Privacy Policy
Version 1.0 · Last updated: 3 July 2026
Daily Sudoku ("we", "us") is operated by MagiSagi and is available at www.daily-sudoku.in. This policy explains what personal data we collect, why, and the rights you have — including your rights under India's Digital Personal Data Protection Act, 2023 ("DPDP Act"), under which MagiSagi acts as the Data Fiduciary for the personal data described below.
1. Data we collect and why
If you play as a guest
We collect no personal data. Your streaks, highscores and settings are stored only in your browser's local storage on your own device. Clearing your browser data removes them.
If you create an account
With your consent, we process the following, solely to provide the account and cross-device sync feature:
- Email address and password — to create and secure your account. Passwords are stored only in hashed form by our authentication provider; we never see them.
- Game progress — your daily streak, completion dates and highscores, so they sync across your devices.
- Consent record — the date, time and policy version you agreed to, as required by law.
We do not collect your name, phone number, location or any other personal data. We do not run ads, and we do not sell or share your personal data with anyone for marketing.
If you send feedback
When you use the in-game feedback form we store your message, the page it was sent from, and — only if you choose to provide it — your email address, solely so we can review the feedback and reply. Feedback is kept until it has been actioned, after which it may be deleted.
Gameplay statistics
To understand how the game is used, we record a minimal note when a game starts and ends: game mode, difficulty, whether it was won, and duration. For guests this contains no identifier of any kind; for signed-in players it is linked to the account (and is erased with it). It is used only for aggregate statistics such as "how many games were played this week".
Multiplayer
Co-op multiplayer uses peer-to-peer connections (WebRTC via the public PeerJS broker). When you create or join a room, your IP address is technically visible to the players you connect with and to the broker service that introduces you, as is inherent to peer-to-peer technology. We do not store it.
2. Legal basis
We process account data on the basis of your free, specific, informed and unambiguous consent, given when you tick the consent box at sign-up (Section 6, DPDP Act). You may withdraw consent at any time by deleting your account — withdrawal is as easy as giving consent.
3. Children
Accounts are available only to persons 18 years of age or older. We do not knowingly process the personal data of children and we do not undertake tracking, behavioural monitoring or targeted advertising of any user, child or adult. Persons under 18 may play as guests, in which case no personal data is collected. If you believe a minor has created an account, contact us and we will erase it.
4. Third-party processors
We use a small number of service providers (Data Processors) to run the game:
- Supabase — authentication and database hosting for account data. Data may be stored on servers outside India.
- PeerJS public broker — introduces multiplayer peers; no game data is stored there.
- Google Fonts, jsDelivr / unpkg CDNs — deliver fonts and code libraries; your IP address and browser details are visible to them when files load, as with any website resource.
These providers process data only to provide their service to us. Where data is transferred outside India, it is transferred in accordance with the DPDP Act, which permits such transfers unless restricted by the Central Government.
5. Retention and security
Account data is kept only while your account exists. When you delete your account, your email, consent record and synced game data are permanently erased from our systems. We rely on industry-standard safeguards (encryption in transit, hashed passwords, row-level access controls so only you can read your own data).
6. Your rights (DPDP Act)
As a Data Principal you have the right to: access a summary of your personal data and how it is processed; correct or update it (you can change your email or password in-game); erase it (use "Delete Account & Data" in the account menu, or email us); withdraw consent at any time; grievance redressal; and nominate another individual to exercise your rights in the event of death or incapacity (email us to record a nomination).
7. Grievance Officer & contact
For any question, request or complaint about your personal data, contact:
Grievance Contact — MagiSagi
Email: dockedhq@gmail.com
We aim to respond within 7 days and resolve grievances within 30 days. If you are not satisfied with our response, you may complain to the Data Protection Board of India.
8. Changes to this policy
If we change this policy, we will update the version and date above and, for material changes affecting account holders, notify you by email or in-game notice before the changes take effect.