Privacy Policy

Use without an account

The free puzzles may be played without signing in. The device is then identified only by a random anonymous identifier generated on the device, and by a second random identifier used for analytics. Gameplay events — puzzles opened, hints used, time taken to solve — are associated with those identifiers and with no personal identifier. They are processed to assess which puzzles function as intended and to calibrate difficulty.

Where an account is subsequently created, play recorded against the device is joined to that account and from that point constitutes personal data.

Use with an account

An account may be created with an email address and password, or by Google or Apple sign-in. The account carries the subscription, solve history, streak and leaderboard standing across devices, and is required in order to subscribe.

Where an account exists, the following are held: the email address and a hashed password; the identifier supplied by the provider where Google or Apple sign-in was used (Google additionally supplies a profile picture address; Apple does not, and may supply a relay address in place of the user’s own); the nickname and flag selected; puzzle progress, best times, ranked submissions, and hints and checks used; friends, blocked players and any nickname reported; subscription status; and, where notifications are enabled, a device token and the notification settings.

Measurement on this website

On the gridigma.com website only, Google Analytics is used to determine how users reach GRIDIGMA — the referring site or search, and the country of access. It receives the pages visited and a limited set of milestone events such as opening a puzzle, completing one, sharing a result and viewing the subscription page.

It operates without cookies. Under Google Consent Mode every storage category is denied — analytics storage, advertising storage, ad user data and ad personalisation — so Google Analytics stores nothing on the device, cannot recognise a user on a later visit, and no visit is used to build an advertising profile or for remarketing. IP anonymisation is enabled. Accordingly this site displays no cookie banner, there being no analytics cookie to which consent could be given.

The GRIDIGMA iPhone, iPad and Android applications contain no Google Analytics. The tag is not built into them and cannot load within them. Measurement in the applications is limited to the first-party gameplay data described above, held on the Fabervant server.

Measurement by Google on the website may be prevented by Google’s opt-out browser add-on or by any standard tracker blocker. First-party measurement continues in either case.

Processors

Fabervant uses a limited number of service providers, each for a single purpose. Each is bound to use the data it receives only to provide that service.

• OpenAI — on selection of a nickname, the nickname text alone is transmitted for assessment against Fabervant’s rules on offensive names. No other data is transmitted and no record of the assessment is retained.
• Apple and Google — confirm identity where Apple or Google sign-in is used, and process payment where a subscription is taken through their stores.
• RevenueCat — administers subscriptions bought on the App Store and Google Play. It receives the player identifier and purchase and renewal status. Subscriptions bought on the web are handled by Paddle, described under Payment data.
• Zoho Mail — transmits verification, password reset, account deletion and email change messages. It receives the email address and the message.
• Cloudflare — sits in front of the Fabervant server and carries every request to it, as a network provider does.
• Firebase Cloud Messaging and the Apple Push Notification service — deliver notifications enabled in the application. They receive a device token and no identifying data.

Excluded practices

• No advertising. GRIDIGMA is permanently ad-free.
• No advertising SDKs, and no advertising or remarketing profile derived from play.
• No sale or rental of personal data.
• No tracking across the applications or websites of other undertakings, and no disclosure to data brokers.

Payment data

A subscription bought on this website is processed by Paddle.com Market Limited as payment provider and merchant of record. Paddle handles payment details directly; Fabervant does not receive or store card information. Paddle’s own privacy policy governs its processing of payment data.

A subscription bought within the GRIDIGMA iPhone, iPad or Android application is billed by Apple or Google under their own terms, and payment details are not disclosed to Fabervant. Fabervant receives only the fact that a subscription is active and its renewal date.

Legal bases

Where the GDPR or Türkiye’s KVKK applies, processing is carried out on the following bases: performance of the contract with the user (operating the account, providing the puzzles covered by the subscription, maintaining posted leaderboard times); legitimate interests (maintaining the service, calibrating difficulty, and preventing cheating and abuse); consent, where it is sought (notifications); and legal obligation, where accounting or tax law requires a payment record to be retained.

Retention

The account and the data linked to it are retained while the account exists. On deletion of the account the data is removed immediately; the Account Deletion page sets out the scope of deletion.

Records required to be retained by law, such as a payment record retained for accounting and tax purposes, are kept for the period the law requires and do not form part of the account. Play recorded against a device that never signs in is retained until erasure is requested from that device.

Data subject rights

The user may request a copy of the personal data held, its correction, its erasure, restriction of or objection to its processing, or its transmission in a portable form. A consent may be withdrawn at any time; notifications may be disabled in the application or in device settings, and deletion of the account withdraws all consents.

Requests are sent to [email protected] and are answered within one month. A user in the EU or the UK may also lodge a complaint with the competent national data protection authority; in Türkiye, with the Kişisel Verileri Koruma Kurumu.

Children

GRIDIGMA is not directed at children. Use requires a minimum age of 13, and where the user is under 18 — or under the age of majority in the user’s place of residence — a parent or guardian must accept the terms on the user’s behalf. Fabervant does not knowingly collect personal data from a child under 13. Where a child under 13 is believed to have supplied personal data, notification to the address above will result in its removal.

Location of processing

The Fabervant server runs in Turin, Italy, within the European Economic Area; accounts, solve history and leaderboard times are held there. The email provider transmits through its European data centre. Certain of the processors listed above — including OpenAI, RevenueCat, Google, Apple and Cloudflare — process data outside Türkiye and the European Economic Area. Such transfers rely on the safeguards those providers offer, including the European Commission’s standard contractual clauses.

Changes to this policy

This page is updated as the game changes, and the date at the head of the page states when it was last changed. Where a change is material — a new category of data or a new purpose — notice is given in the application.

Contact

Privacy enquiries, requests and complaints: [email protected]. Fabervant Teknoloji A.Ş., Istanbul, Türkiye.