Summary
Sudoku byBnD has no account or login and does not ask for your name or email address. Your progress is saved only on your device; we have no game server.
The game is free and shows Google AdMob ads, full screen, only after a win and never during a game. The ads are not personalised: we do not use what you do in other apps or websites to choose what to show, and the game does not ask for permission to track you. In the European Economic Area, the United Kingdom and Switzerland, the game shows Google's consent message before requesting any ad. If you accept, you'll see non-personalised ads. If you decline, you may still see limited ads, which Google delivers without personalisation and without an identifier stored on your device, using technical data such as your IP address to deliver the ad and prevent fraud. Until you answer, the game shows no ads. Either way, the whole game works.
We measure use of the game with Google Analytics for Firebase only if you allow it, in any country. These statistics also reach AdMob, Google's ad service, to measure and improve ad revenue, never to personalise ads. A one-time purchase, processed by Apple or Google, removes all ads. We do not sell your personal data or share it for targeted advertising.
Scope and who is responsible
This policy covers the Sudoku byBnD game in its version with ads, usage measurement with consent and a purchase to remove ads, as well as the games.bybnd.com.br website and our support service. It does not automatically apply to other games. Earlier test versions, without ads or purchases, had different practices.
BYBND INFORMÁTICA LTDA, CNPJ 32.574.894/0001-10, at Alameda dos Maracatins, 1435 - Conjunto 307 - Indianópolis, São Paulo - SP, 04089-015, Brazil, publishes the game and is the controller of the personal data it processes for the purposes described here.
For support and general enquiries, contact contato@bybnd.com.br. Our data protection officer (DPO) is Robson Felippelli Vicente; privacy questions and rights requests can be sent directly to dpo@bybnd.com.br.
This notice complements our corporate privacy policy at https://bybnd.com.br/privacidade (Portuguese; English summary at https://bybnd.com.br/en/privacy). The specific game and portal practices are explained below.
What stays only on your device
The game stores entered numbers, pencil notes, undo history, progress, completed puzzles, active playing time, preferences, language and recent results on your device. This lets you continue a puzzle and see your history and statistics. History contains up to the latest 200 recorded wins outside training mode. We do not receive the content of your puzzles or this history.
The game also keeps on the device a simple record used to limit how often ads appear (for example, when a game ended and when an ad was shown), your privacy choice and the confirmation that ad removal was purchased.
Progress is kept in the app's private storage. The app is configured to exclude these files from operating-system backup and transfer; actual device and restore behaviour can vary. Clearing app data or uninstalling may permanently erase progress. We do not hold a server copy, cannot restore a lost game and cannot access or delete local files remotely. There is no account to close.
Ads (Google AdMob)
Ads are provided by Google AdMob. They appear full screen only after you win a puzzle, never during a game. Players who buy ad removal no longer see ads.
To deliver ads, limit how often they appear, measure results and prevent fraud, Google processes: IP address, which indicates an approximate location (city or region); identifiers limited to the app or the developer; device and system information; interactions with the app and with ads, such as launches, taps and views; and diagnostic and performance data. The game does not use the device's advertising identifier: on Android it does not request that permission; on iOS it does not ask for Apple's tracking permission, without which that identifier is unavailable. We do not ask for access to precise location, contacts, camera or microphone.
The game asks Google only for non-personalised ads, with a content rating suitable for all audiences. In the European Economic Area, the United Kingdom and Switzerland, the game shows Google's consent message before requesting any ad. If you accept, you'll see non-personalised ads. If you decline, you may still see limited ads, which Google delivers without personalisation and without an identifier stored on your device, using technical data such as your IP address to deliver the ad and prevent fraud. Until you answer, the game shows no ads. Either way, the whole game works. The consent message is a standard Google form and may list purposes for personalised ads. Even if you accept all of them, the game asks Google only for non-personalised ads. In other countries that message does not appear and the game shows non-personalised ads. We do not show personalised ads in any country, even to players who accept.
Non-personalised ads use context rather than a profile of your behaviour, but still involve technical data such as IP address. Google explains how it uses data from partner apps at https://business.safety.google/privacy/ and in its privacy policy, https://policies.google.com/privacy. Google's advertising partners are listed in the consent message itself and at https://business.safety.google/adtechproviders/.
