Privacy Policy
Last updated: 6 October 2026
This policy covers two things: the Doomblob app, and the doomblob.com website. The short version is that your Screen Time and Apple Health data never leave your iPhone, the app's only third party is the ad banner in the free version, the website counts visits with Google Analytics only if you accept the cookie banner, and the only personal data you give us directly is what you choose to type into the contact form.
Who is responsible for your data
The data controller is Exovoid Ltd., bul. Cherni Vrah 47A, 1404 Sofia, Bulgaria (company registration number BG208120758), which publishes Doomblob.
For any privacy question, or to exercise the rights listed below, write to contact@exovoid.eu.
The Doomblob app
Doomblob has no account and no server. Everything the app knows about you is stored on your iPhone, and we cannot see any of it. Deleting the app deletes it all.
Screen Time data
With your permission, Doomblob uses Screen Time, the system feature on iPhone, to count the minutes you spend in the one app you choose to use less, and in up to two "good apps" if you add them. You choose these apps in the system app picker. The system gives Doomblob an opaque token for each one, so the app does not learn which other apps you have installed, and it never sees what you do inside any app.
The minute counts are stored on your device only. They are never sent to us, to advertisers or to anyone else. Doomblob does not block, lock or hide apps. You can withdraw the permission at any time in Settings → Screen Time.
Apple Health data
With your permission, Doomblob reads activity data from Apple Health to check whether you have completed a challenge: steps, walking distance, flights climbed, mindful minutes, workouts, active energy, heart rate, exercise minutes and stand hours. It reads your date of birth only to work out your age for heart-rate challenges.
- Access is read-only. Doomblob never writes to Apple Health.
- Health data is processed on your device and never leaves it.
- Health data is never used for advertising, never shared with the ad provider, and never stored in iCloud.
You choose which data types to share, and you can change that at any time in Settings → Health → Data Access & Devices. Challenges for data you do not share simply do not appear.
What is stored on your device
Your blob's name and colour, your settings, the day's health and shield, your challenges and a history of daily totals for the Trends screen. Older history is removed automatically. None of it is backed up to our servers, because there are none: if you delete the app or move to a new iPhone without it, the data is gone.
Notifications and Photos
Notifications are created on your device; no push service of ours is involved. If you save your share card, Doomblob asks for permission to add that one image to Photos. It cannot read your photo library.
Advertising in the free version
The free version of the app shows a single banner ad, served by Google AdMob (Google Ireland Ltd.). To fill that banner, AdMob receives technical data from your device such as its IP address, device model, software version, coarse region, and how the ad performed. This is what makes the free version possible.
- The first time ads load, iPhone asks whether Doomblob may track your activity across other companies' apps and websites. If you allow it, AdMob may use your device's advertising identifier to show personalized ads. If you decline, the identifier is not available to anyone and you are served non-personalized ads instead. You can change your answer in Settings → Privacy & Security → Tracking.
- AdMob never receives your Screen Time data, your Apple Health data, your blob or your challenge history.
- The one-time in-app purchase removes the banner.
Legal basis: your consent for personalized advertising where consent is required (Art. 6(1)(a) GDPR), and our legitimate interest in funding a free app through non-personalized advertising otherwise (Art. 6(1)(f) GDPR). See how Google uses data from apps that use its services.
Purchases
The remove-ads purchase is processed by Apple through the App Store. We never see your payment details. Apple tells the app only whether the purchase exists. Apple's handling of your data is governed by the Apple Privacy Policy.
Apple may also give us aggregate, anonymised App Store statistics such as download and crash counts. These cannot identify you.
The doomblob.com website
What we collect, and why
| Data | Why | Legal basis |
|---|---|---|
| Name, email address and message (all required) | To read your message and reply to it, and to send you a confirmation that we received it. | Art. 6(1)(b) GDPR - steps taken at your request before entering into a contract, or Art. 6(1)(f) - our legitimate interest in answering enquiries. |
| Analytics data: a random visitor and session ID kept in cookies, the pages you open and when, the site or search that sent you, your device type, browser, screen size and language, and an approximate city-level location derived from your IP address | To see how many people visit the site and which pages are worth keeping, so we can improve them. | Art. 6(1)(a) GDPR and Art. 5(3) of the ePrivacy Directive - your consent, given by pressing Accept on the cookie banner and withdrawable at any time. |
| Your IP address, transiently | To rate-limit the contact form and to run the reCAPTCHA spam check. It is held in memory only for as long as the rate-limit window and is never written to disk. | Art. 6(1)(f) GDPR - our legitimate interest in keeping the form free of abuse. |
The website has no database. The form does not store what you typed anywhere on our servers; it is turned into an email and sent on.
Analytics
We use Google Analytics 4 (Google Ireland Ltd.) to count visits to doomblob.com, and only if you press Accept on the cookie banner. Nothing is loaded, and no cookie is set, before you choose. Refusing costs you nothing: the site behaves identically either way.
