Privacy Policy

Effective 5 October 2026

This policy covers Daily Grid and our single-puzzle apps (Shikaku Daily, Bridges Daily and any other “Daily” puzzle app we publish), together “the apps”. The apps are made by Sensible Entertainment (“we”, “us”), which is the controller of the personal data described here.

1. What we collect and why

Anonymous player account (everyone)

When an app first connects to the internet it creates an anonymous account for you on our backend (hosted by Supabase). It contains:

• a random account ID;
• a display name (initially “Player XXXX”) and, if you choose one, a unique @username;
• a random friend code;
• for each puzzle you solve for the first time: the game, puzzle ID, solve time, number of hints used and, for a daily puzzle, which day it was. The final board is sent once so our server can check the solution; it is not stored;
• your friends list (people you added, or who added you, by code or @username) and the challenges you send or receive.

Why: to verify solves, show how your time compares with other players on today’s daily (only aggregate counts are shown, never other players’ identities), and to run friends and challenges. Your friends can see your display name or @username and your solve times; nobody else can.

Signed-in accounts (optional)

If you choose Keep your progress and sign in with Apple (or Google, where offered), we additionally store:

• the email address the provider shares with us. With Sign in with Apple you can choose “Hide My Email”, in which case we only receive an Apple relay address. We use it only to identify your account; we don’t send you marketing email;
• a progress snapshot: solved puzzles and best times, daily results, streaks, frozen days, badges, milestone rewards, saved hints and streak freezes.

Why: so your progress, friends and purchases follow you to other phones and tablets.

Purchases

Purchases are processed by Apple (App Store) or Google (Google Play); we never see your payment card. We use RevenueCat to check what you own and to restore purchases. RevenueCat receives your purchase history and an app user ID (your account ID when you are signed in, otherwise a random ID).

Diagnostics, crash reports and feedback

To find and fix bugs and keep the apps fast, the apps send diagnostic data to our error-monitoring provider, Sentry:

• Crash and error reports: the error and stack trace, the app version and update, device model, operating system, language, free memory and similar technical details, plus a short trail of recent app events (for example “opened a puzzle”, “used a hint”, “purchase started”, screen changes and failed network requests) and, for errors, a screenshot of the app screen and a description of its layout. No screenshot is taken on the account and friends screens;
• Session replays: for a small share of sessions, and for sessions in which an error happens, a recording of the app screen and your taps so we can see how a problem came about. All text and images are masked in these recordings (replaced with blocks); only the puzzle board is shown;
• Performance data: how long app start, screens and network requests take, frozen or slow frames, and app-hang reports, for a sample of sessions;
• App health: whether each app session ended normally or crashed;
• a summary of your app state: theme, language, whether you have Pro, your saved hint and streak-freeze counts, and how many puzzles you’ve solved and your streaks;
• your random account ID (or, before you have one, a random installation ID) so reports from the same player can be grouped. We never send your email address, display name or @username, and we remove sign-in tokens and keys from reports.

If you use Settings → Send feedback (or the “Tell us what happened” button after a problem), your message is sent to Sentry with the same diagnostic details and, if one was recorded, the session replay. We don’t ask for your name or email there; please don’t include personal details in your message.

We use this data only to diagnose and fix problems and to improve the apps’ stability and performance, never for advertising.

Game Center and Google Play Games

If you are signed in to Apple Game Center or Google Play Games on your device, the apps may report achievements and leaderboard scores (such as your best daily time or streak) to that service. Apple and Google process this under their own privacy policies. We never ask you to sign in to them.

Server logs

Like any internet service, our hosting provider processes your IP address and basic request information when the app contacts our servers, for security and to keep the service running.

2. What stays on your device

Your settings (theme, language, sound, haptics, timer), in-progress boards and, for players who are not signed in, your progress and statistics are stored only on your device. The optional daily reminder is a local notification scheduled on your device; we don’t use push notifications. Share images are created on your device and only go where you send them.

The apps do not access your location, contacts, photos, camera or microphone.

3. Service providers

We share data only with these providers, who process it to provide their service:

We may also disclose information if required by law, or to a successor if our business is transferred. We don’t sell or rent personal information.

