Privacy Policy for Colordoku

Effective September 9, 2026

DeepDyno provides the Colordoku application, identified on Android by com.deepdyno.colorsudoku.

Information we collect

You can play without creating an account. In offline mode, gameplay and progress remain on your device except that higher local level progress is submitted if you later connect an account. If you create or connect an online account, we collect a public username, salted password verifier, random account identifier, synchronized unlocked-level progress, first-completion solve times, and start, finish, pause, and resume timestamps. Unfinished normal-puzzle state remains on the device and is not collected by Colordoku's server. Rapid Mode additionally processes submitted object positions, official scores, discarded-puzzle counts, run timestamps, and best-score tie-break times. For the current Rapid personal best, we retain puzzle colors, gameplay actions, client-reported action times, server receipt times, and the app version/build/platform used during the attempt for administrator fraud review; replacing the best deletes the previous replay. Online account requests also report the current app version, build number, platform, and most recent detection time. Rapid puzzle answers and secret generation material remain on the server. We do not collect a player email address.

For account support and abuse review, the app creates a random app-installation identifier. The server stores a protected hash linked to accounts used by that installation, together with first- and last-seen times. It is not an advertising ID or hardware identifier and is not used to automatically punish users or authorize password resets. Administrators may use it as supporting evidence when reviewing duplicate accounts or an account merge.

To identify and repair failures, the app submits limited crash diagnostics whether or not you create an account. These may include a separate random installation identifier, app version/build, operating-system platform/version, current app screen, timestamp, error name/message, and sanitized technical stack trace. They do not include passwords, authentication tokens, contacts, photos, or puzzle-board contents.

Colordoku offers optional rewarded video ads for extra lives and guided hints. You can restart without watching an ad. Google Mobile Ads may process and share an IP address (which can estimate general location), device or advertising identifiers, ad views and taps, and diagnostics to deliver, measure, secure, and limit advertising. Consent choices are requested where required, and an Ad Privacy Choices control appears in Settings when required. The app does not request Apple's App Tracking Transparency permission and does not access contacts, photos, files, camera, microphone, precise location, payment information, or health information. We do not sell or rent personal information.

Use and visibility

Account and gameplay information is used for authentication, account access, unlocked-level synchronization, server verification of Rapid Mode moves and scores, leaderboards, timing percentiles, abuse prevention, duplicate-account review, administrator-approved account merging, deletion/support requests, and diagnosing and repairing reliability problems. Advertising information is used by Google to provide and measure optional rewarded ads and prevent advertising fraud. Only username, leaderboard rank, current level, and Rapid Mode best score and tie-break time are public. Password verifiers, tokens, installation evidence, app-version history, individual submitted moves, best-score replays, exact timelines, moderation information, and crash diagnostics are not public.

Local and offline data

The app stores settings, credentials when applicable, progress, unfinished puzzles, timers, and temporary local Rapid replay events awaiting completion or upload on the device. If you skip account creation, leaderboard, percentile, and cloud-sync features are unavailable and gameplay stays local. Limited crash diagnostics may still be submitted but are not linked to an online account. Normal first-completion times are saved locally even before account creation. If you later create or connect an account, unlocked progress and those unclaimed completion times can synchronize to it. Operating-system backups are controlled by your device provider and settings.

Service providers

Cloudflare hosts the API, database, administrative access controls, and this page. Google Mobile Ads provides optional rewarded advertisements and processes the advertising data described above under its own privacy terms. App marketplaces may separately process installation and diagnostic information under their own policies.

Retention and security

Account and gameplay information is retained while the account exists. Only the current Rapid personal-best replay is retained and it is replaced by a better result. Player sessions remain active until the account is deleted or an administrator explicitly resets its credentials. If duplicate accounts are merged, the removed username remains reserved with a reference to the destination account, while its password verifier is removed. Installation evidence is retained with the associated account or reserved merged identity. Crash diagnostics are retained for up to 90 days. Abuse-prevention records may be removed periodically. Google controls retention of data it processes for advertising under its own policies. Data is encrypted in transit with HTTPS, passwords are stored only as uniquely salted and server-keyed PBKDF2-SHA-256 verifiers, account tokens use protected device storage where available, server tokens are cryptographically hashed, and administrative access requires a password plus an emailed code. No system can be guaranteed completely secure.

Children and policy changes

Colordoku is intended for people age 13 and older and is not directed to children under 13. We do not knowingly request a child's real name or email. Contact DeepDyno through the developer email on the Google Play listing if information should be deleted. This policy may be updated when features or practices change; the effective date will be revised.

Account deletion

You can permanently remove an online account and its associated data from the separate Colordoku account-deletion page.