Sudoku Stars Privacy Policy

Effective date: [WHEN SHIPPED] Last updated: [WHEN SHIPPED]

1. Who we are

Sudoku Stars ("the app", "we", "us") is a Sudoku game for iPhone, published by [OWNER LEGAL NAME], an individual, of [ADDRESS]. We are the controller of the information described in this policy.

Contact for anything about privacy: support@luminastudio.ai

2. The short version

The app works without an account. There is no sign-up, no name, no email and no password.
Your progress, statistics, streak, hint wallet and settings live on your device.
We count anonymous events such as "puzzle finished" only if you allow it. You can switch this off at any time in Settings.
The app shows ads from Google AdMob. Google decides what its ad code collects. Ads follow Google's consent form and the iOS tracking permission, and you can say no.
Purchases are handled by Apple. We never see your payment details.
Notifications are local reminders created on your device. We do not run a push server.
The app is for people 13 and older.

3. What we collect (data map)

One heading per row.

3.1 Progress, stats, streak, wallet and settings

Where it lives: a file in the app container on your device.
Does it leave your phone: no. In version 1 we do not upload it. Your own iPhone or iCloud device backup (made by iOS, not by us) may contain it.
Who sees it: you.

3.2 Install ID

What it is: a random number made on your device at first launch. It is not built from your device, your name or any advertising identifier. It is stored in the app container and is replaced when you use "Delete my data". Reinstalling the app gives a new one.
Does it leave your phone: only in a hashed form (a one-way scrambled copy), inside analytics events, and only if you allow analytics.
Who sees it: our analytics vendor, as a pseudonymous identifier.

3.3 Allow-listed analytics events

What it is: short anonymous events from a fixed list of 80 events. Events are limited to numbers, yes/no values and short fixed codes. They contain no free text. The families are:

Family	What it tells us, in plain words
Starting and onboarding	the app was opened, which screen was shown, how you answered the privacy and consent questions, which skill level you picked, how far you got in the tutorial, which error screen appeared
Playing	a puzzle was started, resumed, finished or left, its mode and difficulty, how many seconds it took, how many mistakes, undos and hints were used, when the game was over, whether the visual effects were lowered to save battery, a frame-speed summary
Daily, streak, events and progress	a Daily or event puzzle was opened or finished, streak and trophy changes, awards, ranks, which Learn pages you opened and practice results, the welcome-back gift
Ads and purchases	whether an ad was requested, shown, closed or failed and what it earned, whether you watched an optional rewarded video, Shop and offer screens, and whether a purchase started, finished, failed, was pending, was restored or was refunded (with a product code only)
Settings and system	a setting was changed (the setting name and an on/off or fixed value), reminder questions and answers, a notification was opened, Delete my data was used, start-up time, and whether the settings file loaded

The full list of events, family by family, is in Appendix A at the end of this policy. It equals the list built into the app.
What is never in an event: your name, email, phone number, address, contacts, photos, location, Game Center name or id, iCloud id, advertising identifier, or the identifier for vendors (IDFV).
Timestamps are rounded to 10 seconds. Each launch uses a new random session code that is never saved.
Does it leave your phone: yes, but only if analytics is allowed (see "Consent and your choices").
Who sees it: our analytics vendor.
If the vendor is later changed, this policy will name the new one.

3.4 Ad data

What it is: data collected by the Google Mobile Ads SDK to show and measure ads, such as device and advertising identifiers (the advertising identifier only if you allow tracking in iOS), a rough location worked out from your IP address, ad interactions and diagnostics. The exact list is on Google's App Store data disclosure page for the SDK version we ship, and Google's privacy policy applies to it.
Does it leave your phone: yes, after the ad consent steps described below.
Who sees it: Google and its advertising partners.

3.5 Purchases

What it is: purchases of Remove Ads, hint packs and the Starter Bundle are processed by Apple through StoreKit. We store product ids and transaction ids on your device only, so the app can unlock what you bought.
Does it leave your phone: the purchase itself goes to Apple only. If analytics is allowed, an anonymous event with the product code (for example removeads) is also sent.
Who sees it: Apple.

