Privacy Policy

Use without an account

The free puzzles may be played without signing in. The device is then identified only by a random anonymous identifier generated on the device, and by a second random identifier used for analytics. Gameplay events — puzzles opened, hints used, time taken to solve — are associated with those identifiers, which identify the device but not the person. They are processed to assess which puzzles function as intended and to calibrate difficulty. Gameplay events are recorded and sent only once the user agrees to share play statistics, in the question the game shows, in the optional box shown when an account is created, or under Settings > Privacy; until then, and after a refusal, no gameplay event linked to the device is recorded, the analytics identifier is not created, and a refusal deletes what the device held.

Separately, the server keeps totals that identify no one: how many times the game is started each day, for some countries counted by country, and, for visitors in countries where the play-statistics question is not shown, per-puzzle totals such as how many times a puzzle was opened and how many times it was solved. These totals hold no device identifier, account or network address and cannot be linked to any person, so they are not personal data. The country is read at that moment from the network address of the request; the address is not stored for this purpose.

Where the device is already known to the Fabervant server, for example because a solve was submitted to a leaderboard or a setting was saved, the language in which the game is played is also kept against it, so that daily content, mail and notifications can be served in that language and so that support can see which language a player uses.

A player without an account who picks a nickname has it kept against the device, with any flag chosen and a record of the tick given to the age, Terms of Service and Privacy Policy sentence (the terms version and the time); other players see the nickname as described under “What other players see”. Where such a player switches on notifications, a device token (in a browser, the delivery address its push service issues and the browser’s two keys for encrypting the message) and the notification settings are kept against the device too. The token is deleted when browser notifications are turned off in the game, on signing out, or when the push service reports that it no longer exists; the nickname, the tick record and the settings are deleted with the device’s record.

Where an account is subsequently created, play and the game language recorded against the device are joined to that account.

Use with an account

An account may be created with an email address and password, or by Google or Apple sign-in. An account created with an email address and password comes into existence only when the link mailed to that address is opened and the password is entered there. The account carries the subscription, solve history, streak and leaderboard standing across devices, and is required in order to subscribe.

Where an account exists, the following are held: the email address and a hashed password; the identifier supplied by the provider where Google or Apple sign-in was used (only the email address and this identifier are requested from Google or Apple; Apple may supply a relay address in place of the user’s own); the nickname and flag selected; the language in which the game is played; puzzle progress, best times, ranked submissions, and hints and checks used; friends, blocked players and any nickname reported; subscription status, the amount, currency and date of each subscription payment and refund, and which price-change notices were sent and when; and when you last started a ranked puzzle; and, where notifications are enabled, a device token (in a browser, the delivery address its push service issues and the browser’s two keys for encrypting the message) and the notification settings.

Where “Remember me” is ticked at sign-in, the sign-in ends at the latest when 30 days pass in which the game is not used. Where it is not ticked, the sign-in ends when the browser is closed, and in any case 7 days after signing in; for signing in, the game sets one cookie, which holds no identifier, is used by Fabervant for no other purpose and lasts only until the browser is closed (a browser set to restore the previous session, or the application on some devices, may keep it). When a sign-in has ended, the device is cleared, as on signing out: after the browser has been closed, the next time the game is opened; after the 7-day or 30-day limit, the next time the game contacts the Fabervant server, which it normally does when it is opened.

The game also keeps in the browser’s or the application’s own storage what it needs to work: the sign-in, with the account’s email address, nickname and flag; an identifier that keeps the times and progress of a player without an account; the player’s settings and choices, including the answer to the play-statistics question; a copy of the puzzles and of the player’s own progress, times, streak and subscription status, so that screens open quickly; puzzles in progress and solves waiting to be sent; puzzles downloaded to be played offline, and the game’s own files; and, during a Google sign-in, a check, valid for at most ten minutes, that the sign-in started on this device. None of it is used to follow the user across other sites. Where the user agrees to share play statistics, those statistics are also kept there until they are sent, as described under “Use without an account”.

