DOODLE5

Legal

Privacy Notice

We collect only what we need to run DOODLE5 and keep it safe. This notice explains what data we hold, why we hold it, and how you can control it. Last updated: March 2026.

What we collect

  • Account data: email address, username, hashed password (via Supabase Auth), and authentication tokens.
  • Gameplay data: puzzle guesses, scores, hints used, solve times, streaks, and achievements.
  • Technical data: IP address, browser type, and approximate location for security and anti-fraud purposes.
  • Payment data: purchase records (product, amount, timestamp). We do not store card details — payments are processed by Stripe and governed by the Stripe Privacy Policy.
  • Support data: messages you send to support email addresses and any attachments you include.
  • Cookie and preference data: your cookie consent choices, selected theme and background, and starred stats — see our Cookie Policy.

How we use your data

  • Operate your account, track scores and achievements, and display leaderboards.
  • Process and fulfil store purchases and unlock associated account benefits.
  • Detect cheating, prevent abuse, enforce our House Rules, and keep the platform secure.
  • Respond to support requests and resolve billing disputes.
  • Send service-related emails (purchase receipts, policy updates). Marketing emails are opt-in only.

Third-party advertising (Google AdSense)

DOODLE5 uses Google AdSense to display advertisements. Google and its partners may use cookies — including the DoubleClick cookie — to serve ads based on your prior visits to this site and other sites on the internet. You can opt out of personalised advertising at any time by visiting Google Ad Settings or aboutads.info. Google's use of advertising cookies is governed by the Google Privacy Policy. We only activate advertising cookies after you provide explicit consent in our cookie preferences panel.

Data sharing and storage

We use the following trusted vendors: Supabase (database and authentication), Stripe (payments), and Google (advertising). Data is stored in regions where DOODLE5 operates and may be transferred internationally to provide the service. We do not sell your personal information to third parties.

Data retention

We retain account data for as long as your account is active. If you delete your account, we remove your personal data within 30 days, except where we are required by law to retain records (e.g. payment records for tax compliance, typically 7 years).

Your rights

  • Update your username and profile in Account Settings.
  • Request a copy of your data or ask us to delete your account by emailing privacy@doodle5.com.
  • Opt out of marketing emails at any time via the unsubscribe link in any email we send.
  • Manage advertising and analytics cookie preferences via the Cookie Preferences panel (bottom of every page).
  • EU/UK/EEA residents have additional rights under GDPR including the right to object to processing and to lodge a complaint with your local data protection authority.
  • California residents have rights under the CCPA including the right to know, delete, and opt out of sale (we do not sell personal data).

Contact

For privacy questions, data requests, or GDPR/CCPA inquiries, email privacy@doodle5.com. We aim to respond within 30 days.