Privacy

We make apps, not an advertising business. Nothing about you is sold, rented, or handed to advertisers. You will never see an ad in anything we make. Anything we ever collect, we collect for one reason: to make our apps better for the people using them.

That is the whole policy. Everything below is the detail, in plain language, because a promise you have to take on faith is not worth much. It is written to cover what we do today and to be straight about what may come, so that adding a feature never means quietly rewriting our principles.

What we will never do

These are commitments. They do not change as the apps grow:

• Sell, rent, or share your information. Not to advertisers, not to data brokers, not to anyone. There is no arrangement under which this changes.
• Show you ads. No banners, no interstitials, no rewarded video, in any of our apps.
• Build a profile of you to sell something. We are not interested in who you are. We are interested in which parts of an app people get stuck on.
• Require an account. If accounts arrive they will be optional, and everything we make will stay fully usable without one.

What the app collects today

Nothing. Penguindoku makes no network calls at all. Every puzzle is built into the download, the daily board is worked out from the date rather than fetched, and your progress is stored only on your own device. You can check this yourself: put the phone in airplane mode and the game behaves identically.

There is no analytics package, no crash reporter, no advertising identifier, and no third‑party code of any kind in the app as it stands.

What may come, and what it would mean

Penguindoku is early, and some things are likely to arrive. We would rather describe them now than surprise you later. Each will be reflected on this page before it ships, not after, and the date at the top will move when it does.

Usage analytics

To improve something you have to know how it is actually going: whether people get through the early stages or give up, whether a feature is used at all, whether it fits the phones people actually own. Analytics answer that. If we add them they will be about how an app is used rather than about who you are, and they will never feed advertising.

Accounts and sign‑in

An optional account would let your progress follow you to a new phone instead of living on one device. If we add it we would hold what is needed to do that job — a sign‑in identifier and whatever the app stores for you — and nothing beyond it. It stays optional, and the app stays complete without it.

Leaderboards, achievements, and Google Play Games

For our games, competitive play is something we would like to offer, and the ordinary way to do that on Android is Google Play Games Services. If we use it, signing in is your choice. When you do, Google assigns you a player ID and stores your scores and achievements on its own systems under Google’s privacy policy. A leaderboard is public by nature: the display name you pick and the scores you post are visible to other players. You would still be able to play every puzzle without ever signing in.

Game Center is the equivalent on Apple platforms, and the same would apply.

When you write to us

The contact form sends us your message, your email address, and your name if you gave one. It arrives as an ordinary email and lives in an inbox. Your address is used to reply to you and for nothing else — it is never added to a mailing list, because there is no mailing list.

That page, and only that page, loads a spam check called Cloudflare Turnstile, which works out whether you are a person without setting tracking cookies. It is the single third‑party request anywhere on this website, which is why the form has a page of its own.

Your progress belongs to you

Levels you have finished, your times, your mistakes and your points are stored on your own device. You can export the lot to a file from Settings and import it onto another phone, and importing merges rather than overwrites, so restoring an old backup can never destroy newer progress. That export exists so your progress is portable whether or not accounts ever arrive.

Children

Penguindoku is suitable for all ages. There is no advertising, no in‑app purchasing, no chat, and no user‑generated content, so there is nothing in it built to extract money or attention from a child. If we add a feature that is not appropriate for children — a public leaderboard carrying player‑chosen names being the obvious candidate — we will gate it appropriately and say so here.

This website

The site is a handful of static files on Amazon CloudFront. It sets no cookies and, today, runs no analytics. The two typefaces are served from this domain rather than from a font provider, so loading a page does not announce you to anyone else — the contact page and its spam check being the one deliberate exception.

As with any web host, our provider keeps standard server logs, which include the IP address making the request. We do not use them to build a profile of you and do not combine them with anything else.

Who else can see anything

Today: nobody. We use Amazon Web Services to host this site and carry our email, and Cloudflare for the contact form’s spam check. Those providers handle what passes through them in order to provide that service and for no other purpose.

If the features above arrive, the providers behind them — an analytics provider, or Google for Play Games Services — will be named on this page before they ship. We will not add a third party silently.

Keeping and deleting

Messages you send us are kept while they are useful for helping you and then deleted. Progress on your device is yours to delete by removing the app. If accounts arrive you will be able to delete yours and everything attached to it, and that route will be described here.

Your rights

Rules like the GDPR and the CCPA give you the right to see, correct, export and delete personal information a company holds about you. Ask and we will do it, and we will tell you honestly what there is — which today, unless you have written to us, is nothing at all.

We do not sell or share personal information, and there is no opt‑out to hunt for because there is nothing to opt out of.

When this changes

Policies that quietly widen and hope nobody re‑reads them are the reason nobody reads them. If we start collecting something, this page will say what and why, in the same plain language, before it starts — and the commitments under What we will never do stay put regardless.

Getting in touch

Questions, or you would like to know what we hold: use the contact form. It reaches a person.