What other players see. Other players see your nickname, flag and rank and, on your player card, how many puzzles you have solved, your badges and the date of your first solve; on the leaderboards they see your times, with the hints and checks each run used. If you turn off Show my times to other players (Profile → Settings → Leaderboards), your times stay on every board, friends’ boards included, in their place, but other players see them under the name Anonymous player, without your nickname, flag, rank or player card; you still see them under your own name. Your friends, and the players in a race with you, still see your nickname, flag and rank. A run played unranked appears on no board. Your applause count is shown to others only if you turn on Show my applause count to other players there; you always see your own. In a race, the players in that race see your result.

Measurement on this website

On the gridigma.com website, Google Analytics is used to determine how users reach GRIDIGMA — the referring site or search, and the country of access — and how the game and its subscription are used. It receives the path of each page visited and, when the visitor arrived through a link carrying campaign tags (utm_source, utm_medium, utm_campaign, utm_term, utm_content or utm_id), those tags — never any other part of the address — and events describing how the game is used: starting and finishing the tutorial, a puzzle or the daily puzzle, with the time a finished puzzle took and the number of hints and checks used; asking for a hint or a check; using “What if” and how that test ended; sharing a result, or arriving through a shared link; viewing or claiming a puzzle pack; starting and finishing a duel; and viewing the subscription page. When an account is created or a user signs in, Google Analytics learns only the sign-in method (email, Google or Apple); when a subscription is bought, it learns the plan (monthly or annual), the amount charged excluding tax, the tax and the currency. No event carries a name, an email address, an account number or any card or payment detail; a puzzle or pack is named only by its own code. Before you answer the consent question, the site keeps on your device only where you came from (the referring site’s address, without its path), any campaign tags, the page language and the date of your first visit; it is sent to us only if you agree and sign up, and is deleted on sign-out or after 90 days. If it is sent, we keep it with your account and delete it when the account is deleted.

On the website, Google Analytics is loaded only once the visitor agrees to share play statistics; until then, and after a refusal, the tag is not loaded, no cookie is set and nothing is sent to Google. Once the visitor agrees, Google Analytics sets two cookies on the device, _ga and _ga_<id>, which let it recognise the same browser on a later visit; each lasts for 13 months from your last visit unless removed earlier. Under Google Consent Mode, analytics storage is allowed only after that agreement. If the visitor chooses “Statistics only”, advertising storage, ad user data and ad personalisation stay denied, so the visit is not used for advertising. If the visitor chooses “Allow all”, advertising storage and ad user data are granted too, so that Google can measure whether a visit or a subscription came from one of GRIDIGMA’s own advertisements on other sites. When a visit starts from one of those advertisements, the click identifier Google adds to the address (gclid, gbraid or wbraid) is then passed to Google Analytics, and Google may set its advertising measurement cookies, whose names begin with _gcl_, on the device; Google states that each lasts 90 days. On “Statistics only” or “No” the click identifier is dropped and no such cookie is set, and choosing either later deletes any that were set. Ad personalisation stays denied: no visitor is added to an advertising audience or shown GRIDIGMA’s advertisements again because of a visit (no remarketing), and Google processes this data under restricted data processing, as GRIDIGMA’s service provider. GRIDIGMA itself shows no advertisements. If the visitor’s browser sends a Global Privacy Control signal, “Allow all” allows statistics only: advertising storage and ad user data stay denied for as long as the browser sends it. A visitor can stop the advertising measurement at any time in Settings → Privacy, by choosing “Statistics only” or “No”. Fabervant never sells or shares a user’s email address or personal data with other companies for their marketing. A later refusal in Settings stops the measurement and deletes these cookies at once; signing out deletes them too. This processing rests on the visitor’s explicit consent (açık rıza, KVKK Art. 5(1)). The data is transferred to Google in the United States; no ground under KVKK Art. 9 is claimed for this transfer until the standard contract with Google under Türkiye’s rules is signed. Google Analytics keeps this data for 14 months after the visitor’s last visit, and Google does not use it for its own purposes beyond providing the service; data sharing with Google is switched off. Google Analytics 4 does not log or store IP addresses; the address reaches Google with each request and is used to derive the country.

