Privacy

Who is responsible

SUDORI (the app and this website) is made by David Coelho, an independent developer based in Portugal, who is the controller of the personal data described here. For anything about privacy, write to support@playsudori.com.

Data on your device

Your games, history, statistics, achievements, unlocked items and settings are stored in the app on your device. They are not sent anywhere unless you use an online feature.

You can export all of it as a JSON file, or delete it, in Settings → Privacy & data. The app also keeps a small error log on your device to help diagnose problems. It stays on the device.

Optional online features

Together rooms and Account & sync only start when you use them. They run on Supabase, with data stored in the European Union (Ireland). When you use them, SUDORI processes:

• A random account identifier created when you first go online.
• Your email address, only if you add one to keep your account. It is used to send sign-in codes.
• In rooms: the name and colour you choose, your moves and notes, and your presence while the room is open. Your solve count and best times are shared only if you turn on sharing.
• With sync: your settings and summaries of finished games (mode, variant, difficulty, time, mistakes, hints used and completion date).
• For security: your IP address and device information in server and sign-in logs, and records of wrong room codes.

You don’t have to give any of this: everything in SUDORI works offline. Without it, only the online features are unavailable.

Purchases

Payments are handled entirely by Apple or Google, under their own privacy policies. To unlock what you bought, SUDORI checks the purchase with the store and keeps the product, the store’s transaction identifier and its signed purchase data, linked to your account identifier. We never see your card details.

Legal bases

Online features and purchases are processed because they are needed to provide the service you ask for (GDPR Art. 6(1)(b)). Purchase records may also be kept to meet legal obligations (Art. 6(1)(c)). Security logs and the protection against room-code guessing rely on our legitimate interest in keeping the service safe (Art. 6(1)(f)).

Who processes data for us

Supabase (database, sign-in, sign-in emails and server functions) and Cloudflare (hosting for this website and forwarding of support email) process data on our behalf under data processing terms. Both are US companies, and Cloudflare’s network is global. Where data may be accessed from outside the European Economic Area, it is protected by the EU–US Data Privacy Framework and/or the European Commission’s Standard Contractual Clauses.

We don’t sell or share personal data, and nobody else receives it unless the law requires it.

What we don’t do

• No advertising, no advertising identifiers and no tracking across apps or websites.
• No analytics or crash-reporting services.
• No profiling and no automated decisions about you.

Camera

Scan & Play reads a photo of a paper puzzle on your device. The photo is never uploaded and isn’t saved: only the digits you confirm are kept, as a puzzle.

Postcards

A postcard link contains the puzzle and the optional message you write, and nothing about you. Anyone with the link can read it, so share it only with people you trust.

Reminders

Daily reminders, if you turn them on, are scheduled by your device. Nothing is sent to us.

This website

This website has no ads, analytics or cookies. It saves your chosen theme and your mini puzzle progress in your browser’s local storage, which never leaves your device.

Shared puzzle and room links are read in your browser. Cloudflare, which hosts the site, processes technical data such as IP addresses to deliver and protect it.

How long data is kept

• On your device: until you delete it or remove the app.
• Online account, synced data and purchase records: until you delete your online account, which removes them straight away.
• Rooms: a room closes after 24 hours, and its moves and members are deleted 7 days later. Your membership is deleted at once if you delete your account.
• Wrong room-code records: deleted after 1 day.
• Server and sign-in logs: kept by Supabase and Cloudflare for a limited period for security, then deleted automatically.
• Emails to support: kept while needed to answer you, and deleted at the latest 2 years after the conversation ends.

Your rights

You can access, correct, export or delete your personal data, restrict or object to its use, and withdraw any choice you made. Export and deletion are built into the app (Settings → Privacy & data, and Account & sync → Delete cloud account). For anything else, write to support@playsudori.com; we answer within one month.

You can also complain to a data protection authority. In Portugal that is the Comissão Nacional de Proteção de Dados (CNPD), www.cnpd.pt.

Children

SUDORI is suitable for all ages. It has no ads and no public chat, and Together rooms are private and joined only with a code. Adding an email address is optional; if you are under 13, ask a parent or guardian before adding one.

Security

Data sent to our servers is encrypted in transit, and each player can only reach their own data and the rooms they belong to.

Changes

If this policy changes, the new version will be published here with a new date, and important changes will be shown in the app.