4. Ads

Players without Pro may see an ad between puzzles, or choose to watch a short ad for a hint or a streak freeze. Ads are served by Google AdMob and:

• are always requested as non-personalized: they are not based on your past behavior or profile;
• are limited to content rated for general audiences (max rating PG);
• never use App Tracking Transparency on iOS: we never ask to track you, so the iOS advertising identifier is not available to us or to Google.

Even non-personalized ads require Google to process some data, such as your IP address (to estimate a general location), device and app information, identifiers such as the Android advertising ID or app set ID, and ad interactions, for ad delivery, frequency capping, measurement and fraud prevention. In the EEA, the UK and Switzerland, the app asks for your consent through Google’s consent form where required, and you can change your choice anytime in Settings → Ads & privacy → Privacy choices. On Android you can reset or delete your advertising ID in your device settings. Buying Pro removes ads entirely.

5. Legal bases (EEA, UK and Switzerland)

• Performance of a contract: running your account, solves, friends, challenges, sync and delivering purchases.
• Legitimate interests: preventing cheating and abuse, keeping the service secure, fixing crashes and other problems and measuring app performance (diagnostics, session replays and feedback), and showing non-personalized ads that keep the apps free. You can object (see Your rights).
• Consent: where the law requires consent to store or read information on your device for ads (collected through Google’s consent form), and for the optional daily reminder. You can withdraw consent anytime.
• Legal obligation: keeping purchase records where tax or consumer law requires it.

6. How long we keep data

• Account, profile, solves, friends, challenges and synced progress: until you delete your account.
• Crash reports, diagnostics, session replays and feedback (Sentry): up to 90 days.
• Server logs: a short period (typically days to a few weeks), as set by our hosting provider.
• Purchase records: as long as needed to provide your purchases and as required by law; Apple and Google keep their own records.

7. Deleting your data

• In the app: Settings → Account → Delete account (shown once you are signed in). This permanently deletes your account, username, friends, challenges, solves and synced progress from our servers. Progress on your device stays, and you continue as a new guest.
• Guests (not signed in), or anyone who can’t use the app: email [email protected]. We may ask for your friend code (Settings → Friends) so we can find your anonymous account.
• Data on this device: Settings → Reset progress, or uninstall the app.
• Purchase records held by RevenueCat can be deleted on request by email. Deleting your account does not refund or cancel purchases; you can restore them with the same Apple or Google account.

8. Your rights

Depending on where you live, you can ask to access, correct, delete or export your personal data, object to or restrict processing, and withdraw consent. Email us and we’ll respond within the time the law requires (generally one month). In the EEA or UK you can also complain to your local data protection authority.

9. Children

The apps are not directed to children under 13 (or the minimum age of digital consent in your country), and we do not knowingly collect personal information from them. Ads are not configured for child-directed treatment under COPPA, which is why we ask that younger children do not use the apps without a parent. If you believe a child has given us personal information, contact us and we will delete it.

10. International transfers

Our providers may process data in the United States and other countries. Where data from the EEA, UK or Switzerland is transferred, we rely on adequacy decisions (such as the EU-US Data Privacy Framework where the provider is certified) or the European Commission’s Standard Contractual Clauses and UK equivalents.

11. California (CCPA/CPRA)

In the past 12 months we have collected: identifiers (account ID, username, email if you sign in, device and advertising identifiers via our ad provider, IP address), commercial information (purchase history), internet or other electronic network activity (ad interactions, crash and performance diagnostics, in-app interactions captured in masked session replays) and gameplay information, for the purposes described above. We do not sell personal information and do not share it for cross-context behavioral advertising, and we don’t use sensitive personal information. You can ask to know, delete or correct your information by emailing us; we won’t discriminate against you for doing so. An authorized agent may make a request on your behalf.

12. Security

Data is encrypted in transit (HTTPS/TLS). Database access is restricted per account, and solves are verified on the server. No system is perfectly secure, but we work to protect your data.

13. Changes

If we change this policy we will update the effective date above, and for significant changes we will let you know in the app.

14. Contact

Sensible Entertainment
[email protected]