Privacy

Plain-English version. Effective 2026-05-21.

What we collect from everyone

• Anonymous device ID — a random UUID generated the first time you play. It is stored in your browser's localStorage and used as your identity on our server. It is never tied to your name, email, or any personal account.
• Gameplay progress — your current level, score, lives, and gems are synced to a Cloudflare database (D1), keyed only by your anonymous device ID. This is how your progress follows you if you clear your browser or switch devices (using export/import).

What we do NOT collect from non-buyers

• No name
• No email address
• No location or IP address stored by us (Cloudflare may log IPs in transit; we do not retain them)
• No device fingerprint beyond the UUID you already know about

When you buy something

Purchases are handled by Stripe. When you check out:

• Stripe collects your payment details directly. We never see or store your card number, CVV, or full account number.
• Stripe will have your name and email so they can send a receipt. That data lives in Stripe's systems under Stripe's privacy policy.
• We receive a confirmation event from Stripe (a "webhook") that tells us your purchase succeeded. That confirmation is tied to your device ID so we can unlock what you bought.

Storage and sync

• localStorage — used as a fast local cache for your game state. It never leaves your device on its own.
• Cloudflare D1 — our cloud database. Your progress is synced here so you don't lose it if you clear localStorage. The only key we use is your anonymous device ID.
• No tracking cookies. No advertising cookies. No third-party pixels or ad networks embedded in this game.

Analytics

We may use Cloudflare Web Analytics to count page views. It is cookieless and aggregated — Cloudflare cannot identify individual visitors, and neither can we. No third-party analytics services (Google Analytics, Meta Pixel, etc.) are used.

Data retention

Your game data (progress + device ID) is kept indefinitely so your save persists. We do not have a scheduled deletion policy. If you want your data deleted, see below.

Your right to deletion

Email dan.cohen@defimagic.io with your device ID (found in Settings → About, or in localStorage under the key bt_device_id) and we will delete every record tied to that ID within 14 days. You can also clear your local data instantly by clearing localStorage for this domain in your browser settings.

Children

Brain Teaser is not directed at children under 13. We do not knowingly collect any information from children under 13. We have no age-verification mechanism — if you are under 13, please do not play or ask a parent or guardian first. If you believe a child under 13 has used the game, contact us at the email above and we will delete the associated records.

EU / UK / California residents

We believe this policy already gives you the practical rights those laws require (access, deletion, no sale of data). We are not a large data processor and we make no GDPR or CCPA compliance certification, but if you have a specific request under those frameworks, email us and we will do our best to honor it.

Changes to this policy

If we add new data collection, we will update this page and change the effective date above. We will not retroactively apply new collection to existing players without notice.

Contact

dan.cohen@defimagic.io or find us on Discord.