Privacy policy

1. Offline puzzles, connected features

Puzzle generation and ordinary play work on your device. Online features include player profiles, verification of ranked results, progress synchronization and leaderboards. Offline play does not mean the app collects no information: connected services and included diagnostics can send information when a connection is available.

2. Information we handle

• Player identity: a pseudonymous Firebase player identifier, display name and selected built-in avatar. The current app uses automatic anonymous authentication, not email/password sign-in. A nickname need not be your real name.
• Puzzle activity: game and puzzle identifiers, dates, moves or state needed for verification, timing, hints, results, XP, streaks and progress. We use this to operate gameplay and protect fair scoring.
• Usage and diagnostics: app interactions, sessions, crash reports, device/app details and installation identifiers help us understand use and investigate failures.
• Connection and security information: IP addresses and app-integrity signals support communication, authentication and abuse prevention. Analytics can derive an approximate region from an IP address and collect the Android advertising identifier where available.
• Support correspondence: if you contact us, we receive your email address and information you choose to provide. Do not send passwords or sensitive identification documents.

Saved boards, preferences and onboarding progress also reside on your device. Android backup is enabled in the current app; your operating-system backup settings may copy or restore app data.

The app does not request access to your contacts, camera, microphone or precise device location. It has no feature for uploading personal photos or recording audio.

3. Providers and visibility

We use Google Firebase and Google Cloud for authentication, data storage, backend processing, analytics, crash reporting and app-integrity checks. These services process information needed to deliver their functions. Learn more at Firebase privacy and security and Google's Privacy Policy.

Leaderboard entries are visible to other players. They include a display name, built-in avatar, score and rank; the current leaderboard payload also contains a pseudonymous player identifier. Avoid putting private information in your display name.

Information may also be disclosed when required by applicable law, to address fraud or security threats, or in a business transfer subject to appropriate privacy protections. We do not provide your support messages for public leaderboard display.

4. Advertising

We plan to support Daily Puzzle Box with Google AdMob. The currently inspected development version does not display ads. The following describes advertising in ad-supported versions; it does not mean an ad SDK is running in every version.

In ad-supported versions, Google AdMob processes information such as IP addresses (which can indicate approximate location), device/ad identifiers, ad interactions and diagnostics to deliver and measure ads, prevent fraud and support analytics. Personalized advertising may use information to select ads relevant to you, subject to applicable consent and age restrictions. Non-personalized ads can still involve data processing.

Before activating ads, we will provide the privacy notices and choices required for your region. Learn more about Google advertising and Google ad preferences. Ad personalization and age-related protections must follow applicable rules; targeting an audience aged 13+ does not make every player an adult.

Advertising identifiers can already be processed by the included analytics service; absence of displayed ads does not imply absence of these identifiers. Sound, haptics, Calm Mode and reduced-motion settings are gameplay preferences, not advertising or analytics consent controls.

5. Retention

We keep your player profile, cloud progress, puzzle history, statistics and leaderboard records while your profile is active and until you ask us to delete them. After a verified deletion request, we aim to remove the identifiable records from our active systems within 30 days. Leaderboard entries and other records associated with the deleted profile are removed or anonymized as part of that process.

Security and abuse-prevention logs may be retained for up to 90 days after collection, or longer only when reasonably necessary to investigate an active incident, prevent abuse or comply with a legal obligation. Support correspondence is retained for up to 24 months after the request is closed. Firebase and Google Cloud analytics, crash-reporting and diagnostic data are retained according to the retention settings and policies applicable to those services, and we ask providers to delete identifiable data when our deletion request applies to it.

Encrypted backups may continue to contain deleted data for up to 90 days while they expire through the normal backup cycle; we do not restore deleted personal data except where needed for disaster recovery. We may retain a narrow record of the deletion request, verification and action taken for up to 24 months to demonstrate compliance and resolve disputes. Data that is irreversibly aggregated or cannot reasonably be linked to a player may be retained.

We do not promise that uninstalling removes server records. Aggregated information that can no longer identify you may be retained separately from identifiable records.

6. Your choices and deletion requests

You can edit your display name and built-in avatar in Profile. To request access, correction or deletion, contact our privacy email or use the data deletion request page. The request page explains verification, scope and processing times.

We may need proportionate information to verify that a request concerns your player profile. A display name or public player ID alone is not proof of ownership. Because the current identity is anonymous, losing access to the app can make verification or recovery difficult; you may still contact us without reinstalling.

Your Android settings may let you reset or delete your advertising ID and manage backups. These controls do not automatically delete your gameplay records from our servers.

Depending on your location, you may have rights to access, correct, erase, restrict or object to processing, request portability, withdraw consent, or complain to your local data-protection authority. Applicable exceptions may limit a request. We will respond under the laws that apply to you.

7. Security and international processing

Online connections use encrypted transport, and server access is restricted through authentication and access controls. No system is perfectly secure. Our service providers may process information outside your country, including in the United States and India.

We process information to provide and secure the game, maintain player progress, verify results, operate leaderboards, diagnose faults and respond to support requests. Where applicable law requires a legal basis, these purposes are based on performing the service you request, our legitimate interests in security and service improvement, compliance with legal obligations, and consent where consent is required, including for personalized advertising.

Because our providers may process information internationally, information may be transferred to countries whose privacy laws differ from those in your country. We use the contractual, technical or other safeguards made available by our providers and required by applicable law. You may contact us to ask about the safeguards relevant to your request. We currently do not appoint a separate data-protection officer or local representative; if applicable law requires one for a particular region, we will provide the required regional contact or notice before relying on that arrangement.

8. Children

Daily Puzzle Box is intended for people aged 13 and older, not for children under 13. If you are below the age at which you can consent to relevant processing in your country, any required parent or guardian authorization must be obtained. This statement does not replace technical age and consent safeguards required by law.

If you believe a child under 13 has provided personal information through the app, contact hello@akashsarker.com so we can investigate and arrange appropriate deletion. We do not knowingly seek personal information from children under 13.

9. Changes and contact

We will update this page when our practices change and revise its effective date. Where required, we will provide additional notice or obtain consent before new processing starts.

Questions? Email hello@akashsarker.com.