Privacy Policy

Effective date: 14 June 2026 · Policy version 2.2

Misfit Games ("Misfit Games", "we", "our", "us") publishes Puzzle Suite, a free, ad-supported mobile application available on Apple iOS and Google Android. This Privacy Policy describes what personal information Puzzle Suite handles, how it is processed, and the rights you have. It covers the mobile app and this hosted policy page.

Geographic availability. Puzzle Suite is offered in the United States and other non-EU/non-UK markets. The app is not made available in the European Economic Area (EEA), the United Kingdom, or Switzerland and is not directed at residents of those regions. See section 1.
Contents
  1. Geographic Availability
  2. Who We Are
  3. What We Collect — At a Glance
  4. Advertising
  5. Device Permissions
  6. In-App Purchases
  7. Leaderboards & Daily Exercise
  8. Crash Reporting
  9. Cookies & Local Storage
  10. Children's Privacy
  11. Data Retention
  12. Data Security
  13. Third-Party Services & Sub-Processors
  14. Where Your Data Is Processed
  15. Your Rights
  16. Automated Decision-Making
  17. Changes to This Policy
  18. Contact Us
  19. Version History

1. Geographic Availability

Puzzle Suite is intended for users located in the United States and other regions where it is made available through the Apple App Store and Google Play. The app is not offered, marketed, or made available in the European Economic Area (EEA), the United Kingdom (UK), or Switzerland, and is not directed at residents of those regions. App Store and Play Store availability is configured to exclude EEA, UK, and Swiss territories.

If you are an EEA, UK, or Swiss resident and have somehow obtained access to the app (for example, while travelling, via a non-local store account, or via a VPN), please discontinue use. We do not target EEA, UK, or Swiss residents and do not provide GDPR-style data subject services in those regions. If you nonetheless believe we hold your personal information and wish to request its deletion, contact us at the address in section 18 and we will respond in good faith.

2. Who We Are

The party responsible for the personal information described in this policy is:

Misfit Games (sole proprietor)
Contact: [email protected]

3. What We Collect — At a Glance

Most of Puzzle Suite runs entirely on your device. Game progress, statistics, preferences, achievements, and favourites are stored locally and never transmitted to our servers. The categories of personal information processed by Puzzle Suite are summarised below; each row is detailed in the section linked.

Category Examples Source Section
Identifiers (advertising) GAID, IDFA, IP address (advertising context only) Your device + AdMob §4
Device & usage data (advertising) Device model, OS version, screen size, ad interactions AdMob SDK §4
Approximate location Country/region inferred from IP for ad targeting AdMob SDK §4
Game data (local-only) Scores, statistics, achievements, preferences, favourites You §3
Pseudonymous leaderboard submissions Display name (up to 15 characters), random UUID, score, timestamp, game ID You §7

We do not ask for or collect: your real name, email address, phone number, postal address, contact list, calendar, photos or media library, microphone audio, GPS location, biometric identifiers, financial account numbers, government identifiers, health data, or precise location.

4. Advertising

The free version of Puzzle Suite displays ads served by Google AdMob. AdMob processes the following data categories to serve ads:

Before requesting ads, Puzzle Suite uses Google's User Messaging Platform where a consent or privacy-options form is required. Ad requests may be personalised only when applicable consent and device-level permission allow it; otherwise AdMob serves basic or contextual ads.

You can additionally opt out of personalised advertising and reset your advertising identifier in your device's system settings:

For more information, see Google's Privacy Policy and How Google uses information from sites or apps that use our services.

5. Device Permissions

Microphone (RECORD_AUDIO)

The Android manifest declares the RECORD_AUDIO permission because the audio playback library we use (Expo AV) bundles recording capabilities alongside playback. Puzzle Suite never records audio from your microphone. The permission exists solely for library compatibility; we use the library only to play sound effects and optional background music.

Notifications

Puzzle Suite may request permission to send local notifications (e.g. daily-exercise reminders). Notifications are scheduled and triggered on your device; we do not send push notifications from a server. You can revoke notification permission at any time via your device's system settings.

6. In-App Purchases

Puzzle Suite does not offer in-app purchases in this release and does not collect or process purchase information.

7. Leaderboards & Daily Exercise

When you finish a game that has an online leaderboard, your client sends one record to our leaderboard server (hosted on Cloudflare Workers, with rows stored in Cloudflare KV and D1). Each record contains:

Daily Exercise scores are stored against the same anonymous user ID, scoped to the calendar day, and used to populate the per-day-per-game daily leaderboard.

Like any internet traffic, your IP address is visible to Cloudflare at the network layer for routing, rate limiting, and abuse prevention. Our application code does not store, log, or correlate IP addresses with submitted scores. Cloudflare's processing of network metadata is governed by Cloudflare's Privacy Policy.

Retention. All-time leaderboard rows are retained indefinitely so historical top-100 lists remain accurate. Daily Exercise rows are retained for at least 90 days; older daily rows may be aggregated or deleted at our discretion.

