Privacy Policy

Sound Sleuth respects your privacy. This policy explains what data we collect, how we use it, and your rights.

• Account data: Email, username, display name, avatar URL, and OAuth profile info (if you sign in with Google).
• Gameplay data: Scores, streaks, puzzles solved, clues used, session times, leaderboard entries, and challenge match results.
• Friendship data: Friend requests sent/received, squad membership, and challenge invitations between users.
• Purchase data: Stripe session IDs, pack IDs purchased, and purchase timestamps. We do NOT store full card numbers — Stripe handles payment details.
• Device data: Browser type, IP address (for rate limiting and security), and anonymous crash logs.
• Daily streak data: Puzzle dates played, win/loss outcomes, and consecutive win tracking for leaderboard integrity.

• To run the game, track progress across sessions, and display leaderboards.
• To enable multiplayer challenges, friend requests, and squad features.
• To process purchases and unlock expansion packs via Stripe.
• To prevent fraud, abuse, and cheating in daily streaks and leaderboards.
• To send important service emails (rarely — we do not send marketing spam).

When you use the My Squad feature:

• Your username and display name are visible to players you connect with.
• Challenge results are shared with challenge participants only.
• Friend requests require mutual acceptance — no one can see your full profile without your approval.
• You can remove friends and leave challenge sessions at any time.

We use:

• Supabase auth cookies to keep you logged in securely.
• localStorage to remember seen puzzles, preferences, guest progress, and bonus unlock state.
• Stripe cookies only during checkout for fraud prevention.

• Supabase — hosts our database, authentication, and real-time features.
• Stripe — processes payments securely. We never see your full card details.
• Google — if you choose Sign In with Google, OAuth data is shared per Google’s privacy terms.
• Vercel — hosts our frontend and API routes.

We do not sell your data to advertisers or data brokers.

We keep your data for as long as your account is active. If you delete your account:

• Profile, gameplay data, and friendships are permanently deleted within 30 days.
• Anonymous challenge match records may be retained as aggregate statistics with no personal identifiers.
• Purchase records are retained for 7 years for tax and legal compliance.

7. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate account information.
• Request deletion of your account and data.
• Export your gameplay history.
• Opt out of any future marketing communications (we currently send none).

To exercise these rights, email us at the address below. We respond within 30 days.

Privacy questions or data requests: privacy@soundsleuthgame.com