Privacy Policy

Who we are

Dayzle is operated by Coordn8r Software Inc. (“Dayzle”, “we”, “us”), a company incorporated in Ontario, Canada. Under Canadian privacy law we are the organization accountable for the personal information described here, and under US state privacy laws we are the business that determines how it is handled. Where data protection law elsewhere applies to us, we are the data controller.

This policy applies to the Dayzle app on iOS and Android, the web version at play.dayzlegame.com, and this marketing site at dayzlegame.com. Where a section applies to only one of those, we say so.

Where Dayzle is offered

Dayzle is offered in Canada and the United States. Our app store listings are restricted to those countries, we price in Canadian and US dollars, and we do not market, advertise, localise, or direct Dayzle to any other region.

The web version at play.dayzlegame.com is reachable from anywhere, because that is how the web works. That does not mean we are offering the service in your country. If you are outside Canada and the United States and choose to play anyway, you are welcome to — but you are doing so on your own initiative, the service is not directed at you or tailored to your local law, and we may not be able to offer everything described here.

See If you are outside North America for what we do extend to everyone regardless.

The short version

We collect the minimum a daily-games app needs to work: an account, your gameplay results, and basic diagnostics.

• We do not sell your personal information. We never have, we do not take money for your data in any form, and we do not hand it to data brokers.
• Dayzle shows ads, and they are not personalised unless you ask for that. You can trade a short video ad for a hint or an extra life, and one can appear before a practice game — never during your daily set. Every ad request is flagged non-personalised unless you have explicitly opted in on iOS, and nothing in the app is gated on your answer. See Ads.
• You can play without giving us an email address. Dayzle creates an anonymous account for you on first launch; signing in with Google, Apple, or email is optional and exists so your progress survives a lost phone.
• You can delete your account and its data from inside the app, at any time, without emailing us to ask.

What we collect

Account information

When you first open Dayzle we create an anonymous account so you can play immediately. That account holds a randomly generated account identifier and nothing that identifies you personally.

If you choose to sign in — so your streak and history follow you to a new device — we receive from your chosen provider:

• Google Sign-In: your email address, your name as it appears on your Google account, and your Google account identifier.
• Sign in with Apple: your Apple account identifier, and your email address — which is the private relay address Apple generates for you if you chose to hide your real one.
• Email and password: your email address and a password, which is stored only in hashed form by our authentication provider. We never see or store your plaintext password.
• Email sign-in link: your email address.

We also store whether your account is still anonymous, when it was created, and your time zone (for example America/Toronto), which is how we know when your day rolls over for streak purposes.

Profile information you choose to add

• Username. Optional. It does not have to be your real name and we would gently suggest it isn’t. Setting one does not by itself put it on a leaderboard — see What other players can see.
• Profile picture. Optional, and shown only to you — never to other players. If you pick a photo, the image is uploaded to our storage and served from a long, unguessable web address. Anyone holding that address can view the image, so please don’t upload anything you would not want seen.
• Leaderboard icon. A small picture assigned to you, which you can change. This is the only image other players ever see.

Gameplay data

This is the bulk of what Dayzle stores, and it is what powers your streak, your stats screen, and your Brain Score. Each time you finish a game we record:

From those records we keep running totals per game — best score, number of plays, average accuracy, when you last played — and your streak information: current streak, longest streak, the date you last completed a daily set, and how many daily sets you have completed in total.

App diagnostics and usage analytics

• Crash reports. If Dayzle crashes we receive a report containing the technical error, your device model, operating system version, app version, and an installation identifier. We use this to fix the crash. We do not attach your email address to crash reports.
• Usage events. We record a small, fixed set of named events describing how the app is used — for example that a daily set was opened, a game was started, completed, or abandoned, a hint was used, a streak was extended, a tutorial was skipped, or a settings toggle was changed. These events carry the game involved and similar context, plus your account identifier, an app-instance identifier, and standard device information (model, operating system, language, country, app version) collected by our analytics provider.

