Codigrid — Privacy Policy

Last updated: 5 September 2026

Codigrid is a logic colouring game. This page describes exactly what the app and the site do with your data — no more and no less than what is actually in the code.

1. Data controller

Vincent Rolland
Contact: tidou44@gmail.com

2. What stays on your device

• your settings: sound, vibration, animations, compass, cell colour, cell marker, theme, language, and the notifications switch;
• your progress: the list of cells you have filled, puzzle by puzzle, and the rating you gave a sheet you finished;
• the save id described in section 3, and the nickname that goes with it;
• a few counters the app keeps for itself: when it last offered you the Play Store rating card, and whether the three opening tips have been seen.

Settings are never sent anywhere: a preference belongs to the device it was set on. Somebody who silences the game on a phone in a waiting room has said nothing about the tablet at home.

3. What is sent, and in these five cases only

a. The cloud save. On your first save, the server creates an anonymous account: a random id, without asking you anything. That id is kept by your device and is the key used to find your games again. The account itself holds a nickname (a guest number until you change it), the date it was created, the date the app last opened, and your ranking choice from point b — nothing else. Recorded per puzzle: the list of filled cells, a percentage, a “finished” flag and the date it was finished, the rating you gave it, a fingerprint of the grid and a last-updated date. Packs you have unlocked are recorded the same way.

b. The weekly league. While it is on, your nickname and the number of puzzles you have finished since Monday are visible to the other players who have also left it on. Nothing else is shown — not your sheets, not your ratings, not a date. It is on by default and it is a switch: Settings → “Show up in the ranking”. Since a nickname is what other players read, pick one you are happy to be seen under rather than your own name; you can change it at any time in the same place.

c. Notifications, in the Android app only. Off by default. Turning them on asks for the system permission, then registers a device token with Google Firebase Cloud Messaging, which is what delivers the notification to your phone. That token designates the device, not you. Switching Settings → Notifications back off removes it from our server.

d. Advertising, in the Android app only. A banner, an occasional full-screen ad, and a rewarded ad you may choose to watch to unlock a pack — all served by Google AdMob, which uses the device's advertising id. In the European Economic Area, the United Kingdom and Switzerland, your consent is asked at first launch by Google's own form, and you can return to that choice at any time via Settings → Ad choices. The web version of the game shows no advertising at all.

e. Crash reports. When the game hits an error it cannot recover from, it sends the technical description of that error: the message, the file and line it came from, the call stack, the app version, and whether the crash happened while starting up or while playing. The host also records the device identification your browser already sends with every request (the user agent), which is what answers “does this only break on one kind of phone?”. There is no account id, no nickname, no progress and nothing you have typed: a crash report is not attached to a player, and nothing in it can be traced back to one. At most five per session, and never twice the same one, so a repeating error cannot flood anything. These reports go to the host's logs, never to the database.

4. What does not exist

• no analytics, no third-party tracker, no measurement pixel — nothing measures what you do in the game. The one thing ever sent about how the app behaves is the crash report of point 3e, which describes a failure and not a use;
• no name, e-mail address or password — the account is a random id and a nickname;
• no location, and no access to your contacts, microphone, camera or photo gallery;
• no resale and no commercial sharing of data;
• no profiling beyond the advertising described above.

5. Legal bases (GDPR)

• Performance of the service you ask for: saving your progress so it survives a cleared cache or a reinstall, and remembering the packs you have unlocked;
• Consent: personalised advertising, collected by Google's form and revocable at any time, and notifications, which are off until you turn them on;
• Legitimate interest: the weekly league, which shows a nickname you chose and nothing more, and which a switch turns off; and the running and security of the service (the host's technical logs, and the crash reports of point 3e — an app that fails without anyone knowing cannot be repaired).

6. Hosting and processors

• Cloudflare hosts the site, the API and the database. Like any host, it processes the technical data of each request (including the IP address) to serve the pages and protect the service;
• Google: AdMob for the advertising in the Android app and for collecting consent, and Firebase Cloud Messaging for delivering notifications. See Google's privacy policy.

These providers may process data outside the European Union, under the safeguards the GDPR provides for (standard contractual clauses).

7. How long it is kept

Your progress is kept for as long as you use it, and until you delete it (point 8). “Start over” on a puzzle deletes that puzzle's save immediately, on the device and on the server. A notification token leaves the server as soon as you switch notifications off, and is dropped anyway the first time a send finds it dead. A crash report is kept only as long as the host keeps its logs — a few days — and is never copied into the database.

8. Deleting your data

This is the only possible route, and that is worth explaining: the account holds no name, no e-mail address and no device identifier. The device holding the token is therefore the only thing in the world able to point at the row to erase. A request by e-mail could not be honoured — we would have no way of knowing which data it concerns, nor of checking that it is yours. If you uninstall the app without using that button, the token goes with it: what remains in the database is no longer attachable to anyone.

“Start over” on a puzzle erases the save for that puzzle only.

9. Your other rights

You have rights of access, rectification, objection and portability. Write to tidou44@gmail.com. You may also lodge a complaint with the CNIL, the French data protection authority.

10. Children

Codigrid is not intended for children under 13 and is not directed at them.

11. Changes

Any change to this page is published here, with its date. Significant changes are flagged in the app.