Privacy policy
Data controller
The controller is SATOR AREPO TENET OPERA ROTAS, S.L., Spanish tax number B42905414, at Calle Real Alta, 9, Cardeña, Córdoba, España. Send privacy enquiries and rights requests to admin@sudokuilove.com or that postal address. This policy describes the service version dated 20 October 2026.
Account and game data
To create an account we process your email, public alias, language, a cryptographic password hash, and a record of terms acceptance and your age declaration. We store game progress you synchronise, competitive attempts, times and points. These uses provide the requested account service under Article 6(1)(b) GDPR. Your email is used for verification, account recovery and service communications; registration does not subscribe you to advertising or a newsletter.
Public and private information
Your alias, accepted points and times are visible on leaderboards. Approved forum topics and messages show the alias and their content. Your email and password are not published. Choose an alias that does not identify you, and avoid including your own or anyone else’s personal information in messages. Content reports and review information are available to administrators, rather than other forum members.
Moderation, security and enquiries
We process messages, reports and moderation actions to maintain a safe community. Service protection uses technical identifiers and request counters; application counters use an identifier calculated with a secret key, rather than storing the plain IP address in the counter. The hosting provider may record IP addresses, timestamps, URLs and browser details in technical logs. Our basis is the legitimate interest in preventing abuse and handling communications under Article 6(1)(f) GDPR. Legal obligations and rights requests are handled under Article 6(1)(c). We do not sell your data or create advertising profiles in this version.
Retention and deletion
Account data, progress and results remain while you keep the account. Account deletion removes credentials, progress, results and associated topics, messages and reports from the active database. You may request review of other personal information you have published. Verification links expire after 24 hours and recovery links after one hour; they are single-use and invalidated when used or replaced. Recovery confirms email ownership, changes the password and invalidates other sessions and account links. Request-time security cleanup removes counters whose control window ended more than 24 hours earlier. Our database recovery snapshots are scheduled daily, stored outside the public web directory and retained for 30 days. Hosting logs and additional provider backups follow the provider’s retention settings and safeguards; restricted information may be retained when a legal obligation or an outstanding claim justifies it.
Providers and transfers
Domain hosting and email use the services contracted with Hostinger. The provider and its subprocessors may handle information needed to deliver those services. Its infrastructure may involve processing outside the European Economic Area, subject to the applicable safeguards described in its data processing agreement, including standard contractual clauses where appropriate. Information may be disclosed to authorities when legally required. No third-party advertising or analytics is active in this version; introducing either requires updated information and consent where applicable.
Your rights
You may request access, correction, erasure, restriction and portability where applicable, and object on grounds relating to your situation to processing based on legitimate interests. Where consent is required, you may withdraw it without affecting earlier lawful processing. Contact admin@sudokuilove.com or the controller’s postal address with your request; we will ask for proportionate identity checks only when necessary. We generally respond within one month, notifying you of any permitted extension. You may complain to the Spanish Data Protection Agency at aepd.es or to the competent authority where you live.
Age and policy changes
Independent registration is intended for people aged 14 or above who can accept these terms under the rules applying to them. If your law requires a higher age or a legal representative’s involvement, you must meet that requirement. We do not offer independent registration for children under 14; they may use the game without an account under supervision. Contact the controller if you identify an account that does not meet these requirements. We will update this policy when data uses change; browsing does not provide consent to new processing.