Usage measurement (Google Analytics for Firebase)
With your permission, which the game itself asks for in every country, we use Google Analytics for Firebase, by Google, to understand how the game is used and to improve it, and to measure and improve ad revenue. We record events such as tutorial steps; starting, pausing, resuming and finishing a game, with level, difficulty, attempt number and playing time; the opportunity to show an ad after a win; and the steps of the ad-removal purchase (start, confirmation, restore or failure), which may include the product and price, never payment details. Firebase adds technical data: device model, system and app version, language, country or approximate region derived from the IP address, session data and an app-installation identifier created by Firebase.
Measurement uses no login, account, name, email or advertising identifier, does not send the content of your puzzles or each move, and is not combined with your Google account. Our Google Analytics for Firebase project is linked to AdMob: with your permission, Google makes these statistics available to AdMob to show usage and revenue metrics and to improve monetisation and its own products. Analytics advertising signals are turned off, so these statistics are not used to personalise ads or for remarketing. Until you answer, or if you decline, nothing is sent or stored for later sending, not even to AdMob. If you withdraw permission under “Privacy options” inside the game, it stops sending events and erases the measurement identifier from the device. What was already sent to Google Analytics is deleted within the period stated below, or earlier at your request; what AdMob received through the link follows Google's retention periods, and we forward your deletion request to Google (see “Your choices and privacy rights”). Google describes Firebase at https://firebase.google.com/support/privacy.
Purchase to remove ads
Ad removal is a one-time purchase made through the App Store (Apple) or Google Play. Payment is processed by the store under its own terms and privacy policy. We do not receive your card number or other payment details.
The game receives the purchase confirmation from the store to unlock and restore ad removal, and keeps that confirmation on the device. We do not run our own purchase server. The sales reports the stores send us contain transaction data such as order number, date, product, amount and the buyer's country or region; they do not contain a name, email address or card details. We keep those reports for the period required by tax and accounting law. Erasing game progress does not erase the store's purchase record.
Support and information you send
If you contact us, we receive your email address, message and any details or attachments you choose to include, such as the app version, device model, system version or a screenshot. If a store makes feedback you send to us available, the relevant name or handle and message may also be received. We use this information to reply, investigate the issue and handle privacy requests.
Providing information is voluntary, but we may need a reply address and enough context to answer. Send only what is necessary; do not send passwords, keys, payment-card details, identity documents or unrelated sensitive information. We do not use support messages for advertising.
Website and cookies
The website is delivered through Cloudflare. Technical request information, including IP address, browser information, requested page and request time, is processed to deliver pages and protect the service against abuse. Visiting these pages does not upload your saved game.
The website's code adds no advertising trackers or measurement tools and does not set cookies or use browser storage. Cloudflare security features may set technical cookies when those features are needed and enabled.
Purposes and legal grounds
We use data to: make the game work on your device; unlock and restore the purchase you requested; show ads, which keep the game free; measure usage to improve the game and to measure and improve ad revenue; reply to support requests; deliver and protect the website; and meet legal obligations.
The legal grounds, under Brazilian law (LGPD) and, for people in the European Economic Area or the United Kingdom, under the General Data Protection Regulation (GDPR), are these. Usage measurement, including sending statistics to AdMob, relies on your consent, in any country. Non-personalised ads rely on your consent in the European Economic Area, the United Kingdom and Switzerland; limited ads after you decline, and ads in other countries, rely on our legitimate interest in keeping the game free and protecting it against fraud. The consent message and the record of your choice exist to comply with the law. Confirming and restoring the purchase is necessary to deliver what you bought, and tax records of the sale meet a legal obligation. Fraud prevention and the limit on ad frequency serve the legitimate interest of protecting the service and not bothering players. You can withdraw consent at any time under “Privacy options” and can object to processing based on legitimate interest by writing to our DPO. In Europe, you can also object to Google's legitimate interest under “Manage options” in the consent message; in that case, the game shows no ads.
Where a legal basis is required, support relating to a service you requested is handled to provide that service; other enquiries are handled for our legitimate interest in responding. Website delivery and proportionate abuse prevention serve our legitimate interests in operating and protecting the service. Mandatory privacy requests and legally required records are handled to comply with applicable law.
Reading this policy or using the game is not consent to advertising or other optional processing. We do not make automated decisions producing legal or similarly significant effects about you.
