The entity responsible for processing personal data under this policy is the team that operates the Sudokum.net platform. To contact the data controller, use the Contact page on the site.
The data needed to run Sudokum.net falls into two categories: technical data and data provided by the user.
A) Technical data collected automatically
B) Data provided voluntarily by the user
IP addresses and browser data are used for server security and troubleshooting. Game statistics — time, score, error count — are processed solely to power the leaderboard and competitive system. Language and theme preferences are saved in your browser so your settings are waiting for you when you return.
If you contact us via the form, your name and email are held only to respond to your query. There is no other use of that data.
Providing the core game service and running the ranking system falls under Article 6(1)(b) of the GDPR (performance of a contract). Server security and fraud detection are processed under Article 6(1)(f) (legitimate interests) — no separate consent is needed for these. The contact form and any optional data processing are based on your explicit consent under Article 6(1)(a).
We use three categories of cookies, two of which are not required:
You can delete or disable cookies at any time through your browser settings. Disabling essential cookies may affect how some parts of the site work.
Your data is never sold or shared with third parties for commercial purposes. Sharing may only occur in three situations:
- Infrastructure providers: technical services that host and run the site — with only the minimum data necessary to deliver the service
- Legal obligation: in response to a lawful request from a competent authority or a court order
- Security threat: when fraud, a cyberattack, or criminal activity is detected, with the relevant authorities
This section summarizes the additional privacy disclosures that become relevant if Sudokum.Net enables Google advertising on eligible, non-child-directed pages.
Google advertising and browser identifiers
- If advertising is enabled on eligible pages, Google and its partners may use cookies, web beacons, IP addresses, and similar identifiers to measure ad delivery, limit repetition, and support personalized or contextual ads where allowed.
- Optional advertising technology remains off until Sudokum.Net is connected to a valid AdSense publisher account, publishes a matching ads.txt entry, and enables certified consent messaging where required.
- Child-directed experiences, including the kids section, are excluded from AdSense loading by default.
Consent choices and regulated regions
- For traffic in the EEA, the United Kingdom, and Switzerland, advertising should run only through a Google-certified consent management platform integrated with the IAB TCF where required.
- Sudokum.Net's local cookie banner manages site-storage preferences only. It does not replace the Google-certified consent flow required for ads in regulated regions.
- If monetization is ever enabled on child-directed inventory, the configuration must remain aligned with child-privacy rules and any required restrictions on personalized advertising.
Once the retention period ends, data is permanently deleted or irreversibly anonymised.
No personal data is collected from children who play in the Kids section. Entering a player name is not required, and the competitive mode and leaderboard are managed separately in that area.
If a parent or guardian believes a child's data has been processed in any way, they can submit a deletion request.
All site traffic is transmitted over an encrypted connection. Access to server databases is restricted to authorised staff. A firewall actively guards against brute-force and large-scale attacks; security vulnerabilities are audited on a regular basis.
We don't hold data we don't need — less data means less risk. That's why retention periods are kept deliberately short.
This policy may change from time to time. Whenever there is a meaningful update, the Last updated date at the top of the page will change; for significant changes, an information banner may appear on the homepage.
Continuing to use the site after an update constitutes acceptance of the revised policy.
For any question or request relating to this privacy policy, your personal data, or your rights, use the contact form.
To help us respond quickly, include in your request: what you'd like (access, deletion, or correction), your player name if you have one, and your preferred way for us to reply. All privacy requests receive a response within a maximum of thirty days.