Privacy

Updated 9 October 2026

Soodokoo runs in your browser. It has no cookies, analytics or ads. You can play without an account, and then the server knows your device only by a random ID.

On your device

Your browser’s local storage holds your saved puzzles, your settings, a random device ID and, if you sign in, your sign-in session. They stay in this browser until you delete them or clear the site’s data.

What the server keeps

Only what you choose to send. It is linked to your device ID or, once you sign in, to your account:

• a public name, if you choose one, which other players see in the rankings;
• when you start each daily puzzle, your result, and your place in the rankings;
• anonymous solve times, if you turn them on in Settings: the puzzle, your time and the hints, fills and checks you used;
• when you’re signed in, a summary of each finished puzzle: its shape, level, time and aids;
• any reports you make about another player’s name.

The server never receives the numbers you enter, except the finished grid of a daily puzzle, which it checks.

Signing in

Signing in is optional. The sign-in service keeps your email address, and its audit log records each sign-in with your email and IP address. If you sign in with another account, such as Google, that provider passes your email address to the sign-in service. We use your email only to sign you in.

Who handles it

Cloudflare Pages

Hosts the site.

Google Cloud Run, in Belgium (europe-west1)

Runs the game’s server. Its request logs keep each request’s IP address, browser (user agent) and address (URL) for about 30 days. Your device ID is never part of an address.

Supabase, in London (eu-west-2)

Holds the database and runs sign-in. Its logs of sign-in requests also record the IP address, browser and address.

Resend, in Ireland

Sends the emails with your sign-in codes.

How long it’s kept

• The server deletes solve times of puzzles never finished, and daily puzzles started without a result, after 90 days.
• An account keeps at most its newest 5,000 finished puzzles.
• Everything else on the server stays until you delete it.
• Request logs expire after about 30 days. Supabase keeps its sign-in logs on its own schedule.

Deleting your data

On the account screen, Delete my server data removes everything the server holds for your device: your name, daily results and ranking, the solve times you shared, any reports you made and, if you’re signed in, your account, its finished puzzles and your sign-in with its email address. Your device then gets a new random ID. Saved puzzles on your device are not affected. The sign-in audit log and the request logs aren’t cleared; they expire on their own schedule.

Contact

For questions, a copy of your data or its deletion, email [email protected].