Legal

Privacy Policy

Last updated: June 8, 2026

This policy explains what data Stdle collects, why, and the choices you have. We kept it plain-English. It pairs with our Terms of Service.

1. Who we are

Stdle is a free daily code puzzle game for developers, operated by an individual ("we", "us", "the operator"). This policy applies to stdle.com and the Stdle service. We are the data controller for the personal data described below.

2. You can play without an account

Anonymous play is fully supported. If you do not sign in, we do not create an account for you and we do not collect your email or name. Your theme preference and game progress (stats, streaks, guess history) are stored only on your device in your browser's localStorage — they never leave your device unless you choose to sign in.

3. Information we collect

Account information (only if you sign in). Signing in is optional and done through Google via our authentication provider (Better Auth). We intentionally keep this to a minimum:

• Your email address — stored only to identify your account.
• We do not store your Google display name and never show it publicly. Your public identity is a nickname you choose (or “Anonymous” by default).
• We do not store your Google profile photo. Avatars shown in the app are generated automatically (Boring Avatars) from a random identifier — not your Google picture.

Gameplay data (if signed in). To sync your progress across devices and power the leaderboard, we store your game results, statistics, and streaks, plus a leaderboard nickname if you choose one. By default you appear as Anonymous — your real name is never shown publicly without your consent.

Automatically-collected usage & device data. Like most sites, we and our analytics provider may receive standard technical data such as your IP address, browser and device type, operating system, referring pages, and how you interact with the service. This is used in aggregate to understand usage and keep the service running.

No payment data. Stdle is free. We do not collect or process any payment or financial information.

4. How we use your data

• To authenticate you and keep you signed in.
• To sync your stats and streaks across devices and display them back to you.
• To operate the public leaderboard using your chosen nickname.
• To measure and improve the service through aggregate analytics.
• To maintain security, prevent abuse and cheating, and comply with our legal obligations.

5. Legal bases for processing

Where the GDPR or similar laws apply, we rely on:

• Consent — for optional sign-in, displaying your nickname on the leaderboard, and non-essential cookies/analytics.
• Legitimate interest — for keeping the service secure, preventing abuse, and understanding aggregate usage.
• Performance of a contract — to provide the account features you asked for when you sign in.

6. Cookies, storage & analytics

• Session cookie — a strictly necessary cookie that keeps you signed in. Set only when you sign in.
• localStorage — your theme preference and game progress are stored locally in your browser, not in cookies.
• Analytics (Google Tag Manager / Google Analytics 4) — we use GTM and GA4 to understand aggregate usage. These set their own cookies. You can opt out using your browser settings, a cookie banner choice where shown, or the Google Analytics opt-out browser add-on.
• Advertising — we do not currently run ads. If we add advertising in the future, ad partners may set their own cookies; we will update this policy and surface any required consent controls beforehand.

7. Third parties & sub-processors

We share data only with the service providers we need to run Stdle. They process data on our behalf under their own terms:

• Google — OAuth sign-in (authentication) and Analytics / Tag Manager.
• Supabase — database hosting for your account and gameplay data.

We do not sell your personal data, and we do not share it for cross-context behavioral advertising.

8. Data retention

We keep your account and gameplay data for as long as your account is active. If you delete your account, we delete or anonymize the associated personal data within a reasonable period, except where we must retain limited information to comply with legal obligations or resolve disputes. Aggregate, non-identifying analytics may be retained.

9. Your rights

Depending on where you live — including under the EU/UK GDPR and the Thailand Personal Data Protection Act (PDPA) — you may have the right to:

• access the personal data we hold about you;
• correct inaccurate or incomplete data;
• delete your data ("right to erasure");
• object to or restrict certain processing;
• withdraw consent at any time; and
• request a portable copy of your data.

To exercise any of these rights, email us at me@stdle.com. You also have the right to lodge a complaint with your local data protection authority.

10. Account & data deletion

You can permanently delete your account and all associated data at any time from your profile page (the “Delete account” section), or by emailing me@stdle.com. Clearing your browser storage also removes the local copy of your progress on that device.

11. Children

Stdle is not directed to children under 13 (or under 16 where a higher age of digital consent applies). We do not knowingly collect personal data from children. If you believe a child has provided us personal data, contact us and we will delete it.

12. Data security

We use reasonable technical and organizational measures to protect your data, including encrypted connections (HTTPS) and access controls at our hosting providers. No method of transmission or storage is 100% secure, so we cannot guarantee absolute security.

13. International data transfers

Our providers (Google, Supabase, and any future hosting) may process data on servers located outside your country, including in the United States. Where required, such transfers are covered by appropriate safeguards such as Standard Contractual Clauses.

14. Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, provide additional notice. Continued use of Stdle after changes take effect means you accept the updated policy.

15. Contact

Questions about privacy? Email me@stdle.com. See also our Terms of Service.