3.6 Crash and performance diagnostics

What it is: crash and performance reports from Apple (Xcode Organizer and MetricKit). We do not ship a third-party crash reporting SDK in version 1. The Google ad SDK may collect its own diagnostics (see 3.4).
Does it leave your phone: only if you share analytics with developers in iOS Settings.
Who sees it: Apple, and us in aggregated form.
Optional: in Help you can tap "Contact support" and choose "Attach diagnostics". The app shows you the exact text (app version, iOS major version, and the last 50 event names) before you send the email.

3.7 Game Center (planned, not in version 1.0)

Status: [WHEN SHIPPED]. If we add the weekly leaderboard, Apple manages the Game Center identity.
We will not read or store your Game Center player id or alias beyond what Game Center shows on screen.
Who sees it: Apple, and other players (your alias), under Apple's rules.

3.8 iCloud backup (planned, not in version 1.0)

Status: [WHEN SHIPPED]. If we add optional progress backup, it uses your private iCloud (CloudKit) storage. We cannot read it.
Who sees it: you.

3.9 Support email

What it is: if you email support@luminastudio.ai, we receive your email address and whatever you write.
Does it leave your phone: only when you send the message.
Who sees it: us.

3.10 Website

The website sudokustars.luminastudio.ai hosts this policy, the terms and the support page. The app also downloads one small settings file from it (see 4.10). Its host keeps an access log that can show your IP address.

4. Third-party and Apple components (SDKs)

One heading per row. No other SDK ships in version 1: no social login, no attribution SDK, no third-party crash SDK, no push SDK, no ad mediation adapter.

4.1 Google Mobile Ads SDK (AdMob)

Purpose: banner, full-screen (interstitial) and rewarded ads.
Data it may collect: device and advertising identifiers (the advertising identifier only if you allow tracking), IP-derived rough location, ad interactions and diagnostics.
Starts: from your second session, after the consent steps, never during your first session.
Consent: Google's consent form in regions where it is required, the iOS tracking prompt for the advertising identifier, and our own privacy screen.
Provider terms: Google's privacy policy and ad settings apply. Google treats the data it receives under its own terms.

4.2 Google User Messaging Platform (UMP) SDK

Purpose: shows the consent form, the explainer before the iOS tracking prompt, and the privacy options.
Data: your consent record.
Starts: second session.

4.3 Analytics vendor SDK (TelemetryDeck)

Purpose: product analytics, retention and A/B counts, using only our allow-listed events through our own wrapper.
Data: the events described in 3.3 with a hashed pseudonymous id.
Starts: after you answer the privacy screen with Accept, and only while the switch "Share anonymous usage data" is on.
Consent: our own switch in Settings.
Vendor name and location of storage:

4.4 Apple StoreKit 2

Purpose: purchases.
Data: handled by Apple. We keep product ids and transaction ids on your device only.
Starts: at launch. No consent needed.

4.5 Apple GameKit (Game Center), planned

Purpose: achievements and a weekly leaderboard. Status: [WHEN SHIPPED].
Data: Apple-managed identity. See 3.7.

4.6 Apple UserNotifications

Purpose: local reminders only. There is no push token and no push server. Nothing leaves your device.
Starts: only after you say yes to our reminder question and iOS permission. See "Notifications".

4.7 Apple WidgetKit, planned

Purpose: Home Screen and Lock Screen widgets. Status: [WHEN SHIPPED].
Data: stays in a shared app container on your device.

4.8 Apple MetricKit and Xcode Organizer

Purpose: crash and performance diagnostics.
Data: Apple side, only from users who share analytics with developers.

4.9 Apple CloudKit (private database), planned

Purpose: optional progress backup. Status: [WHEN SHIPPED].
Data: your own iCloud container, which we cannot read.

4.10 Static configuration file

Purpose: the app downloads a small settings file (config.v1.json) from our website host.
Data: the host's access log can show your IP address. We set host log retention to the minimum available (target: 30 days or less).
Starts: at launch. No consent needed.

