Privacy Policy - Sudoku League

Last updated: 26 Jan 2026

This Privacy Policy explains how Puzzle League LTD (“we”, “us”) collects, uses, and shares information when you use the Sudoku League mobile application (“App”).

Data controller

Puzzle League LTD is the data controller for the personal information described in this policy. You can contact us at admin@puzzleleague.co.uk.

1) Information we collect

Depending on how you use the App, we may collect the following types of information:

Account information: such as email address and authentication identifiers when you sign in (e.g., Google Sign-In or email).
Phone number and verification data: if you add or verify a phone number, we may collect your phone number and related verification data (for example, a hashed phone number and the last 4 digits) to help secure accounts and enable withdrawals. Verification codes may be delivered via SMS or WhatsApp using Twilio Verify.
Identity verification (KYC): if withdrawals or security/compliance checks require it, we may ask you to submit identity verification materials (such as a photo/scan of a government ID and a selfie) via email to admin@puzzleleague.co.uk for manual review. These materials are stored temporarily in our Gmail inbox with access controls and security safeguards.
Gameplay and app activity: game results, scores, league participation, time taken, and other gameplay events.
Device and usage information: device model, operating system, language, app version, and diagnostic/performance data.
App-generated device identifiers: an app-generated install/device identifier used to link devices to accounts, enforce device/account limits, and help prevent fraud/abuse.
Push notification data: a push notification token (Firebase Cloud Messaging) and related preferences to deliver notifications (for example about league starts, rewards, and account activity). You can control notifications through your device settings.
Advertising data: information used to show ads and measure ad performance (for example via Google AdMob). This may include advertising identifiers or similar signals depending on your device settings and consent.
Ad interaction events: limited ad-related events (for example whether an ad was shown/failed or a reward was granted) may be recorded to help operate ads, prevent abuse, and enforce rate limits.
Rewards and withdrawals: if you use withdrawal features, we may collect the payout details you provide (e.g., PayPal email, bank account number/IBAN, bank code, account name, or mobile money number/provider depending on region/provider) and related withdrawal records to process withdrawals. Some payout details may be stored in encrypted form. Sensitive payout identifiers may be stored in encrypted form and access is restricted.
Support communications: information you provide when you contact support, including the contents of messages and attachments you send us (which may include sensitive data such as ID documents when required).

2) How we use information

We use information to:

Provide and operate the App (accounts, gameplay, leagues, leaderboards).
Maintain security, prevent fraud/abuse, and enforce fair play.
Verify phone numbers and identity (KYC) when required for security, fraud prevention, or withdrawals.
Process rewards and withdrawals (when enabled).
Send notifications when enabled (for example league, rewards, and account activity notifications).
Show ads and measure ad performance.
Enforce rate limits and detect/mitigate abuse related to ads and withdrawals.
Improve the App, troubleshoot issues, and analyze usage.

3) Third-party services

The App uses third-party services that may collect information under their own policies. These may include:

Google Firebase (Authentication, Cloud Firestore, Cloud Functions, Analytics, Crash reporting, App Check).
Google AdMob (ads and measurement).
Twilio (phone verification via Twilio Verify, including SMS/WhatsApp delivery).
Payment/payout providers (used to process withdrawals when enabled, such as PayPal and/or Flutterwave).

These providers may process information on our behalf to deliver their services.

Some of our service providers may process data on servers located outside your country of residence.

4) Ads

We use advertising services (such as Google AdMob) to display ads in the App. Depending on your location, settings, and consent choices, ads may be personalized or non-personalized. You can often control ad personalization via your device settings.

5) Testing vs. production environment

During testing phases (including internal or closed testing), some financial features (such as withdrawals) may be simulated and no real money may be transferred. In production, withdrawals may be processed by third-party payout providers.

6) Data retention

We retain information as long as needed to operate the App, comply with legal obligations, resolve disputes, and enforce our agreements. We may delete or anonymize data when it is no longer needed.

Identity verification materials: when identity verification is required, documents submitted by email are reviewed and then deleted after verification is completed.

Account deletion: you can delete your account in the App (Settings > Delete Account). When you delete your account, we delete or anonymize your account data where possible. We may retain certain records such as withdrawal transaction metadata (amount, timestamp, provider status) and related audit logs in an anonymized form for auditing, fraud prevention, and legal/compliance obligations.

7) Security

We use reasonable technical and organizational measures to help protect information from unauthorized access, loss, misuse, or alteration. No method of transmission or storage is 100% secure.

8) Children's privacy

Sudoku League is intended for users aged 18 and over and is not directed to minors. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided personal information, please contact us so we can take appropriate action.

9) Your choices and rights

You may request access to or deletion of your data by contacting us at the email below. You can also delete your account in the App (Settings > Delete Account). We may retain certain information as described in the Data retention section. You may also be able to manage certain privacy settings through your device (e.g., ad personalization).

Access: request a copy of the personal data we hold about you.
Correction: request that inaccurate data be corrected.
Deletion: request deletion of your data, subject to legal/audit retention described above.
Objection/Restriction: request that we stop or limit certain processing.
Portability: request a portable copy of certain data where applicable.

10) Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page and update the “Last updated” date.

11) Contact

If you have questions about this Privacy Policy, contact:
Puzzle League LTD
Email: admin@puzzleleague.co.uk