We use analytics to answer questions like “is anyone finishing this game, or are they all quitting at level three”. We do not use it to build advertising profiles.

Emails we send you

If your account has an email address, we send it the emails that account needs:

• Confirming your address, when you sign up with email and password, or when you ask for the confirmation again.
• Resetting your password, when you ask for it.
• One welcome email, the first time you save your progress with Google, Apple, or email. It has an unsubscribe link. The two account emails above do not, because unsubscribing from them could lock you out of your account.

We send these from our own mail server rather than through our authentication provider, so they look like they come from Dayzle — see Who we share it with. For each email the server receives your address, which email to send, and the link to put in it. The server itself does not store your address: it keeps, for 30 days, a record that the email was sent — which email, when, and a scrambled, one-way form of your address that cannot be turned back into it. If you unsubscribe from the welcome email, we keep that same scrambled form so we can honour it.

The emails go out through Google Workspace. Like any email sent from Gmail, that leaves a copy, with your address on it, in the account that sent it; we move each copy to the trash as soon as it is sent, and Gmail deletes it for good within 30 days.

We do not send marketing email.

Feedback you send us

If you write to us from Send Feedback in the app, we store your note together with your account identifier, the app version, your platform (iOS, Android or web) and your device model, so we can tell which build and which phone a problem is on. No account or email address is needed to send one, and we do not attach your email address to it.

Our mail server also emails a copy of each note to our team inbox at hello@dayzlegame.com, so we see it promptly. That copy holds the same details as the note and goes nowhere else. We read notes to fix problems and decide what to improve.

Reminders

If you turn on the daily reminder, the time you pick is stored on your device and the reminder is scheduled by your phone’s own operating system. There is no server sending you push notifications, and we do not receive a record of whether a reminder was shown or tapped.

Subscriptions and payments

If Dayzle offers a paid subscription, purchases are processed by the Apple App Store or Google Play — not by us. We never receive your card number, billing address, or full payment details. What we receive from the store is the status of your purchase: which product you bought, whether it is active, and when it renews or lapses.

Advertising

See Ads below. In short: our ad provider receives your IP address and basic device information when an ad is requested, and your device’s advertising identifier only where you have opted in.

Website visits

See Cookies and the website below. In short: our host records standard server logs, the site loads a web font from Google, we count opens of the two link addresses we print on shared cards without storing anything on your device, and full product analytics on the rest of the site is currently switched off.

Things we do not collect

• Your precise location. Dayzle never asks for location permission. Any server that answers a request from your device — ours, or our ad provider’s — can infer a rough area from your IP address, which is a property of the internet rather than something we ask for.
• Your contacts, calendar, microphone, or camera roll. The only photo we see is one you explicitly pick for your profile picture.
• Health data, biometric data, or anything from a health app.
• Sensitive categories of data such as race, religion, political opinions, sexual orientation, or trade union membership. Please don’t put any of that in your username.

Ads

Dayzle is free, and advertising is part of how it stays free. Two kinds appear, and both are bound by our rule that the daily set is left alone:

• Rewarded ads you choose to watch. You can trade a short video for an extra hint or an extra life. Nothing obliges you to watch one, and declining never takes away something you already had.
• An occasional ad before a practice game. Practice only — never in your daily set, never when you are resuming a puzzle you had already started, and not at all if you have a subscription.

There is no advertising in the web version at play.dayzlegame.com, and none on this website.

What our ad provider receives

Ads are served by Google AdMob. When an ad is requested or shown, Google receives your IP address, your device model and operating system, your language and country, the app and its version, which ad slot is being filled, and whether you watched the ad through. Our ad requests do not carry your name, your email address, your Dayzle account identifier, or anything about how you play.

Personalisation, and the advertising identifier

By default — and for everyone who has not deliberately opted in — ads are non-personalised. They are chosen from context, not from a profile of you.