When anyone opens GRIDIGMA on the web, whether or not they have answered the statistics question, the page tells our server only the day, the language, which of our main pages it landed on, how long the page stayed open (in bands such as 10 to 30 seconds), how far the visit went (saw the welcome message, opened the warm-up puzzle and whether it solved or left it, opened the tutorial, made a first mark, how far into the tutorial it got, chose a nickname, opened a puzzle, and whether from the library, finished one, saw the free-trial offer, saw the subscription page, created an account, opened checkout, started a free trial, subscribed) and whether it came through one of our ads (with the campaign’s tags: source, medium, campaign name and, when the link carries it, which of our keywords the ad was shown for — a word we chose, not what you typed in the search — or that it came through a Google ad). Your country is worked out from your IP address by Cloudflare, the network that delivers our pages; our server receives only the country, never the address, and the country is added to the totals. These are added to totals without any identifier and never stored with your IP address or device. For visitors in countries where the game is not offered, and where the country cannot be told, only the day, the country and whether a puzzle was opened or finished are added to the totals. In the same way, each time the statistics question is shown on the web, answered (“Allow all”, “Statistics only” or “No”) or closed without an answer, one is added to a total, together with how long after the page opened it happened (in bands such as 10 to 30 seconds) and whether the visit came through one of our ads (yes or no only, never the campaign’s tags); this is counted without waiting for any answer and holds no identifier, cookie, device or network address.

The GRIDIGMA iPhone and iPad applications contain no Google Analytics. The tag is not built into them and cannot load within them. The GRIDIGMA Android application uses Google Analytics for Firebase, only once the user agrees to share play statistics (the same question and the same three answers as on the website), to measure which screens are viewed and the same game events as on the website, with no name, email address or account number: until the user agrees, and after a refusal, nothing is sent to Google, the Android advertising ID is never read, and a later refusal in Settings, or signing out, stops the measurement and makes the device a stranger to it; while measurement is on, Google Analytics for Firebase gives the app a device-scoped app-instance ID (never the advertising ID), which is reset when the measurement stops; the data is transferred to Google, which is in the United States, and is kept for 14 months after the last use, as stated above for the website. Apart from that, gameplay measurement in the applications is limited to the first-party data described above, held on the Fabervant server. Crash and performance diagnostics go to Sentry, a processor hosting them in the European Union, with no identity attached and no use for tracking.

Measurement by Google on the website may be prevented by Google’s opt-out browser add-on or by any standard tracker blocker. Where play statistics are shared, first-party measurement continues in either case.

Support and server records

Support. A message sent through the in-game support form, together with any screenshot attached, the platform, application version and language, the puzzle open at the time and whether the user was signed in, and for a user without an account any email address given for a reply, is held by Fabervant’s support service so that it can be answered. A signed-in user’s messages are linked to the account by a code derived from the account number that cannot be reversed; the account’s email address is not sent. Ulak tells Fabervant through Telegram that a new message or crash report has arrived; the notice carries only the game’s name, the platform and a link that only Fabervant can open, never the message text. To draft a reply, Fabervant may use an AI assistant, Claude by Anthropic, which then reads the message; a person approves every reply.

Server records. Each request to the GRIDIGMA website and server is logged, to operate and secure the service, with the requesting IP address and any forwarded-for address, the time, the request method and the path requested without its query string, the response status and size, the referring page without its query string, and the browser’s user-agent string.

Hosting records. Records Turkish law requires of a hosting provider (Law No. 5651): when you create an account or set or change your nickname, your network address, the time, the action and the nickname. Kept 1 year (a backup copy may hold a record up to about two weeks longer), used only to answer lawful requests from the authorities.

Processors and other recipients

Fabervant uses a limited number of service providers, each for a single purpose. Those acting as processors are bound to use the data they receive only to provide that service. Apple and Google as sellers in their stores and Paddle as merchant of record receive payment data as independent recipients and process it under their own privacy policies. The push services of the browser makers, which the visitor's browser chooses, carry browser notifications under their makers' own terms.

