Privacy

Who is responsible

Needs legal review

SUDORI is developed by David Coelho, who decides how the data described here is used.

Data on your device

Your games, history, statistics, achievements, unlocked items and settings are stored in the app on your device. They are not sent anywhere unless you turn on an online feature.

You can export all of it as a JSON file, or delete it, in Settings → Privacy & data. The app also keeps a small error log on your device to help diagnose problems. It stays on the device.

Optional online features

Needs legal review

Together rooms and Account & sync use a database hosted by Supabase in the European Union (Ireland), acting as our processor. When you use them, SUDORI processes:

• An anonymous account identifier created when you first go online.
• Your email address, only if you add one to keep your account. It is used to send sign-in codes.
• In rooms: the name and colour you choose, your moves and notes, and your presence while the room is open. Your solve count and best times are shared only if you turn on sharing.
• With sync: your settings and summaries of finished games (mode, variant, difficulty, time, mistakes, hints used and completion date).

Rooms expire after 24 hours. Failed attempts to join a room with a wrong code are recorded for up to a day to stop code guessing. Server logs record event codes only, never tokens or account identifiers.

Purchases

Payments are handled entirely by Apple or Google. To unlock what you bought, SUDORI checks the purchase with the store and keeps a record of the product and the store’s transaction identifier, linked to your guest or account identifier. We never see your card details.

Legal bases

Needs legal review

Online features and purchases are processed because they are needed to provide the service you ask for (GDPR Art. 6(1)(b)). Purchase records may also be kept to meet legal obligations (Art. 6(1)(c)), and the protection against room-code guessing relies on legitimate interest (Art. 6(1)(f)).

Camera

Scan & Play reads a photo of a paper puzzle on your device. The photo is never uploaded and isn’t saved: only the digits you confirm are kept, as a puzzle.

Postcards

A postcard link contains the puzzle and the optional message you write, and nothing about you. Anyone with the link can read it, so share it only with people you trust.

Reminders

Daily reminders, if you turn them on, are scheduled by your device. Nothing is sent to us.

This website

Needs legal review

This website has no ads, analytics or cookies. It saves your chosen theme and your mini puzzle progress in your browser’s local storage, which never leaves your device.

Shared puzzle and room links are read in your browser and are not sent to a server. Like any website, the hosting provider may process technical data such as IP addresses in its logs.

How long data is kept

Needs legal review

Data on your device stays until you delete it or remove the app. Cloud data stays until you delete your cloud account, which removes it straight away.

Your rights

Needs legal review

You can ask to access, correct, export or delete your personal data, and object to how it is used. Most of this is built into the app. You can also complain to your data protection authority; in Portugal that is the CNPD.

Children

Needs legal review

SUDORI has no ads and no public chat. Together rooms are private and joined only with a code. Specific rules for children’s data will be confirmed before launch.

Changes

If this policy changes, the new version will be published here with a new date.