Privacy Policy

Sundaydle is built and run by an independent developer based in the Netherlands. For the purposes of the EU General Data Protection Regulation (GDPR), that developer is the data controller. You can reach us about anything in this policy at hello@sundaydle.com.

Playing as a guest: your game progress (coins, level, mastery, streak), a randomly generated anonymous ID, and a display name you choose are stored in your browser. When you use online features (leaderboards, duels, weekly ranks), that anonymous ID, your display name, and your scores are saved to our database so others can be matched and ranked.

Weekly Recap saves your first attempt, answer choices and progress on our server so you can resume it and keep a consistent score. Its leaderboard shows your display name and score. Practice after completion does not replace that first score.

If you sign in (optional): we store your email address (used only to sign you in via a magic link or Google) and link your profile, display name and game progress, to your account so it syncs across devices.

We do not collect your real name, precise location, contacts, or payment details. Donations are handled entirely by Ko-fi if you choose to support us.

To run the game: save and sync your progress, match duels, show leaderboards and weekly ranks, and let you sign in. We also use privacy-friendly, aggregated analytics to understand which pages and features are used, without cross-site tracking or advertising profiles.

When you start or finish a game, we record the game mode, time, your local play date and the saved source of your first visit, such as a search engine or a shared link. A separate random browser ID lets us count returning players across days. This ID is not shown on leaderboards and is not linked to your email or display name. Another browser, or clearing local storage, creates a new measurement ID. Events that could not be sent may be retried from your browser for up to seven days. We also record game-rule versions, anonymous attempt identifiers, and question identifiers with correct, incorrect or timed-out outcomes and answer duration. We do not record the answer text you choose. An unfinished game may record an exit, but a later completion takes precedence. You can turn off this measurement in Settings; we also respect your browser's Do Not Track and Global Privacy Control signals. Turning it off clears unsent measurement events from this browser. Only the site operator can read these records; they are not used for advertising or tracking you on other websites.

We also count when an optional support request is viewed, dismissed or opened on Ko-fi. Each request uses its own random identifier, without your account, email or payment details. These counts use the same measurement opt-out and browser privacy signals. Opening Ko-fi is not recorded as a donation.

Where the GDPR applies, we rely on our legitimate interest in running and securing the game (kept to the minimum needed, you can object), on carrying out your request when you sign in, and on your consent where we ask for it, which you can withdraw any time.

The game stores your progress in your browser's local storage. If you sign in, a secure session token is stored so you stay logged in. We do not use advertising or cross-site tracking cookies. Our analytics (Vercel Web Analytics) are cookieless and record no personally identifiable information. The separate returning-player measurement described above uses a random ID saved in local storage.

Notifications are off by default. If you turn them on (in Settings, or when we offer it after a game), your browser creates an anonymous push subscription, a technical token tied to that browser or device, which we store so we can send only the reminders you asked for: your daily puzzle, a streak reminder, and your turn in a duel. It holds no name, email, or location, and we never use it for advertising. You can switch notifications off any time in Settings or in your browser or device settings, which removes the subscription.

We don't sell your data or share it for advertising. A few trusted providers process it only on our behalf to run the game, for hosting, our database and sign-in, donations (only if you tip), and privacy-friendly analytics. GitHub stores encrypted disaster-recovery database backups on our behalf. Some of this may be processed on servers outside the EU/EEA, including the United States; where it is, recognised safeguards such as the EU Standard Contractual Clauses apply.

We keep data only as long as it's useful for the purpose it was collected. Guest progress lives in your browser until you clear it or reset. Online data (anonymous ID, display name, scores) stays so we can keep showing leaderboards and ranks, and we periodically clear out stale or inactive entries. Account data is kept until you delete your account. You can reset all local and synced progress any time in Settings → Reset progress, and you can email us to delete your account and associated data.

Encrypted daily database backups are retained for up to 90 days and used for disaster recovery. Deleted records can remain in those backups until they expire. If we restore a backup, we must reapply subsequent deletion requests before using the restored data.

Depending on where you live (including the EU/EEA under the GDPR), you may have the right to access, correct, export, or delete your data, to object to or restrict certain processing, and to withdraw consent. Contact us to exercise any of these rights. If you're in the EU/EEA and think we've mishandled your data, you also have the right to lodge a complaint with your local data-protection authority, in the Netherlands that's the Autoriteit Persoonsgegevens.

Sundaydleis not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us data, contact us and we'll remove it.

We'll update this page and the date above if this policy changes. Questions or requests? Email hello@sundaydle.com.