Back to Home

Privacy Policy

Last updated: 22 February 2026

1. Introduction

Welcome to Sudowave ("we", "our", "us"). We are committed to protecting your privacy and being transparent about how we handle your data. This Privacy Policy explains what information we collect, how we use it, and the choices you have.

By using Sudowave, you agree to the practices described in this policy. If you do not agree, please discontinue use of the app.

2. Information We Collect

2.1 Information You Provide

  • Account information: If you choose to create an account or sign in, we collect your email address and display name.
  • Feedback and communications: If you contact us or submit feedback, we collect the information you provide in your message.

2.2 Information Collected Automatically

  • Game data: Your game progress, scores, statistics, streaks, and preferences are stored to provide the core app experience.
  • Device information: Basic device type, operating system version, and app version for compatibility and troubleshooting.
  • Privacy-focused analytics: We use a privacy-focused, cookie-free analytics tool that collects aggregated, anonymous usage data (e.g., page views, general feature usage). This data cannot identify individual users and does not collect personal information. This is always active as it requires no consent under applicable privacy regulations.
  • Optional detailed analytics: With your explicit consent (via the "Help Improve the Game" toggle in Settings), we collect additional usage data including session events, feature interactions, and anonymised gameplay patterns. This data helps us improve the app experience. You can enable or disable this at any time.
  • Country detection: On your first visit, we detect your country using a third-party IP geolocation service to determine appropriate default privacy settings for your region. Only the two-letter country code is stored locally on your device. Your IP address is not stored by us.

3. How We Use Your Information

  • Provide, maintain, and improve the Sudowave app and its features
  • Save and sync your game progress across devices (if you sign in)
  • Track your statistics, streaks, and gameplay progress
  • Analyse anonymised gameplay patterns to improve puzzle quality and difficulty (with your consent)
  • Respond to your feedback, questions, or support requests
  • Detect and prevent technical issues, fraud, or abuse

4. Your Consent Controls

You are in control of your data. You can manage data collection at any time through Settings > Privacy & Data > Help Improve the Game.

When the toggle is OFF:

  • Detailed analytics are fully disabled (no data sent to third-party analytics providers)
  • Gameplay behaviour profiling is disabled
  • Privacy-focused aggregated analytics remain active, as they collect no personal data and do not require consent under EU privacy regulations

When the toggle is ON:

  • Additional usage data is collected to help improve the app
  • Anonymised gameplay patterns are analysed to create better puzzles and personalise difficulty

For users in the EU/EEA, UK, and other privacy-regulated regions, this toggle defaults to OFF. You may enable it at any time if you wish to help improve the game.

5. Legal Basis for Processing (GDPR)

We process your data based on the following legal grounds:

  • Contract performance: Processing necessary to provide the app and its features (game data, account management, progress syncing).
  • Legitimate interest: Privacy-focused aggregated analytics to understand general app usage and improve the service, where this does not override your rights.
  • Consent: Detailed analytics and gameplay behaviour profiling, which you can opt into or out of at any time via Settings.

6. Data Storage and Security

Your data is stored using industry-standard cloud infrastructure. All data is encrypted in transit (TLS/SSL) and at rest. We implement appropriate technical and organisational security measures to protect your information against unauthorised access, alteration, disclosure, or destruction.

Game data is also stored locally on your device using standard browser storage mechanisms (localStorage, IndexedDB) to enable offline play. This data stays on your device and can be cleared through your browser or app settings.

7. Data Sharing

We do not sell, trade, or rent your personal data to third parties. We only share data with:

  • Infrastructure providers: Cloud hosting and authentication services necessary to operate the app. These providers process data on our behalf under strict data processing agreements.
  • Analytics providers: Anonymised, aggregated data only. With your consent, additional usage data may be processed by our analytics provider.

We may also disclose information if required by law or to protect our rights, safety, or property.

8. Your Rights

Under applicable data protection laws (including GDPR and CCPA), you have the right to:

  • Access: Request a copy of the personal data we hold about you.
  • Rectification: Request correction of inaccurate or incomplete data.
  • Erasure: Request deletion of your personal data ("right to be forgotten"). You can delete your account and all associated data at any time.
  • Data portability: Request your data in a structured, machine-readable format.
  • Restrict processing: Request limitation of how we process your data.
  • Object: Object to processing based on legitimate interests.
  • Withdraw consent: Withdraw consent at any time for consent-based processing, without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at help@sudowave.app. We will respond within 30 days.

9. Children's Privacy

Sudowave is suitable for users of all ages. We do not knowingly collect personal information from children under 13 (or the applicable age in your jurisdiction) without verifiable parental consent. If you believe we have inadvertently collected such information, please contact us and we will promptly delete it.

10. Cookies and Local Storage

Sudowave does not use cookies for tracking. We use local storage and IndexedDB solely to save your game progress, preferences, and settings on your device. Our privacy-focused analytics tool is entirely cookie-free.

11. Third-Party Services

We use the following categories of third-party services to operate the app:

  • Authentication provider: For secure account sign-in.
  • Cloud database: For storing and syncing your game data across devices.
  • Analytics providers: One privacy-focused (cookie-free, no personal data) and one detailed analytics tool (consent-required, disabled by default in regulated regions).
  • Error monitoring: We use an error tracking service to detect and resolve crashes and technical issues. This service may receive anonymised error reports including stack traces, device type, and app version. No personal data or gameplay content is included in error reports.
  • IP geolocation service: For one-time country detection to set appropriate privacy defaults. Your IP is processed by the provider under their own privacy policy and is not stored by us.
  • Font provider: For typography rendering on the website.

Each third-party service operates under its own privacy policy and data processing terms. We only share the minimum data necessary for each service to function.

12. International Data Transfers

Your data may be processed in countries outside your own, including countries that may not offer the same level of data protection. Where applicable, we ensure appropriate safeguards are in place (such as Standard Contractual Clauses) to protect your data in accordance with this policy and applicable law.

13. Data Retention

We retain your data for as long as your account is active or as needed to provide the services. If you request account deletion, we will delete your personal data within 30 days, except where retention is required by law. Anonymised, aggregated data (which cannot identify you) may be retained indefinitely for analytical purposes.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

15. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data rights, or need to report a concern, please contact us:

16. Regulatory Compliance

This Privacy Policy is designed to comply with:

  • General Data Protection Regulation (GDPR) - EU/EEA
  • UK Data Protection Act 2018
  • California Consumer Privacy Act (CCPA) - USA
  • Children's Online Privacy Protection Act (COPPA) - USA
  • Google Play Developer Program Policies