• OpenAI — on selection of a nickname, the nickname text alone is transmitted for assessment against Fabervant’s rules on offensive names. No other data is transmitted. Fabervant keeps no record of the assessment; OpenAI’s retention is governed by its API terms.
• Apple and Google — confirm identity where Apple or Google sign-in is used, and process payment where a subscription is taken through their stores. On the GRIDIGMA website, Google is contacted for sign-in only when “Continue with Google”, or Connect beside Google on the Profile, is pressed, and Apple’s sign-in script is loaded from Apple’s servers only when “Continue with Apple”, or Connect beside Apple on the Profile, is pressed; no page loads a sign-in script of either beforehand. At that moment Google or Apple receives the IP address and browser details of the visit.
• RevenueCat — administers subscriptions bought on the App Store and Google Play and, through Paddle, on the web. It receives the player identifier and purchase and renewal status.
• Zoho Mail — transmits account creation, verification, password reset, account deletion and email change messages, including the notice sent when an address that already has an account is entered to create another, and the notice sent when Google or Apple sign-in is added to an account, and the subscription messages: the reminder before a free trial's first charge, the warning before a renewal is stopped, the notice that it was stopped, a price change and a second subscription. It receives the email address and the message.
• Cloudflare — sits in front of the Fabervant server and carries every request to it, as a network provider does. It also hosts fabervant.com, from which the website and the applications fetch the game’s Fabervant Home Index score; that request carries the connection’s IP address, the browser’s user-agent string and the address of the site it is sent from, with no cookie or identifier, and Fabervant keeps no record of it.
• Firebase Cloud Messaging, the Apple Push Notification service and the browsers’ push services — deliver notifications enabled in the application or in a browser. They receive a device token and no identifying data. A browser notification is carried by the push service of the browser’s maker (Google for Chrome, Mozilla for Firefox, Apple for Safari, Microsoft for Edge); it is encrypted for that one browser, so the service sees the delivery address, the size and time of the message and the server that sent it, not its text. Sending a browser notification is a transfer of personal data abroad under KVKK Article 9; no ground under KVKK Art. 9 is claimed for the transfers to Mozilla and Microsoft, and a player who does not want them can leave browser notifications off.
• Ulak — Fabervant’s support service. It holds messages sent through the in-game support form, with the screenshot and details listed under Support, and any email address given for a reply, so that they can be answered. Ulak runs on Cloudflare and keeps the messages in a Cloudflare database located in Western Europe.
• Telegram — carries Ulak’s notice of each new support message to Fabervant, outside Türkiye. The notice holds only the game’s name, the platform, whether it is a message or a crash report, and a link to it; not the message text.
• Anthropic — provides Claude, the AI assistant Fabervant may use to draft a reply to a support message, in the United States. Claude then reads the message; a person approves every reply.
• Sentry — receives crash reports and, for every page load and a small sample of other actions, loading-time measurements, from the website and the applications, with the page address, the technical name of the page element clicked or measured, the application version and the browser and device type, on servers in the European Union. The reports reach Sentry from our own server, so Sentry never sees the user’s IP address, and they carry nothing that identifies a person: no account identifier, email address, nickname, sign-in token or text the user typed.

Excluded practices

• No advertising. GRIDIGMA is permanently ad-free.
• No advertising SDKs and no advertisements inside GRIDIGMA; no personal data is sold or shared with other companies for their marketing.
• No sale or rental of personal data.
• No tracking across the applications or websites of other undertakings, except that on the website a visitor who chooses “Allow all” lets Google measure whether the visit came from one of GRIDIGMA’s own advertisements on another site, as described above; no remarketing and no disclosure to data brokers.