4.11 Core Haptics

Purpose: vibration feedback. No data is collected. Version 1.0 has no sound effects.

Privacy screen: before your first puzzle, and before any analytics event or ad, the app shows a privacy screen in every region. It has two buttons of the same size and weight: "Accept" and "Essential only". Accept turns on "Share anonymous usage data". Essential only leaves it off. Neither button starts ads or tracking. The app works fully if you choose "Essential only".
Change your mind: Settings > Privacy and data has the same switch, "Share anonymous usage data". Turning it off takes effect at once and clears any events waiting on your device.
Analytics is allowed only when that switch is on and you have answered the privacy screen.
Nothing in the app is locked behind allowing analytics, tracking or notifications.
Ad consent comes separately, at your second session (see "Ads and tracking"). Google's consent form appears in the EU, Iceland, Liechtenstein, Norway, the United Kingdom, Switzerland, the French overseas regions and Turkey, and where the region is unknown, or wherever else Google requires it.

6. Ads and tracking

The app is funded by ads. Ads are never shown during your first session. Banners appear only on the game screen. Full-screen ads appear between puzzles, and rewarded videos are optional.
On your second session the app runs the ad consent steps in this order: Google's consent update and form where required, an explainer, then the iOS "Ask App Not to Track" prompt, then ads are requested. Ads are requested only after Google reports that ads may be requested.
If you decline tracking, ads are still shown, but they are not personalized by the advertising identifier. All features keep working.
Privacy manifest and App Store label: because the ad SDK may track you after you allow it, the app declares tracking. The App Store privacy label is filled in from the shipped SDK versions.
Controls: iOS Settings > Privacy and Security > Tracking; Settings > Privacy and data > Ad choices in the app (shown where Google requires it); Google's ad settings. In Settings > Privacy and data you can also use "Report an ad".
Remove Ads: buying Remove Ads removes banners and full-screen ads. Rewarded videos stay optional.
For people in some US states, the ad SDK may count as a "sale" or "sharing" of information.

7. Purchases

All purchases go through Apple. We never see or store your card details or Apple ID.
Items: Remove Ads, hint packs (10, 35 and 100 hints) and the Starter Bundle (Remove Ads plus 35 hints). Prices are shown in the App Store sheet.
Restore purchases brings back Remove Ads and the Starter Bundle entitlement. Hints you bought are stored on your device and are not brought back by Restore purchases; they may not come back after a reinstall.
Refunds are decided by Apple. If Apple refunds a purchase, the app removes the matching entitlement or subtracts the matching hints.
If analytics is allowed, we send anonymous purchase events with a product code only.

8. Notifications (local only)

The app can show reminders such as a daily puzzle reminder and a streak alert. They are scheduled on your device by iOS. There is no push server and no push token.
The app asks only after you have solved your first Daily puzzle. Saying no changes nothing else in the app. You can change it any time in iOS Settings or in the app.
Delete my data cancels all pending local notifications.

9. Children

The app is intended for people 13 and older. It is not directed to children under 13, and we do not knowingly collect personal information from children under 13.
We do not verify age.
If you believe a child under 13 has given us information, write to support@luminastudio.ai and we will delete what we can find.

10. Your rights and how to use them

10.1 For everyone

Everything the app stores for you is on your device. You can see and delete it yourself:
Settings > Privacy and data > "Delete my data" removes progress, stats, streak, awards, settings, the analytics queue and install id, local notifications and the hint wallet. It does not remove purchases (use Restore purchases) or anything held by Apple or Google.
Analytics data already sent: Settings > Privacy and data shows an Analytics ID. Email it to support@luminastudio.ai with the subject "Delete analytics data" and we will delete that user in the analytics vendor dashboard. Because the ID is random and stays on your device, we can honor a request only when you give us the ID from your device. We cannot find your data from your name or email.
Withdrawing consent: use the switch in Settings. It takes effect at once. For ads, use Ad choices and the iOS tracking setting.
Access to the analytics events we hold about your device is also only possible through the Analytics ID.
Data held by Apple, Google or Game Center is governed by their policies and controls.

