Privacy policy

Effective date: [DATE] · Applies to the web game at playpuffi.com

Draft. This text describes how the current version of the game works, including the optional grown-up Google sign-in. It has not been reviewed by a lawyer. Have it checked before launch, especially for COPPA (US), GDPR-K / UK Age Appropriate Design Code and KVKK (Türkiye), and update it before adding any server, analytics, purchases or ads.

The short version

Puffi does not collect personal information from children. The game works in your browser and saves progress on your own device. Nothing is sent to us unless a grown-up chooses to sign in to keep progress safe in the cloud.

What is stored, and where

The game saves the following in your browser's local storage, under the key puffi.save.v1:

which chapters are finished, mementos found and kittens rescued (with their made-up names);
best scores in Endless mode;
the sound setting;
simple play counters (for example, how many times a chapter was started), used only inside the game;
a random identifier created on the device, which is not linked to any person and never leaves the device.

The game may also store its own files in the browser cache so it can be played offline.

Optional grown-up sign-in (cloud save)

Behind a parent gate ("For grown-ups" on the title screen), a parent or guardian can sign in with Google to back up the game and continue on another device. If you do:

Google tells us a unique account number for your Google account. We store only a one-way scrambled version (SHA-256 hash) of it, so we cannot see or reverse it.
We store the game save (chapters finished, Mementos, rescued kittens and their made-up names, best scores, play counters).
We store a sign-in session so you stay signed in. On your device it is kept in local storage; on our side only a scrambled copy is kept. Sessions expire after one year.
Google may also send your name, email address and profile picture. We do not store them.
When you sign in, a script from Google (accounts.google.com) loads on that panel only, and Google's own privacy policy applies to the sign-in.

Deleting: in "For grown-ups", choose Delete cloud data. This removes the account, sessions and cloud save from our database right away. Progress on the device stays until you clear it.

We also count a few anonymous totals (for example, how many sign-ins happened per day). These counts contain no account or device information.

What we do not do

We do not ask children for names, emails, photos, location or any other personal information, and we do not keep the name, email or photo of grown-ups who sign in.
We do not use cookies, advertising, tracking pixels or third-party analytics.
We do not sell or share data with anyone.
The game has no chat and no way to contact other players.

Sharing a comic

After a run, the game can make a comic picture. Copying or saving it happens on your device. Nothing is uploaded unless you choose to share it yourself through another app.

Hosting

The website, the game server and its database are run on Cloudflare, which, like any web server, may process technical information such as IP addresses in its server logs to deliver and protect the site. See that provider's privacy statement. We do not access these logs for tracking.

Deleting your data

On the device: clear this site's data in your browser settings. In the cloud (only if a grown-up signed in): use Delete cloud data, or email us and we will delete it.

Changes

If a future version adds anything that changes this (such as accounts or online features), we will update this page before that version goes live, and ask for parental consent where the law requires it.

Contact

[Owner name / company], [address]. Email: [email protected]