Payment data

A subscription bought on this website is processed by Paddle (Paddle.com Market Limited, or Paddle.com Inc. for buyers in the United States and Paddle.com (Canada) Ltd. for buyers in Canada) as payment provider and merchant of record. Paddle handles payment details directly; Fabervant does not receive or store card information. Paddle’s own privacy policy governs its processing of payment data. For a buyer in Türkiye, Paddle.com Market Limited (London) receives the purchase data (name, e-mail, billing country, payment details) as the seller; Fabervant passes the buyer’s e-mail address and subscription identifier to the checkout. This is a transfer of personal data abroad under KVKK Article 9; no ground under KVKK Art. 9 is claimed for it until the standard contract with Paddle under Türkiye’s rules is signed.

Whichever way a subscription is bought, RevenueCat passes Fabervant the amount, currency and transaction number of each payment and refund, as described below.

To show the right payment provider and prices in your currency, and to choose the language the page first opens in (Turkish for visitors in Türkiye, until you choose a language), the game uses the country that Cloudflare derives from your connection; it is not stored.

A subscription bought within the GRIDIGMA iPhone, iPad or Android application is billed by Apple or Google under their own terms, and payment details are not disclosed to Fabervant. Fabervant receives the fact that a subscription is active, its renewal date, and the amount, currency and transaction number of each payment and refund, which it uses to show the renewal price and the total paid in the Profile and to refund a second subscription.

Legal bases

Processing is carried out on the following bases under Türkiye’s KVKK: performance of the contract with the user, and steps taken at the user’s request before entering into it (creating and operating the account, providing the puzzles covered by the subscription, maintaining posted leaderboard times, sending the notifications the user switches on, stopping a subscription from renewing after 90 days without play and sending the emails about it, announcing a price change, and sending mail, notifications and daily content in the language in which the game is played); legitimate interests, provided the user’s fundamental rights and freedoms are not harmed (maintaining the service, preventing cheating and abuse, counting how many players use each language, measuring, in totals that name no one, how many players with a nickname or an account play again a day and a week after their first play, worked out from the solves and progress already kept for the leaderboards and the account, with no new record made for it, and protecting accounts, including telling an account holder that someone tried to create an account with their address); consent (under KVKK, explicit consent, açık rıza), for play statistics and Google Analytics on the website; measuring and improving our own advertising on other sites, on the visitor’s explicit consent (“Allow all”); and legal obligation, where accounting or tax law requires a payment record to be retained.

To keep the records Law No. 5651 requires: on the basis of our legal obligation (KVKK Art. 5(2)(ç)).

Retention

The account and the data linked to it are retained while the account exists. On deletion of the account the data is removed immediately, except the records listed below; the Account Deletion page sets out the scope of deletion.

Records required to be retained by law, such as a payment record retained for accounting and tax purposes, are kept for the period the law requires and do not form part of the account. Hosting records (Law No. 5651): 1 year. The record of a renewal warning or stop is deleted one year after the renewal it concerns, or with the account. The record of each subscription payment and refund is kept while the account exists and deleted with it. Support messages, with their replies and screenshots, are deleted 90 days after the last activity on them (their arrival, a reply or a change of status), and a signed-in user’s messages are deleted when the account is deleted. The records of the single-use links we send by email (to verify an address, reset a password, change an email address, delete an account, report that a change was not made by the user, or keep a subscription), with any email address they hold, are deleted 30 days after the link expires, or with the account if that comes first. Play statistics, including the play log kept with each solve, are deleted 25 months after they reach the server. When you withdraw your consent, nothing more is sent and what was sent before is deleted within the hour. A record of the statistics answer (the answer, its time and the version of the question) is kept with the statistics it covers and deleted with them. If you are signed in, your answer is kept with your account and applies on every device where you sign in; a change on one device applies on the others when they next connect. Solve times and progress recorded against a device that never signs in are kept for as long as the leaderboards they appear on, and are deleted when erasure is requested from that device. The language in which the game is played is held as a single value: it is replaced whenever the language is changed, earlier choices are not kept, and it is deleted with the account or, for a device that never signs in, with that device's record. The record made when an email address is entered to create an account, holding the chosen password in hashed form, the accepted terms version and the language of the message, is used only to create the account from the link mailed to that address and to limit the number of messages sent to that address; the link works for 24 hours, and the record is deleted within 48 hours of being made, whether or not the account was created. Where the address already belongs to an account, or cannot be used for a new one, the record holds the address but no password, is used only to limit the messages sent to that address, and is deleted in the same way; an address that already belongs to an account is sent, within the same limit, a message saying so instead of the link.

