Privacy Policy

The short version: SoulsDoku is free and fully playable without an account — your progress lives in your own browser. If you choose to create one, we store your email address and mirror that progress so it follows you between devices. Community puzzle statistics are collected anonymously, reminders are opt-in, and we use Google Analytics to see how the site is used. No advertising, no selling data.

Last updated: August 8, 2026

1. Who we are

SoulsDoku ("we", "us") is a free, fan-made daily puzzle game available at this website. This policy explains what data is involved when you play, where it lives, and the choices you have. Questions are always welcome via the Contact.

2. Data stored on your device

SoulsDoku keeps your game data in your browser's localStorage. This includes:

• Puzzle progress, guesses, streaks, and statistics
• Preferences such as language, display settings, and game configuration

Signed out, this data stays on your device and does not follow you across devices; clearing your browser's site data erases it permanently. If you sign in, a copy is also mirrored to your account — that is section 4, and the rest of what reaches our servers is described in the sections after it.

3. Accounts

An account is optional — every mode is fully playable signed out, and it exists for one reason: to carry your progress between devices. If you sign up with an email address, we store that address and a password we never see, because authentication is handled by Supabase and only a hashed form of the password is kept. If you sign in with Google or Discord instead, we receive the email address and account identifier those services return, and nothing beyond that basic profile — your password for them is never shared with us.

Accounts live in a database shared by the games in our Doku network, so a single sign-in can work across them, and we record which site an account was created on. We never ask for your name, age, address, or payment details — there is nothing here to pay for.

4. Progress synced to your account

While you are signed in, the game mirrors the data listed in section 2 — completed puzzles, streaks, souls, level, and preferences — to a single row belonging to your account, and merges it back when you sign in on another device. It is gameplay data only: no message content, no contacts, nothing about you beyond how you have played.

Database rules confine every read and write to your own row, so no other player can reach it and no part of the site reads it on someone else's behalf. Signing out clears that browser's local copy.

5. Community puzzle statistics

To power the community statistics shown after a puzzle (for example, "42% of players picked this boss"), the site submits your completed daily-puzzle picks to our database together with a random anonymous identifier stored in your browser. That identifier is a randomly generated string — it is not derived from your identity, it is not attached to your account even when you are signed in, and it exists only so the same device is not counted twice for the same day.

6. Notifications

Daily and streak reminders are off until you turn them on and your browser grants permission. Turning them on stores the push subscription your browser issues — an address for that browser plus the two keys needed to encrypt a message to it — along with your current streak, the day of your last completed daily, your time zone offset, whether you chose the morning or evening bonfire, and your account identifier if you are signed in. That is what decides who receives a reminder and when; it identifies a browser, not a person.

Turning reminders off in Settings, or revoking notification permission in your browser, stops them. Subscriptions the browser reports as gone are deleted automatically, and you can ask us to delete yours at any time.

7. Bug reports and feature requests

If you send a bug report or a feature request, we store what you wrote, the page you sent it from, your browser's user-agent string, any contact detail you chose to add, and your account identifier if you are signed in. It is used to reply to you and to fix or build the thing you raised, nothing else. Your IP address is used only to rate-limit the form against spam and is not stored with the report.

8. Server logs

Like virtually every website, our hosting infrastructure may automatically record standard technical logs (such as IP address, browser type, and pages requested) for security and reliability purposes. These logs are not used to identify or profile you and are retained only as long as the hosting provider's standard practice requires.

9. Cookies, analytics & advertising

We use Google Analytics to understand how the site is used — pages visited, approximate region, and device type.

We also send Google Analytics a small set of product events: that a puzzle was started, finished, given up on or shared, which mode it was, how many guesses it took, which buttons were used, that a sign-in or sign-up happened and by which method, and that a reminder was offered or a notification opened. These describe the session, not the person — they carry no name, email or account id, and they are never used to build a profile of you.

If you sign in, your browser also holds a session cookie that keeps you signed in and lets our servers recognise your account. It is strictly necessary for the account to work, carries no advertising purpose, and is cleared when you sign out.

Google Analytics sets cookies (the _ga family) to distinguish visitors; see Google's privacy policy for how Google processes this data. You can block these cookies with any content blocker or your browser settings, and the game works exactly the same without them. SoulsDoku runs no advertising and never sells data.

10. Who else handles this data

The list of companies involved is deliberately short:

• Vercel — hosts the site and serves every page
• Supabase — stores accounts, synced progress, pick statistics, notification subscriptions, and feedback
• Google Analytics — the usage measurement described above
• Resend — delivers account emails such as confirmation and password-reset links
• Google and Discord — only if you choose to sign in with them

Each acts as a service provider on our behalf. None of them is given your data for their own advertising, we do not sell data to anyone, and data may be processed in the United States where these providers operate.

11. Children

SoulsDoku is suitable for a general audience and does not knowingly collect personal information from children under 13. The game is fully playable without an account, which is the only place personal information enters at all. If you believe a child under 13 has created an account here, contact us and we will delete it.

12. Your rights & your data

Depending on where you live (for example under the GDPR or CCPA), you may have rights to access, correct, or delete personal data. Signed out, everything is on your device: clear this site's data in your browser settings and your progress and the anonymous identifier are gone, so nothing new we hold can be associated with that device.

If you have an account, there is no self-service delete button yet: email us and we will delete the account along with its synced progress, its notification subscriptions, and any feedback attached to it, and confirm when it is done. You can also ask for a copy of what we hold about you, or for the pick submissions tied to your anonymous identifier to be removed.

13. Third-party links

The site links to other games in the Doku network and occasionally to external sites. Those sites have their own privacy practices, which we do not control — check their policies when you visit.

14. Changes to this policy

If our data practices change, we will update this page and revise the "last updated" date above. Material changes will be noted clearly on the site.

15. Contact

For any privacy question or request, reach us through the Contact or email thedlenetwork@gmail.com.