Sudoku Garden – Privacy Policy

Last updated: 12 March 2026

This Privacy Policy explains how we collect, use, and protect information when you use the Sudoku Garden mobile application (the "App"). This document is provided for informational and technical transparency only and does not constitute legal advice. You remain responsible for ensuring that your actual practices and legal terms comply with all applicable laws in each jurisdiction where the App is offered.

1. Information We Collect

1.1 Information you provide

• Email address – If you sign in with email/OTP, we store your email address to create and maintain your account.
• Third‑party account information – If you sign in with Google or Apple, we receive your email address (or a pseudo‑anonymous email for Apple) and a provider‑specific identifier (e.g. Google ID or Apple ID) to authenticate you.

1.2 Information collected automatically

• Technical request data – When the App communicates with our backend API, we may log information such as your IP address, request path, HTTP method, response status, timestamps, and a User‑Agent string that includes your platform and app version.
• Device/platform information – The App sends a simple platform indicator such as android, ios, or other with authentication requests so we can understand which platform you are using.
• Gameplay metadata – When a game finishes, the App may send game‑related metadata such as difficulty, number of failed attempts, and use of helper features so we can improve the game experience. This does not include the full board contents for every move.

2. How We Use Information

We use the information described above to:

• Authenticate you and maintain your session in the App.
• Allow you to sign in with email, Google, or Apple.
• Store your default difficulty and assistance settings for future games.
• Log API requests and responses for security, debugging, and reliability.
• Understand aggregate usage patterns to improve Sudoku Garden.

3. Legal Basis and Children

The current implementation of the App is designed as a general‑audience puzzle game and does not include explicit age‑gating, parental consent flows, or other child‑specific compliance mechanisms. If the App is offered to children or to users in jurisdictions with special protections for minors (such as COPPA in the United States or GDPR in the EU/EEA), you may need to introduce additional measures (e.g. age gates, verified parental consent, updated policies) before publishing or promoting the App in those markets.

You should consult with qualified legal counsel to determine how laws such as the Children's Online Privacy Protection Act (COPPA) and the General Data Protection Regulation (GDPR) apply to your specific use case and to ensure that any required parental notices, consents, and data subject rights are properly implemented.

4. Data Sharing

We may share information with third parties only in limited circumstances, such as:

• Authentication providers – When you choose "Continue with Google" or "Continue with Apple", we exchange authentication data with Google or Apple as part of the sign‑in process.
• Service providers – We may use hosting, logging, or analytics providers to operate and improve the App, subject to appropriate contractual safeguards.
• Legal reasons – We may disclose information if required by law or in response to valid legal process, or to protect our rights, users, or the public.

5. Data Retention and Deletion

• Account data – When you delete your account from within the App, the backend attempts to remove your stored user record and associated authentication information from the primary database.
• Logs and backups – Server logs (including API request/response logs) and database backups may retain information for a longer period for security, auditing, and continuity purposes. These are typically rotated or pruned on a schedule, but may not be deleted immediately when an account is removed.

6. Security

We take reasonable technical measures to protect information processed by the App and backend, such as HTTPS transport and server‑side logging controls. However, no system can be guaranteed to be 100% secure, and you should use strong, unique credentials for any associated accounts (such as your email, Google, or Apple ID).

7. Your Rights and Choices

Depending on where you live, you may have certain rights over your personal data, such as rights to access, correct, delete, or restrict processing. The current App implementation provides a basic in‑app account deletion option. Additional mechanisms (for example, a dedicated contact address for data requests) may be needed to fully satisfy applicable laws.

8. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in the App or in applicable laws. When we make material changes, we will update the "Last updated" date at the top of this page. Your continued use of the App after an update constitutes acceptance of the revised policy.

9. Contact

If you have questions about this Privacy Policy or how Sudoku Garden handles your data, please contact the app publisher or developer using the contact information provided in the app store listing or within the App.