in your own EU member state.

To exercise any of these rights, email legal [at] ludisto.com or use our contact form.