Privacy.

The short version: we ask for your email, and we don't ask for anything else. Personal data isn't our business. Here are the specifics.

What we collect

Your email. Required to create an account.

A username. Required at signup; shows up on puzzles you set or solve. Pick anything; it doesn't have to be your real name.

Puzzle data you create or import. Title, rules, grid, your progress through other puzzles. This is the substance of the platform.

A login session cookie. Keeps you logged in between visits. That's the only cookie we set.

We don't ask for your name, your location, your phone number, your age, or anything else. If a future feature needs more, it will be optional and the reason will be obvious.

What we use your email for

  • Logging you in.
  • Password recovery, when you ask for it.
  • Payment receipts, if and when you pay for something on Sudorix.
  • Required transactional notices — the kind that exist because the law or your account security says they have to (e.g. a major security incident). We will not send these casually.

What we will never email you

  • Feature announcements.
  • Newsletters or digests of new puzzles.
  • Re-engagement nudges or "we miss you" messages.
  • Tournament invites or competition reminders.
  • Anything a marketing team would normally send.

All of that lands in your in-app Sudorix inbox instead, where you can read it on your own schedule, ignore it, or turn it off.

What we don't do

  • We don't track you across the web.
  • We don't run third-party analytics, advertising pixels, or fingerprinting.
  • We don't sell, rent, or trade your data to anyone, ever, full stop.
  • We don't build a profile of your behavior to monetize. The business model is paying customers, not surveillance.

Who handles your data

We store accounts and puzzle data in Supabase, which provides authentication and the database underneath Sudorix. Supabase has its own privacy practices and can see what we store on its infrastructure. We don't share data with anyone else.

When you import a puzzle from a Penpa or SudokuPad URL, we fetch that URL on our server to convert it. The URL you paste hits the origin (Penpa, SudokuPad, etc.) — that's how URL fetching works. Your account info isn't sent anywhere during this fetch.

If we add payments later, the payment processor (likely Stripe) will see whatever a payment requires by law — typically your card details and billing address. We'll keep that path as narrow as we can and update this page when it ships.

Your puzzles

Published puzzles are public by design — anyone can see them. Your username appears on them.

Raw, testing, and pending puzzles in your Library are private to you (and to admins who review the publishing queue, when you submit one).

Your solving progress on other people's puzzles is private to you.

Deleting your account

Self-serve. Open Settings, scroll to Delete account, type your username to confirm, click Delete forever. Your account row, profile, favorites, and in-progress solves are removed immediately and you're signed out.

Published puzzles you set stay public unless you also ask us to remove them — they belong to the community at that point. We can scrub your username off them if you want; reach out before deleting your account if that matters to you.

Changes to this page

We'll update this page when our practices change. Significant changes will land in your in-app Sudorix inbox. We'll never make this policy worse without telling you.

Questions

Email [contact email — TBD]. A real person reads it.

Last updated: April 2026