Devovia Studio

Privacy Policy — Sudoku Duel

Last updated: August 19, 2026 · Product status: In development

Development notice: Sudoku Duel is still in active development. This policy describes the data flows currently implemented or prepared in the checked-in product architecture. Devovia Studio will review this policy again before public store release so the final text matches the production SDK configuration, store disclosures and retention settings.

1. Who is responsible for the data?

Sudoku Duel is published by Devovia Studio. For privacy questions, data-access requests or account-deletion support, contact info@devoviastudio.com.

Never send us your password, payment-card number or authentication secret in a support request.

2. What Sudoku Duel is

Sudoku Duel is a Sudoku game with career progression, achievements, ranks, online head-to-head matches, friend/challenge systems, virtual Coins, optional rewarded advertising and optional in-app purchases. The product may use platform game services, Firebase services and mobile advertising/consent services.

The app does not provide user-to-user chat, real-money withdrawal, cash conversion, physical prize redemption or player-to-player Coin transfers.

3. Guest accounts, protected accounts and identifiers

The app can create a Firebase-based guest identity so progress and online services can be associated with a player. When a player chooses account protection or sign-in, the app may process an email address, authentication provider and email-verification state. Password handling is performed by Firebase Authentication; Devovia Studio does not store raw account passwords.

Identifiers may include a Firebase UID, public Friend ID, username/display name, discoverability preference and an optional platform game-services display name.

4. Social and online-match data

To provide friends, challenges and online matchmaking, the service may process friend relationships, challenge records, recent opponents, matchmaking tickets, device push tokens and related server timestamps.

Competitive records may include Sudoku board events, completion state, score, mistakes, timeout or forfeit state, rating changes and match history. These records are used to run the match, calculate results, show history, prevent abuse and keep competitive progression consistent.

5. Career, achievements and game progress

The app may store career progress, completed puzzles, difficulty/progression state, achievements, rewards, settings and other gameplay state locally and/or in connected backend services depending on the feature. Platform game services may separately process achievements or identity according to the platform account selected by the user.

6. Virtual Coins, rewards and purchase verification

Sudoku Duel may process Coin balance, an immutable Coin ledger, reward claims, achievement grants, match escrow funding/refunds and purchase-verification identifiers. Coins are virtual game items only: they have no cash value, cannot be withdrawn, cannot be converted to money and cannot be transferred between players.

For Google Play purchases, server verification may use purchase token/order metadata. For Apple purchases, verification may use signed transaction/original-transaction metadata. Google Play and Apple process the payment itself; Devovia Studio does not receive or store payment-card details.

7. Rewarded advertising, consent and advertising identifiers

Sudoku Duel uses Google Mobile Ads as the client advertising request layer. Google User Messaging Platform (UMP) may be used to collect or refresh consent choices before ad requests where required. On iOS, App Tracking Transparency (ATT) may be requested when applicable.

Optional rewarded ads may grant a clearly disclosed in-game reward after the ad SDK confirms completion. Server-side verification may process an AdMob transaction ID, ad unit, prepared reward token, reward item/amount and verification timestamp to reduce duplicate or fraudulent claims.

Ad providers may process device information, advertising identifiers, approximate location derived by their systems, consent state and ad-interaction information according to their own policies and the user’s choices. Unity Ads and Meta Audience Network may be used through AdMob mediation when production configuration enables them. Meta App Events remains disabled unless Devovia explicitly enables and configures it for production.

8. Notifications

If notifications are enabled, the app may process a Firebase Cloud Messaging push token and notification preferences so account, challenge, match or product notifications can reach the correct device. Local notification scheduling may also use device-side preferences.

9. Analytics, diagnostics and security

Firebase Analytics and Firebase Crashlytics may process usage events, crash reports, performance/diagnostic information and device/app information according to the app’s privacy settings and the production configuration. Firebase App Check and related security controls may process device/app integrity signals to help protect online services against abuse.

Where the app exposes privacy toggles for optional analytics or diagnostics, those choices are respected by the application logic and should be reviewed again before release.

10. Why data is processed

Depending on the feature and region, data may be processed to provide the game and requested online services, manage accounts, verify purchases and rewards, prevent fraud and cheating, secure the service, send requested notifications, diagnose crashes, measure product performance, serve consented advertising and meet legal obligations.

For users in the EEA/UK, the applicable legal basis may include performance of a contract, legitimate interests in operating and securing the service, consent for processing that requires consent, and compliance with legal obligations.

11. Sharing and service providers

Data may be processed by service providers required for the feature being used, including Google/Firebase, Google Play, Apple/App Store and Game Center, Google Mobile Ads/UMP and configured mediation partners. Devovia may also disclose information where required by law or necessary to protect users, the service or legal rights.

Devovia Studio does not sell raw account passwords or payment-card details because the app does not collect those items.

12. International processing

Some service providers operate globally. Data may therefore be processed outside the user’s country. Where applicable, Devovia and its providers rely on lawful transfer mechanisms and provider contractual safeguards.

13. Retention

Account, social, gameplay and transaction records are retained only for as long as needed to provide the relevant service, maintain security/integrity, satisfy legal obligations, handle disputes and prevent reward or purchase replay. Exact production retention schedules will be reviewed before public launch.

When an account is deleted, the product architecture keeps a minimal deletion tombstone containing the deleted Firebase UID and deletion timestamp solely to prevent recreation/reward abuse. The final fixed retention period for this tombstone must be published before the public store release.

14. Account deletion

The app includes an account-deletion flow and Devovia also provides a web-accessible deletion instruction page. Deletion removes the player’s server account and cascading wallet/social/match data, then attempts to remove the Firebase Authentication user. A minimal abuse-prevention tombstone may remain as described above.

Read the full process at Sudoku Duel Account Deletion.

15. Your rights

Depending on your location, you may have rights to request access, correction, deletion, restriction, portability or objection, and to withdraw consent where processing relies on consent. You may also have the right to complain to your local data-protection authority.

Send requests to info@devoviastudio.com. We may need to verify that the request relates to the correct account before acting.

16. Children and age-related protections

Sudoku Duel is not designed to request sensitive information from children. Before release, the final store age rating, audience configuration, ad treatment and consent behavior will be checked against Google Play, Apple and applicable child/privacy requirements for every launch region.

17. Security

Devovia uses platform authentication, transport encryption, purchase/reward verification, server-side validation and app-integrity controls intended to protect the service. No system is completely secure, so users should also protect access to their device and linked store/email accounts.

18. Changes to this policy

This page may change as Sudoku Duel moves from development to production. Material changes will update the “Last updated” date. Store disclosures and in-app privacy/consent surfaces should remain consistent with the production version of this policy.