Privacy Policy

Last updated: 5 August 2026

This Privacy Policy explains how your personal data is collected, used and protected when you use SudokuStreak (the "Service"). We are committed to handling your data in line with the EU General Data Protection Regulation (GDPR) and Slovak data-protection law.

1. Data Controller

The controller responsible for your personal data is:

  • Tamabaja, s.r.o.
  • Kukučínova 770/52, 024 01 Kysucké Nové Mesto, Slovak Republic
  • Company ID (IČO): 52 834 646 · VAT ID (IČ DPH): SK2121151021
  • Registered with the Commercial Register of the Žilina District Court, Section Sro, Insert No. 73791/L
  • Contact: admin@sudokustreak.com

2. Data We Collect

  • Account data (registered users): email address and display name.
  • Gameplay data: puzzles played, times, streaks, scores and achievements.
  • Technical data: IP address and browser type, used for security and abuse prevention.
  • Anonymous play: if you play without an account, your progress is stored locally in your browser. We may keep a minimal anonymous profile (a generated name, avatar and your Sparks total) so your chosen identity can be shown next to puzzle records. Anonymous players are not listed on the leaderboard.
  • Push notification data: only if you allow notifications in your browser. We store the subscription your browser gives us — a delivery address (endpoint URL) at your browser vendor's push service and two encryption keys — so we can send you the daily reminder. This subscription is not linked to your account or identity, and it contains nothing about you personally.
  • Cookies and similar technologies — see our Cookie Policy.

3. Legal Basis for Processing

  • Performance of a contract / our legitimate interest in providing the Service: to run the game, your account, leaderboards and progress.
  • Legitimate interest: to keep the Service secure and prevent abuse.
  • Consent: for optional analytics and advertising cookies, which you manage via the cookie banner and can withdraw at any time, and for push notifications, which are sent only after you explicitly allow them in your browser.

4. How We Use Your Data

  • Provide, maintain and improve the Service.
  • Display leaderboards and track your progress, streaks and achievements.
  • Send you reminders you asked for — the daily push notification (if you allowed notifications) and streak e-mails (if you opted in). Both can be switched off at any time.
  • Protect the Service and our users against fraud and abuse.

5. Third Parties and International Transfers

We share data only with service providers that help us run the Service, and only as needed:

  • Google Analytics (Google Ireland Ltd.) — anonymised usage analytics, only with your consent.
  • Advertising (our advertising partner) — to show ads to non-Premium users, only with your consent.
  • Sign-in providers: if you choose to sign in with Google, GitHub or Facebook, that provider processes your login and shares basic account data with us.
  • Push delivery services: if you enable notifications, delivery runs through the push service built into your browser (for example Google, Mozilla, Microsoft or Apple, depending on the browser you use). The notification content is encrypted in transit, and we send it to the address your browser assigned — we do not tell that service who you are.

Some of these providers may process data outside the European Economic Area (e.g. in the USA). Where that happens, the transfer is protected by appropriate safeguards such as the EU Standard Contractual Clauses or an adequacy decision.

We never sell your personal data.

6. Cookies

We use necessary cookies for session management, security and your preferences (these do not require consent). We also use optional cookies for analytics and advertising, which load only with your consent. For full details, see our Cookie Policy. You can review and change your choices at any time via the cookie banner.

7. Data Retention

Account data is kept until you delete your account. Anonymous progress lives in your browser and a minimal anonymous profile may be retained while it remains active. Technical logs are kept only as long as needed for security. A push subscription is kept until you turn notifications off (in the app or in your browser settings), at which point it is deleted; subscriptions that your browser has revoked are removed automatically the next time we try to send.

8. Your Rights (GDPR)

You have the right to:

  • Access your data and obtain a copy (Profile → Export Data).
  • Rectify inaccurate data and erase your account and associated data (Profile → Delete Account).
  • Restrict or object to certain processing, and request portability of your data.
  • Withdraw consent at any time — for optional cookies via the cookie banner, and for push notifications by turning them off in the app or revoking the permission in your browser.
  • Lodge a complaint with the Slovak supervisory authority, the Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov SR, dataprotection.gov.sk).

9. Contact

For any privacy question or to exercise your rights, contact us at admin@sudokustreak.com.