Privacy Policy

At SudokuSync (accessible from https://sudokusync.com and the official Android mobile application), we consider the privacy of our visitors and players to be of extreme importance. This Privacy Policy document describes in comprehensive detail the types of information collected, stored, and processed, and how we uphold global privacy standards including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA/CPRA), the Children's Online Privacy Protection Act (COPPA), Google Play Store Data Safety Policies, and Google AdSense Program Policies.

1. Information Collection & Storage Architecture

We operate on strict data minimization principles, clearly distinguishing between client-only local data and cloud database records:

• Client-Side Local Storage (Browser & Device Only): Standard browser localStorage is used strictly on your device to persist UI preferences (Dark Mode, sound synthesis, haptics), mistake counter limits, timer visibility, active puzzle board state/notes, and saved single-player games. This data remains on your device and is never sold, shared, or transmitted to third-party marketing entities.
• Google Cloud Firestore (Real-Time Multiplayer & Leaderboards): When participating in multiplayer challenges or global matches, the following non-sensitive game parameters are stored on Google Cloud Firestore:
  • Anonymous Challenge ID, seed number, and difficulty level.
  • Player display nickname (user-chosen alphanumeric string) and user ID.
  • Match performance metrics: Completion time (seconds), mistake count, and win/loss completion status.
  • Firebase Cloud Messaging (FCM) & Device Identifiers: When notification permissions are granted, an anonymous Firebase Cloud Messaging (FCM) registration token and anonymous device identifier are generated strictly to deliver real-time challenge invites, opponent duel alerts, and match completion updates. Push tokens are never used for cross-app tracking, device fingerprinting, behavioral profiling, or unsolicited advertising.
    User Control & Revocation: Players maintain total control over notifications and may enable or disable notifications at any time via the in-game toggle under Settings → "Push Notifications" or through the operating system / web browser application settings.
  • Google Account & Cloud Synchronization (Optional): When players choose to link or sign in with their Google Account ("Connect Google"), we receive basic profile identity credentials via Google OAuth (Display Name, Email address, and unique authentication User ID) solely to authenticate user sessions, securely synchronize personal stats and puzzle records across devices, and manage player profile settings. We do NOT collect, access, or store passwords, contacts, personal device files, or financial details. Authentication credentials are used strictly for game functionality and cross-device continuity, and are never sold, rented, or shared with third-party advertisers.
  • Infrastructure & Diagnostic Server Logs: Standard web server request logs (including IP addresses, browser user-agent, timestamps, and rate limiting metrics) are processed automatically by Google Firebase Hosting and our Express server solely for operational security, DDoS prevention, and rate-limiting integrity.

  2. Google AdSense & Third-Party Cookies

  We partner with third-party advertising vendors, including Google LLC (Google AdSense), to serve advertisements when you visit our website. Third-party advertising networks use cookies, web beacons, and device identifiers to measure ad performance and serve advertisements based on your prior visits to this website or other websites on the Internet.

  🍪 Advertising Cookie Transparency & Opt-Out Portals:

  Google's use of advertising cookies, including the DoubleClick cookie (DART cookie), enables it and its partners to serve ads to our users based on their visit to our sites and/or other sites on the Internet. Users may opt out of personalized advertising or manage cookie preferences at any time through the following official privacy portals:

  • Google Ads Settings: https://adssettings.google.com
  • Network Advertising Initiative (NAI): https://www.networkadvertising.org
  • Digital Advertising Alliance (DAA / AboutAds): https://www.aboutads.info/choices
  • European Interactive Digital Advertising Alliance (EDAA): https://www.youronlinechoices.eu/

  Ad Traffic & Quality Protection: Automated bots, click-farms, repeated manual ad clicks, ad-block tampering, or proxy manipulations are strictly prohibited and actively filtered to preserve ecosystem integrity.

  3. Right to Erasure / Account & Data Deletion (Google Play & Global Privacy Standards)

  Under global privacy frameworks (GDPR, CCPA/CPRA, DPDP) and Google Play Store Data Safety Guidelines, every player maintains the absolute right to request the permanent deletion of their account, gameplay records, and associated personal or telemetry data.

  🗑️ Account & Data Deletion Methods:

  • Directly In-App (Instant Self-Service): Open Settings → Navigate to the SUPPORT & INFO section → Click "Delete Account & Data". This immediately purges your Firestore cloud profile, real-time presence documents, active multiplayer room player documents, stored FCM push notification tokens, device localStorage and sessionStorage cache, and revokes your authentication session.
  • Web & Email Request (Alternative Channel): If you cannot access the application or have uninstalled it, you may submit a data deletion request by emailing sudokutogethermode@gmail.com. Please provide your player display name or associated email address. Deletion requests are processed and confirmed within 24 to 48 business hours.

  Additional statutory rights for users in the EEA, UK, and worldwide include:

  • Right of Access: Request a copy of your stored player and leaderboard records.
  • Right to Rectification: Update or modify your player display nickname at any time in-game.
  • Right to Restriction & Data Portability: Request limitations on processing or export of your match telemetry.

  4. California Privacy Rights (CCPA / CPRA)

  Under the California Consumer Privacy Act as amended by the CPRA, California residents are entitled to know what data categories are collected and to request data deletion. We do NOT sell or share your personal information with third parties for monetary or commercial consideration.

  5. Children's Privacy Protection (COPPA)

  Protecting the privacy of young children is especially important. SudokuSync does not knowingly collect or solicit personally identifiable information from children under the age of 13 (or under 16 in the EEA/UK). Our game does not require real names, physical addresses, or phone numbers to play. If a parent or guardian believes their child has submitted personal information to our servers, please contact us immediately at sudokutogethermode@gmail.com and we will expeditiously remove such records.

  6. Data Retention & Security Controls

  Multiplayer challenge match records older than 30 days are pruned automatically from our databases. All client-to-server traffic is encrypted in transit using industry-standard TLS/HTTPS protocols. Strict Firestore security rules enforce document-level ownership and prevent unauthorized data tampering.

  7. Contact Us

  For any questions regarding this Privacy Policy or our data handling practices, please contact our Data Protection desk:

  Email: sudokutogethermode@gmail.com
  Response Turnaround: Within 24 to 48 business hours.
  ← Return to SudokuSync | Terms of Service
  
  © 2026 SudokuSync. All rights reserved.