If you accept, your browser loads a script from googletagmanager.com and sends Google
the data listed in the table above. Google processes it for us as our processor, under its
data
processing terms. If you refuse, that request is never made.
- We do not see your IP address. Google uses it to work out an approximate city-level location and then discards it; it is not logged or stored in our reports, and traffic from the EU is collected on Google's European servers.
- No advertising features. Google Signals and ad personalisation are switched off on our property, so what we measure is not used to build advertising audiences or to follow you around other websites.
- We only ever look at totals. We have no interest in individual visitors, and we do not try to identify anyone or combine analytics data with the emails you send us.
Cookies
We set no cookies of our own. The only cookies this site can place come from Google Analytics,
they are first-party cookies on doomblob.com, they hold random numbers rather than
anything about you, and they are placed only after you accept.
| Cookie | Purpose | Expires | Set when |
|---|---|---|---|
_ga |
Google Analytics - distinguishes one visitor from another so visit counts are not double-counted. | 2 years | Only after you accept |
_ga_56L603733H |
Google Analytics - keeps track of the current session. | 2 years | Only after you accept |
doomblob-consent |
Remembers your answer to the cookie banner so we stop asking. Stored in your browser's local storage, not sent to us or anyone else. Strictly necessary, so it needs no consent. | Until you clear it | When you answer the banner |
Changing your mind. Press here or in the footer of any page to withdraw or give consent at any time. Withdrawing takes one click, deletes the Google Analytics cookies from your browser, and stops any further collection. You can also install Google's Analytics opt-out browser add-on, or use any browser or extension that blocks trackers.
Fonts are served from our own server rather than a font CDN, so a page you have not consented on contacts nobody but us.
Google reCAPTCHA, described next, additionally sets a _GRECAPTCHA cookie on Google's
own domain - but only if you start writing to us.
reCAPTCHA on the contact form
The contact form is protected by Google reCAPTCHA v3 (Google Ireland Ltd.), which scores how likely a submission is to be automated. Google receives your IP address, browser and device information, and how you interacted with the page. This is strictly for spam and abuse prevention; the score is used once and not stored.
reCAPTCHA is not loaded when the page opens. It is fetched only when you first click into or tap the contact form, so a visitor who reads the site without writing to us never contacts Google at all.
Legal basis: Art. 6(1)(f) GDPR - our legitimate interest in preventing spam and abuse. Google's Privacy Policy and Terms of Service apply. If you would rather not use reCAPTCHA, email us directly at contact@exovoid.eu instead.
Server logs
Our hosting provider keeps standard web server logs (IP address, time, requested URL, user agent) for security and troubleshooting. These are kept for a short period and are not combined with anything else or used to identify you. Legal basis: Art. 6(1)(f) GDPR.
Who else sees your data
- Hostinger - our hosting and email provider. Your message is delivered to our mailbox through Hostinger's mail service, and both the message to us and the confirmation to you are stored in that mailbox. Hostinger acts as our processor.
- Google Ireland Ltd. - provides Analytics and reCAPTCHA on the website, and AdMob in the free version of the app.
- Apple - distributes the app and processes in-app purchases.
We do not sell personal data, and we do not share it with anyone else. Where a provider transfers data outside the EU/EEA, that transfer relies on the European Commission's Standard Contractual Clauses and, for transfers to the United States, the EU-US Data Privacy Framework.
How long we keep it
Your message lives only in our email mailbox. We keep support emails for 24 months from our last exchange with you, then delete them. IP addresses used for rate limiting are held in memory for 15 minutes and then discarded.
Analytics events are deleted by Google after 14 months, the longest retention Google Analytics allows. The aggregate counts we look at (visits per page, per month) are not personal data and stay in our reports.
Children
Doomblob is not directed at children under 13, and we do not knowingly collect personal data from them. If you believe a child has sent us personal data, write to us and we will delete it.
Your rights
Under the GDPR you can ask us to:
- give you a copy of the personal data we hold about you (access);
- correct anything inaccurate (rectification);
- delete it (erasure);
- restrict how we use it, or object to us using it under legitimate interest;
- provide it in a portable, machine-readable format.
Write to contact@exovoid.eu and we will respond within one month. There is no charge. In practice, the only personal data we are likely to hold about you is an email exchange.
If you think we have handled your data badly, you can complain to the Bulgarian supervisory authority: the Commission for Personal Data Protection (Комисия за защита на личните данни), 2 Prof. Tsvetan Lazarov Blvd., 1592 Sofia, cpdp.bg. You may also complain to the authority in your own EU country.
Do you have to give us this data?
No. It is not a statutory or contractual requirement, and the app itself asks for nothing. We do need a name, an email address and a message to be able to reply, so without them the contact form cannot be submitted.
Trademarks
Apple, the Apple logo, App Store, Apple Watch, and iPhone are trademarks of Apple Inc., registered in the U.S. and other countries.
Changes
If we change how we handle your data, we will update this page and the date at the top. Material changes affecting the app will also be noted in the App Store release notes.