If the user makes a purchase, Fabervant keeps a record that the user confirmed being 18 or older (the time, the terms version and the transaction number) for 3 years from the purchase, also after the account is deleted. The record holds no name or email address and is deleted when the 3 years end.

If the confirmation does not reach Fabervant at checkout, Fabervant keeps a record of the open question (the subscription and transaction numbers, the purchase time, the user's answer, and the cancellation and refund state). The record is deleted with the account; otherwise it is kept for 3 years from the purchase. If a refund is still owed when the account is deleted, the record is kept without any link to the account until the refund has been requested from the payment provider, and then deleted; a case Fabervant settles by hand is kept no longer than 3 years from the purchase.

Data subject rights

The user may request a copy of the personal data held, its correction, its erasure, restriction of or objection to its processing, or its transmission in a portable form. Under KVKK Art. 11 the user may also ask whether personal data is processed, request information about the processing, learn its purpose and whether data is used accordingly, know which third parties in Türkiye or abroad it was transferred to, ask that a correction or erasure be notified to them, object to a result against the user arising solely from automated analysis, and claim compensation for loss from unlawful processing. A consent may be withdrawn at any time, play statistics under Settings > Privacy; notifications may be disabled in the application, in the browser’s site settings or in device settings, and deletion of the account withdraws all consents.

You can download a copy of the data the game keeps on your account and devices, in one file, from Profile → Account → Download my data. The file leaves out your password and the keys that keep a device signed in, the addresses and keys notifications are delivered with, the hosting records described above, and your messages to our support service; we send you a copy of those messages within 30 days when you ask at gridigma@fabervant.com.

Requests are sent to gridigma@fabervant.com and are answered within 30 days. A user who has first applied to Fabervant and whose application is refused, who finds the answer insufficient, or who receives no answer within 30 days may complain to Türkiye’s Personal Data Protection Board (Kişisel Verileri Koruma Kurulu) within 30 days of learning the answer, and in any case within 60 days of the application (KVKK Art. 14). The user may also complain to the data-protection authority of the country where they live.

Children

GRIDIGMA is not directed at children. Use requires a minimum age of 13, and purchases are for users aged 18 or older. Fabervant does not knowingly collect personal data from a child under 13. Where a child under 13 is believed to have supplied personal data, notification to the address above will result in its removal.

Location of processing

The Fabervant server runs in Turin, Italy, within the European Economic Area; accounts, solve history and leaderboard times are held there. The email provider transmits through its European data centre. Personal data is transferred outside Türkiye to the processors and recipients listed above, including within the European Economic Area. Certain of them — including OpenAI, RevenueCat, Paddle, Google, Apple, Mozilla, Microsoft and Cloudflare — also process data outside the European Economic Area; for users in the EEA, such transfers rely on an adequacy decision (including the EU-US Data Privacy Framework where the provider is certified) or on the European Commission’s standard contractual clauses. A copy of the safeguards can be requested at the address below. Telegram carries Ulak’s notices of new support messages outside Türkiye, and Anthropic’s Claude may read a support message in the United States.

Changes to this policy

This page is updated as the game changes, and the date at the head of the page states when it was last changed. Where a change is material — a new category of data or a new purpose — notice is given in the application.

Contact

Privacy enquiries, requests and complaints: gridigma@fabervant.com. Fabervant, Cevizli Mahallesi, Zuhal Caddesi, Ritim İstanbul A Ticari Blok, No: 46, İç Kapı No: 50, Maltepe, İstanbul, Türkiye. Phone: +90 533 165 82 68. KEP: fabervantteknoloji@hs01.kep.tr. MERSİS No 0384101861600001; tax number 3841018616 (Kartal Tax Office); Istanbul Trade Registry No 1156552.