Privacy Policy
Last updated: June 25, 2026
Sundaydleis a free NFL trivia game. This policy explains what we collect, why, and your choices, in plain language. We don't sell your data and we don't use advertising trackers.
Who runs Sundaydle (data controller)
Sundaydle is built and run by an independent developer based in the Netherlands. For the purposes of the EU General Data Protection Regulation (GDPR), that developer is the data controller. You can reach us about anything in this policy at hello@sundaydle.com.
What we collect
Playing as a guest: your game progress (coins, level, mastery, streak), a randomly generated anonymous ID, and a display name you choose are stored in your browser. When you use online features (leaderboards, duels, weekly ranks), that anonymous ID, your display name, and your scores are saved to our database so others can be matched and ranked.
If you sign in (optional): we store your email address (used only to sign you in via a magic link or Google) and link your profile, display name and game progress, to your account so it syncs across devices.
We do not collect your real name, precise location, contacts, or payment details. Donations are handled entirely by Ko-fi if you choose to support us.
How we use it
To run the game: save and sync your progress, match duels, show leaderboards and weekly ranks, and let you sign in. We also use privacy-friendly, aggregated analytics to understand which pages and features are used, without cross-site tracking or advertising profiles.
Our legal basis (GDPR)
Where the GDPR applies, we rely on our legitimate interest in running and securing the game (kept to the minimum needed, you can object), on carrying out your request when you sign in, and on your consent where we ask for it, which you can withdraw any time.
Cookies & local storage
The game stores your progress in your browser's local storage. If you sign in, a secure session token is stored so you stay logged in. We do not use advertising or cross-site tracking cookies. Our analytics (Vercel Web Analytics) are cookieless and record no personally identifiable information, so Sundaydledoesn't need a cookie-consent banner.
Push notifications
Notifications are off by default. If you turn them on (in Settings, or when we offer it after a game), your browser creates an anonymous push subscription, a technical token tied to that browser or device, which we store so we can send only the reminders you asked for: your daily puzzle, a streak reminder, and your turn in a duel. It holds no name, email, or location, and we never use it for advertising. You can switch notifications off any time in Settings or in your browser or device settings, which removes the subscription.
Who we share it with
We don't sell your data or share it for advertising. A few trusted providers process it only on our behalf to run the game, for hosting, our database and sign-in, donations (only if you tip), and privacy-friendly analytics. Some of this may be processed on servers outside the EU/EEA, including the United States; where it is, recognised safeguards such as the EU Standard Contractual Clauses apply.
Keeping & deleting your data
We keep data only as long as it's useful for the purpose it was collected. Guest progress lives in your browser until you clear it or reset. Online data (anonymous ID, display name, scores) stays so we can keep showing leaderboards and ranks, and we periodically clear out stale or inactive entries. Account data is kept until you delete your account. You can reset all local and synced progress any time in Settings → Reset progress, and you can email us to delete your account and associated data.
Your rights
Depending on where you live (including the EU/EEA under the GDPR), you may have the right to access, correct, export, or delete your data, to object to or restrict certain processing, and to withdraw consent. Contact us to exercise any of these rights. If you're in the EU/EEA and think we've mishandled your data, you also have the right to lodge a complaint with your local data-protection authority, in the Netherlands that's the Autoriteit Persoonsgegevens.
Children
Sundaydleis not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us data, contact us and we'll remove it.
Changes & contact
We'll update this page and the date above if this policy changes. Questions or requests? Email hello@sundaydle.com.