Privacy Policy

This Privacy Policy explains how La Empresa Cooperativa (“we”, “us”, or “our”)—independent developers publishing the Sudoke app under a developer name—collects, uses, shares, and protects information when you use Sudoke and related services (the “Service”). We reserve the right to collect and process user data as described here, and we intend to follow applicable law and industry best practices, including requirements relevant to users in the United States and the European Economic Area (EEA) / UK.

1. Data we collect

Depending on how you use the Service, we may collect:

• Account data — email address, username, display name, avatar URL, authentication identifiers from our identity provider (for example Clerk / Google sign-in), and account timestamps.
• Gameplay data — puzzle attempts, times, mistakes, ranked results, rating and rating history, streaks, freezes, challenges, friends, notification preferences, and related competitive metadata.
• Device and technical data — device type, OS, app version, push notification tokens, approximate locale, IP address (via our hosts or processors), and diagnostic logs.
• Usage and analytics data — product events (for example feature usage and session signals) used to improve the Service.
• Advertising identifiers — where ads are shown, advertising networks may process device advertising identifiers subject to platform consent (for example ATT on iOS) and their own policies.

Guest sessions may create temporary identifiers so you can play before signing in. If you later create an account, we may link eligible guest progress to your account.

2. How we use data

We use personal data to:

• provide, operate, and secure the Service;
• run ranked play, leaderboards, ratings, streaks, social features, and support;
• authenticate you and prevent fraud, cheating, and abuse;
• send service notifications you enable (reminders, challenges, ranking updates);
• analyze product performance and fix bugs;
• show advertisements where applicable;
• comply with law and enforce our Terms of Service.

3. Legal bases (EEA / UK)

Where GDPR / UK GDPR applies, we process personal data under one or more of:

• Contract — to provide the Service you request (account, gameplay, ranked features);
• Legitimate interests — security, anti-cheat, product improvement, and basic analytics, balanced against your rights;
• Consent — where required (for example certain marketing, optional analytics cookies on web, or advertising consent frameworks);
• Legal obligation — where we must retain or disclose information.

4. Sharing and processors

We do not sell your personal information for money. We share data with service providers that process it on our behalf or as independent controllers, including:

• Clerk (authentication);
• PostHog (product analytics), where enabled;
• Sentry (error monitoring), configured to minimize personal data;
• Google AdMob or similar (ads), where enabled;
• cloud hosting and infrastructure providers;
• authorities when required by law.

Competitive results may be visible to other players (for example leaderboards, challenges, and rating-related displays) under the username or display name you choose.

5. International transfers

We may process data in the United States and other countries. Where required (for example transfers from the EEA/UK), we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions offered by our processors.

6. Retention

We retain account and gameplay data while your account is active and as needed to operate competitive features. After account deletion we erase or de-identify personal profile data as described below. Diagnostic and analytics data are retained according to each provider’s retention settings and our operational needs.

7. Account deletion

Account deletion is available in the app under Profile → Account → Delete account. Deletion cannot be undone. Once processed, deleting your account:

• removes your email address, username, and avatar from your Sudoke profile and replaces your display name with a generated nickname;
• attempts to request deletion of your sign-in identity from our authentication provider, Clerk;
• deletes your friends, friend requests, push notification tokens, and notification preferences;
• attempts to request deletion of your analytics record from PostHog, where that provider is enabled.

Requests to Clerk and PostHog depend on provider availability and configuration. Their processing may not be immediate or complete when your Sudoke profile is deleted. Contact support@sudoke.app if you need help with a deletion request.

We keep your past competitive results — completion times, ranks, and rating changes — because removing them would alter other players’ historical standings. These records remain associated with an internal account identifier so competitive history stays consistent, but are displayed under a generated nickname (for example “Swift Otter”), with no avatar, username, or link to a public profile.

Our error monitoring provider, Sentry, is configured to minimize personal data, including by disabling default personal information collection. Diagnostic events may contain technical information and identifiers and are retained according to the provider’s retention settings.

If you have uninstalled the app or cannot access your account, you can request account deletion by emailing support@sudoke.app. We may need to verify your request.

8. Your rights

Depending on where you live, you may have rights to access, correct, delete, restrict, or object to certain processing, to data portability, and to withdraw consent. EEA/UK users may lodge a complaint with their local supervisory authority. California residents may have additional rights under the CCPA/CPRA (including knowing categories of personal information collected and requesting deletion), subject to exceptions. To exercise rights, contact support@sudoke.app. We may need to verify your request.

9. Children

The Service is not directed to children under 13 (or a higher age required in your country). We do not knowingly collect personal information from children below that age. If you believe we have, contact us and we will take appropriate steps.

10. Security

We use reasonable technical and organizational measures to protect data. No method of transmission or storage is completely secure; you use the Service at your own risk to that extent.

11. Changes

We may update this Privacy Policy by posting a new version with an updated effective date and document version. Where required by law we will seek additional consent.

12. Contact

Privacy questions: support@sudoke.app

Controller / operator: La Empresa Cooperativa (independent developers publishing Sudoke under developer name).