Privacy Policy

Information we collect

• Account information. If you create an account, we process your email address, account identifier, and display name. Supabase handles authentication. If you choose Google sign-in when available, Google provides basic account information such as your email, name, and profile image. We do not receive your Google password or request access to your Gmail or Google Drive. If you choose Sign in with Apple in the iPhone app, Apple provides your name the first time and either your email or a private relay address that forwards to it. We do not receive your Apple ID password.
• Game progress. We store followed games, completed challenges, dates, completion times, and moves to sync progress and calculate stats, streaks, and badges. Submitted answers are sent to our server to validate completions.
• Gameplay activity. We record which challenges you see, start, skip, leave, retry, replay, or complete, along with session identifiers, dates, feed position, and active play time. Signed-in activity is linked to your account; guest activity uses a random identifier. These event records do not contain your email, name, or board answers.
• Technical information. Hosting and authentication providers process information such as IP addresses, browser details, request logs, and errors to deliver and protect the service. We use an obscured, keyed value derived from a guest’s IP address to limit abusive event submissions.
• Messages. If you contact support, we receive the information you include in your message.

How we use information

We use information to operate accounts, save and restore progress, personalize the For You feed, improve game recommendations and difficulty estimates, measure usage, troubleshoot problems, prevent abuse, and respond to requests. Recommendations may use gameplay history and followed games. They do not make legal or similarly significant decisions about you.

Cookies, local storage, and analytics

Authentication cookies keep you signed in. A guest cookie lasts up to 30 days and supports gameplay activity tracking. Browser storage saves preferences, puzzle drafts, progress, and pending sync events. The installed app may cache files for offline play.

We use Vercel Web Analytics for aggregate usage information, such as pages visited, referring sites, and browser or device characteristics. Vercel describes this analytics service as cookie-free; that is separate from hoppp’s authentication and guest cookies. See Vercel’s analytics privacy documentation.

You can clear cookies and site data through your browser. Doing so may sign you out and remove unsynced progress and drafts; it does not delete data already saved to your account.

Sharing and service providers

We use Vercel for hosting and analytics and Supabase for authentication and database storage. Google processes sign-in information if you choose Google sign-in, and Apple if you choose Sign in with Apple. These providers process information to deliver their services and may process it in countries other than yours. See the privacy notices for Vercel, Supabase, Google, and Apple.

We do not sell personal information or share it for cross-context behavioral advertising. We may disclose information when required by law or reasonably necessary to protect users, secure the service, or address fraud. If the service changes ownership, information may transfer with it, subject to applicable privacy obligations.

Retention and security

Account details and saved progress are retained while your account is active, unless you request deletion. Routine cleanup removes guest gameplay events older than 30 days and signed-in gameplay events older than 90 days. Aggregated statistics may remain. Local drafts remain until cleared or replaced. Support records, security logs, and backups may be kept longer where needed for support, security, legal obligations, or normal backup rotation.

We use access controls and encrypted connections to protect information. No online service can guarantee absolute security.

Your choices and rights

To delete your account, open Profile → Settings → Delete account and confirm. This permanently removes your account, profile, followed games, saved results, and account-linked gameplay events. Stats and badges derived from those results are removed too. We also clear that account’s saved progress and guest progress in the browser used for deletion. Other devices may retain local copies until you clear their site data. Backups and records retained for legal or security reasons follow the retention practices above. You can also request deletion at support@hoppp.app.

You can play without creating an account and edit your display name in settings. To request access, correction, export, or deletion of account information, email support@hoppp.app, preferably from your account email. We may verify your identity before acting. Guest records may not be identifiable after you clear the guest cookie.

Depending on where you live, you may also have rights to restrict or object to processing, withdraw consent where processing relies on consent, or complain to your local data protection authority. Where a legal basis is required, we process information to provide the service you request, for legitimate interests in service improvement and security, to meet legal obligations, or with consent where required.

Children

hoppp is not intended for children under 13, or anyone below the age required to use the service in their location. If you believe a child has provided personal information, contact us so we can investigate and remove it as appropriate.

Changes

We may update this policy as the service changes. We will update the effective date and provide additional notice of material changes where required.