Reinstall behaviour. Because submissions are tied to the on-device anonymous identifier rather than an account, uninstalling and reinstalling the app generates a new anonymous ID. Your old leaderboard rows remain on the server but are no longer associated with your reinstalled copy. To request deletion of specific rows, see section 14 (Your Rights).

8. Crash Reporting

Puzzle Suite does not currently use a third-party crash reporting service. Crashes are surfaced through the platform's native channels — Apple TestFlight diagnostic logs (iOS) and Google Play Console pre-launch reports (Android) — at the discretion of the operating system, governed by Apple's and Google's privacy policies respectively. We will update this policy and notify users in the app's "What's New" notification before re-introducing a third-party crash reporter.

9. Cookies & Local Storage

The mobile app

The mobile app does not use cookies. It uses the device's local key-value storage (AsyncStorage) for game progress, preferences, and your anonymous user ID. This data is never transmitted off-device.

This privacy policy page

This hosted privacy policy page does not set marketing or analytics cookies. The hosting provider may set strictly-necessary operational cookies for security and DDoS protection (e.g. Cloudflare's __cf_bm bot-management cookie). These cookies are not used for tracking or profiling and are governed by Cloudflare's Cookie Policy.

10. Children's Privacy

Puzzle Suite is rated suitable for all ages on Apple and Google's age-rating systems but is not directed at children under 13 (United States, COPPA) or the equivalent age in your jurisdiction. We do not knowingly collect personal information from children, and we do not use the AdMob "child-directed treatment" tag because the app is not directed at children.

If you are a parent or guardian and believe a child has provided personal information to us, please contact us at the address in section 18; we will delete the information from our servers without undue delay.

11. Data Retention

On-device data is under your control. Uninstalling the app, or using the in-app "Reset Progress" option in Settings, deletes all locally stored progress, statistics, achievements, preferences, and your anonymous user ID. Reinstalling generates a new anonymous user ID and starts fresh.

Server-side leaderboard rows are retained as described in section 7:

To request deletion of specific leaderboard rows, see section 14 (Your Rights).

12. Data Security

We employ technical and organisational measures appropriate to the limited categories of personal information we process:

No system is perfectly secure. If we become aware of a personal-data breach affecting your information, we will notify affected users where required by applicable law.

13. Third-Party Services & Sub-Processors

Puzzle Suite uses the following third-party services. Each operates independently or as our processor for the data described.

Service Role Data processed Privacy policy
Google AdMob Independent Advertising identifier, device, IP-derived location, ad interactions policies.google.com/privacy
Cloudflare, Inc. Processor (leaderboard hosting) Leaderboard submissions, network metadata, IP at edge cloudflare.com/privacypolicy
Expo / EAS (Expo, Inc.) Processor (build & update infrastructure) Build metadata; no user data expo.dev/privacy
Apple App Store / Google Play Independent Purchase, distribution, and platform analytics data apple.com/legal/privacy · policies.google.com/privacy

14. Where Your Data Is Processed

The third parties listed in section 13 are headquartered in the United States, and personal information processed in connection with Puzzle Suite is generally stored and processed in the United States. By using the app, you understand that your information may be transferred to and processed in the United States.

15. Your Rights

California (CCPA / CPRA)

If you are a California resident, you have the right to:

"Sale" / "sharing" disclosure. Puzzle Suite does not sell personal information for monetary value. To the extent that the AdMob SDK's processing of advertising identifiers for personalised advertising constitutes "sharing" under CPRA, you may opt out through the in-app Ad Privacy Choices control or by disabling personalised advertising in your device settings (see section 4).

Other US states

Residents of states with comprehensive privacy laws (Virginia VCDPA, Colorado CPA, Connecticut CTDPA, Utah UCPA, and others as enacted) have analogous rights to access, deletion, correction, and opt-out of targeted advertising. To exercise these rights, follow the procedure below.

Other jurisdictions

Residents of jurisdictions outside the United States (other than the EEA, UK, and Switzerland — see section 1) may have rights under their local laws (e.g. Brazil LGPD, Australia Privacy Act, Canada PIPEDA). Contact us and we will respond in accordance with the applicable framework.

How to exercise your rights

To exercise any right, email [email protected] with:

We will respond within 45 days (CCPA / CPRA), with a possible extension where permitted by law. Verifying your request may require additional information; we will only use such information to authenticate the request.

16. Automated Decision-Making

We do not engage in automated decision-making or profiling that produces legal effects concerning you or similarly significantly affects you. Anti-cheat checks (HMAC verification, rate limits, time-window validation) are technical integrity controls and do not produce decisions of legal or similarly significant effect.

17. Changes to This Policy

We may update this Privacy Policy from time to time. The "Effective date" and "Version" at the top of this page indicate the latest revision. Material changes will be highlighted in the app's "What's New" notification after the update is released, and the previous version will be available in section 19 (Version History).

18. Contact Us

If you have questions about this Privacy Policy or Puzzle Suite's data practices, contact us at:

Misfit Games
Email: [email protected]

19. Version History