Who data is shared with and processing in other countries
These providers process the data described above. In AdMob, Google decides for itself how it uses advertising data and is responsible for that use as an independent controller; the consent message is an AdMob tool. In Google Analytics for Firebase, Google processes data on our behalf, as our processor; when it makes these statistics available to AdMob to improve monetisation and its own products, Google decides that use, as with the rest of AdMob. Apple and Google Play are responsible, as independent controllers, for the download, the store account and the payment. Cloudflare (website delivery) and Google Workspace (support email) provide services to us as processors. Each processes data under its own terms and notices. We share data only with these providers, and each of them is bound, by the terms that govern its service to us and by the data protection laws that apply to it, to protect that data to a standard equal to the one described in this policy and required by the App Store Review Guidelines.
We do not sell your personal data or share it for targeted or cross-context behavioural advertising, as those terms are used in United States state laws. The game asks only for non-personalised ads, and the measurement statistics that reach AdMob are sent with advertising signals turned off, so they are not used to personalise ads or for remarketing. For that reason, we consider that there is no sale or sharing of that kind to opt out of. You can turn measurement off at any time under “Privacy options”, which also stops sending to AdMob. If that changes, we will tell you beforehand and offer the opt-out inside the game.
These providers process data in several countries, mainly the United States. For data from the European Economic Area, the United Kingdom and Switzerland, Google states that it participates in the Data Privacy Framework and uses standard contractual clauses where needed; for data from Brazil, Google's data protection terms include the Brazilian standard contractual clauses. Those terms are at https://business.safety.google/. You can ask us about the destination countries and applicable safeguards. Provider notices do not replace our responsibility for our processing.
How long data is kept
Local game data stays on the device until it is replaced or erased by you. Support information is kept only for the time needed to handle the request, investigate and document its resolution, or meet an applicable legal requirement.
Measurement data tied to your installation stays in Google Analytics for Firebase for 2 months, the shortest period offered, and is then deleted automatically; what AdMob receives through the link is kept for the periods Google sets. Aggregated reports, which do not identify an installation, may be kept longer. Your privacy choice is stored on the device. Data processed by Google for ads and by the stores for purchases follows those providers' periods. Website technical records follow the security purposes, service settings and applicable legal retention duties.
You can ask us about the criteria and retention applicable to your information.
Your choices and privacy rights
You can review your choice about ads and measurement under “Privacy options” inside the game; the change applies to future use. You can also buy ad removal and erase local data by clearing the app's data or uninstalling it.
For information we hold, write to our DPO at dpo@bybnd.com.br; requests received through contato@bybnd.com.br are directed to the appropriate person. Depending on applicable law, you may request confirmation and access, correction, deletion or anonymisation, restriction, objection, portability, information about recipients and withdrawal of consent. We assess requests under the law that applies; some rights have conditions and lawful exceptions.
Because the game has no account, we cannot link your email address to your installation. To locate or delete measurement data, email contato@bybnd.com.br or dpo@bybnd.com.br with the installation identifier the game shows under “Privacy options” when measurement is allowed; with it, we ask Google to delete the records of that installation. Without that identifier we have no way of finding your records, which are in any case deleted from Google Analytics within 2 months. For what AdMob received through the link and for advertising data, Google is the responsible party: we forward your request to Google and explain how to contact Google and the stores. We do not ask for an identity document for this.
We handle requests within the applicable legal deadlines and without a fee where the law requires. You may complain to the competent data-protection authority, including the ANPD in Brazil or the relevant EEA or UK authority where applicable, and seek other available remedies.
Children and young people
Sudoku byBnD is made for a general audience aged 13 and over and is not directed to children under 13. The game has no chat, public profile or account, and does not ask for a name, date of birth or contact details. The game does not ask for your age and does not receive age information from the app store or the device's system, so it treats every player in the same way, whatever their age: ads, when shown, are only non-personalised and limited to content suitable for all audiences, and usage measurement happens only with permission. We do not build an advertising profile of anyone, of any age.
A parent or legal guardian who needs help or wants to raise a privacy concern about a child or young person can contact us. Please avoid sending identifying information about the child that is unnecessary to explain the issue. If we receive unnecessary personal information about a child, we restrict or remove it as appropriate.
Security and changes to this policy
We use safeguards appropriate to the processing, including private app storage, secure website delivery and limiting access to support information. No system can guarantee absolute security. Report a suspected privacy or security problem to dpo@bybnd.com.br or contato@bybnd.com.br without sending credentials or unnecessary personal information.
If we materially change the data processed, the providers or the purposes, we will update this policy and the date above before the change and ask for new permission where the law requires. A policy change does not itself supply consent.