The short version
PuzzleVerse is a puzzle game. You can play without giving us your name or email. We show ads, supplied by Google AdMob, which is how the game is paid for. We do not run analytics, and we do not sell your data.
What we collect
| Data | When | Why |
|---|---|---|
| A generated username (e.g. guest_9912554207) | The moment you tap “Continue as Guest” | To save your progress |
| Email address and password | Only if you create an account | To sign you in on another device |
| Gameplay progress — level, XP, stars, moves, times | As you play | To track progress and rank leaderboards |
| IP address, device type, request times | Every request to our server | Kept briefly in server logs for security and debugging |
Passwords are stored only as a bcrypt hash. We never store, and cannot recover, your actual password.
Some puzzles run entirely on your device and are stored only there. If you uninstall the app, that local progress is gone.
Advertising
The game is free and is funded by ads served through Google AdMob. To choose which ads to show and to measure them, Google may collect your device's advertising ID along with technical information such as device model, operating system, and approximate location derived from your IP address.
We do not receive that data ourselves. It is handled by Google under Google's own privacy terms.
If you are in the EEA, the UK, or Switzerland, we ask for your consent before any personalised ad is shown, using Google's consent form. You can decline and still play the whole game.
You can reset or delete your advertising ID at any time in Settings → Google → Ads on your device.
What we do not collect
- No analytics or behavioural tracking of our own.
- No location, contacts, photos, camera, or microphone. The app requests none of these permissions.
- No payment details. There are no purchases in the app.
The app requests only internet access — to talk to our own server, and to load ads.
Who we share it with
Your account and gameplay data lives on a single server we control, hosted on Oracle Cloud Infrastructure in their capacity as our hosting provider. We do not sell or rent it, and we do not share it with data brokers.
The one third party involved is Google AdMob, which serves the ads and receives the advertising and device data described above. Your username, email, and game progress are never sent to it.
How long we keep it
- Account and progress: until you ask us to delete it.
- Server logs: a short rolling window, then overwritten.
- Backups: database backups are kept for 14 days and then deleted.
Your rights
You can ask us to show you what we hold about you, correct it, or delete it entirely. Email fennaneyahia@gmail.com and we will action it within 30 days.
Deleting a guest account is straightforward — it holds nothing but a generated name and your scores.
Children
PuzzleVerse is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child has created an account, email us and we will remove it.
Security
All traffic between the app and our server is encrypted with HTTPS. The database is not reachable from the public internet. Passwords are hashed, and sign-in tokens expire and rotate.
Changes
If this policy changes materially, we will update the date at the top of this page. Continued use of the app after a change means you accept the updated policy.
Contact
PuzzleVerse — fennaneyahia@gmail.com