Privacy policy

In short: you can play without an account, the game collects as little as possible, and ads come from Google AdSense, which asks for your consent to cookies.

Last updated: 11 October 2026.

Who is responsible

The data controller is the author of soodoku (soodoku.org). Contact, including access to your data or deleting your account: kontakt@soodoku.org.

Data kept only on your device

Saved games, settings, theme, language, statistics and daily progress are kept in your browser's storage (localStorage). They are not sent anywhere unless you have an account (below). Clearing site data in your browser removes them.

Visit counter

Your browser generates a random, anonymous device identifier. When you open the site we send it together with the date and time spent on the page, so we know how many people play. We do not store your name, email or IP address. The data is held by Supabase, our database provider.

Account (optional)

If you create an account we process your email address and password (stored encrypted by Supabase Auth, we cannot see it), daily challenge progress, leaderboard results and your Sabotage match history. The leaderboard shows only the part of your email before the @ sign. In head-to-head stats you and your rival see each other's email addresses. The legal basis is providing the service you ask for (Art. 6(1)(b) GDPR). We delete the account and its data on request sent to the address above.

Guest leaderboard

When you play without an account, your result is sent with the anonymous device identifier and shown as "Guest".

Sabotage (two players)

Rooms run in real time over Supabase Realtime. Game moves and attacks are sent, and for signed-in players also the email address, so the match result is saved for both of you.

Google AdSense ads and cookies

The site shows Google AdSense ads (only in the menu, never during a game). Google and its partners may use cookies and similar technologies to serve ads, including ads based on your interests, and to measure them. In the European Economic Area, the UK and Switzerland a consent message appears before advertising cookies are used. You can change your choice at any time through that message.

More: how Google uses information from partner sites. You can turn off ad personalization in Google ad settings.

Other providers

The site is hosted by Cloudflare, which technically sees your IP address with every request. Fonts are loaded from Google Fonts, so your IP address also reaches Google.

Your rights

You have the right to access, correct, delete, restrict and port your data, to object to processing and to withdraw consent. You can also lodge a complaint with your data protection authority (in Poland: the President of the Personal Data Protection Office, UODO).