You may have the right to access, correct, delete, restrict, object to and move your data, to withdraw consent at any time, and to complain to your data protection authority.
Our reasons for using data: analytics, because you accepted on the privacy screen; ads, because you agreed in Google's consent form where it is required; purchases, because Apple processes them to deliver what you bought; support email, because you wrote to us and we answer.
We aim to answer within one month.

10.3 California and other US states (CCPA / CPRA and similar laws)

You may have the right to know what we collect, delete it, correct it, and opt out of "sale" or "sharing" for cross-context advertising.
We do not sell personal information for money. The ad SDK may count as "sharing" for advertising. Where the law requires it, the app shows Google's privacy options form under Settings > Privacy and data > Ad choices.
We do not discriminate against you for using these rights.

10.4 Turkey (KVKK)

You may apply to us about your personal data under the Turkish Personal Data Protection Law, for example to learn whether it is processed, ask for correction or deletion, and object. We aim to answer within 30 days.
The privacy screen and Google's consent form ask for your consent separately. This notice is in English only in version 1.

10.5 Everywhere else

Depending on where you live you may have similar rights. Write to support@luminastudio.ai and say which country you are in.

11. How long we keep data (retention)

Data	Period	Note
Local event queue on your device	7 days at most, 512 KB at most	Older events are dropped
Analytics events at the vendor	12 months, or the vendor's minimum
Crash and diagnostics (Apple)	Apple's policy	Not ours
Website host access logs for `config.v1.json`	30 days or less	Host chosen to allow this
Support emails	12 months after the last message	Then deleted
Save data on your device	Until you delete the app or use Delete my data
Game Center and iCloud	Apple's rules	When those features ship ([WHEN SHIPPED])
Ad SDK data	Google's rules	See Google's controls

12. International transfers

The analytics vendor and Google may process data outside your country, including outside the EU, UK and Turkey.

13. Where to read this policy

The link is in the App Store listing, on the privacy screen shown at first launch, and in Settings > Privacy and data and Settings > About, legal and credits. A copy is also kept inside the app so you can read it without a connection.
The links to this policy, the terms and support open in your phone's web browser, not inside the app.

14. Contact

Questions, requests or complaints about privacy: support@luminastudio.ai

[OWNER LEGAL NAME], [ADDRESS]

15. Changes to this policy

We will update this page when the app, its SDKs or the law change, and change the "Last updated" date. Adding a new analytics event, a new SDK or a new kind of data requires updating this policy first.

Appendix A. The full list of analytics events

These are all 80 events the app is able to send, and only when analytics is allowed. The list is checked against the list built into the app. Events marked "later version" are not sent by version 1.0.

Starting and onboarding (13): app_open, screen_view, consent_shown, consent_answer, consent_reopen, ump_status, att_status, skill_pick, tutorial_step, tutorial_skip, tutorial_complete, error_shown, error_action
Playing (13): puzzle_start, puzzle_resume, puzzle_complete, puzzle_abandon, game_over, hint_used, hint_sheet_open, pause_open, new_game_pick, mode_select, record_set, fx_tier_downgrade, perf_session
Daily, streak, events and progress (20): daily_open, daily_start, daily_complete, streak_update, streak_saver_offer, trophy_earned, daily_chest, event_open, event_puzzle_complete, event_reward_claim, event_end_recap, award_unlocked, award_claimed, rank_up, learn_open, technique_view, technique_practice, technique_mastered, stats_open, winback_gift
Ads and purchases (21): ad_gate, ad_requested, ad_shown, ad_closed, ad_failed, ad_paid, banner_summary, rewarded_prompt, rewarded_started, rewarded_completed, rewarded_skipped, shop_open, offer_shown, offer_dismissed, offer_converted, purchase_started, purchase_completed, purchase_failed, purchase_pending, purchase_restored, purchase_revoked
Settings and system (13): settings_changed, settings_reset, reminder_prompt, reminder_permission, reminder_scheduled, notification_open, widget_open (later version), rate_request, data_deleted, perf_cold_start, config_loaded, gc_score_submitted (later version), backup_result (later version)