• On iOS, personalised ads require your permission, and we ask for it in two steps. After you finish a daily set we may show a plain-English card explaining what we get out of it: we earn more from ads, and we waste less money advertising to the wrong people. Only if you tap OK do we bring up Apple’s own tracking dialog. If you decline either one — or simply never answer — every ad request we make is flagged non-personalised and Apple withholds your advertising identifier (the IDFA) from us and from Google. No feature of the app is gated on your answer. If you decline our card we put the question away for months before it could come up again, and if you decline Apple’s dialog we never ask again at all.
• On Android, we do not request personalised ads at all. Google’s advertising ID may still be used by our ad provider for capping how often you see the same ad, for aggregate reporting, and for detecting ad fraud. You can reset or delete it in Settings → Google → Ads.
• In the EEA and the UK — where we do not offer Dayzle, but where the web is the web — Google’s own consent form is presented before any ad loads, and your answer there governs what may be stored on or read from your device.

Changing your mind

• iOS: Settings → Privacy & Security → Tracking. Turning Dayzle off there takes effect immediately and every subsequent ad request is non-personalised.
• Android: Settings → Google → Ads, where you can delete or reset the advertising ID.
• Or email hello@dayzlegame.com and we will confirm the state of your account either way.

Why we use it, and our legal basis

Here is every purpose we use your data for, and the justification for each. The legal bases named in the right-hand column are the GDPR’s, which we use because they are the clearest vocabulary anyone has written for this — and they apply directly if you are one of the people described under If you are outside North America.

Where we rely on legitimate interests, we have considered whether our interest is overridden by your rights, and you can object — see Your rights. Withdrawing consent does not affect anything we did lawfully before you withdrew it.

What other players can see

Dayzle has leaderboards. When you complete a game that feeds one, the following becomes readable by other signed-in players:

• Your leaderboard name — an anonymous name we assign you, like Quiet Otter 41. Your own username appears only if you set one and turn off Stay Anonymous in Profile → Leaderboard. Both are off by default, so your name is never shown unless you choose to show it, and you can change your mind at any time — past leaderboards update too.
• Your leaderboard icon — a small picture we assign you, which you can change. This is separate from your profile photo; your profile photo is never shown to other players.
• Your score, the difficulty band you played, how long the game took, and when you finished.

Your email address is never shown, and the name we assign you is not derived from your account identifier — it carries nothing about you at all.

If you would rather not appear at all, contact us at hello@dayzlegame.com and we will remove your entries. Deleting your account removes them too.

Who we share it with

We do not sell your personal information. We do not share it for cross-context behavioural advertising either, with one exception we describe plainly in If you are in the United States: if you have opted in to personalised ads on iOS, the ad requests we make carry your device’s advertising identifier, and that meets the definition of “sharing” under several US state laws. Everyone who has not opted in is outside that entirely.

We use a small number of service providers who process data on our instructions and are contractually bound to protect it:

We may also disclose personal information:

• When the law requires it — a valid court order, subpoena, or similar legal process. We will tell you unless we are legally prohibited from doing so.
• To protect the rights, safety, or property of Dayzle, our players, or the public.
• To a buyer or successor, if we are ever acquired or merged. This policy, or one at least as protective, will continue to apply, and we will tell you before your data moves.
• To anyone else, with your consent.

Where your data is processed

We are a Canadian company. Our service providers process and store data on infrastructure in the United States and, depending on the service, other countries. So if you are in Canada, your personal information is routinely transferred to and stored in the United States. Our mail server is the exception: it runs in Canada, in Google Cloud’s Toronto region, though the emails it sends are delivered through Google’s global mail network.

Data stored outside your country is subject to the laws of that country, and may in principle be accessible to its courts, regulators, and law enforcement — including under US legal process — regardless of where you live.

Our contracts with these providers require them to protect your data to the standard described in this policy, and where a transfer needs a formal legal mechanism, we rely on the standard contractual protections our providers offer. You can ask us which ones apply by writing to hello@dayzlegame.com.

How long we keep it

• Account and gameplay data: for as long as your account exists. Your play history is the point of the stats screen, so we keep it rather than rolling it up.
• After you delete your account: your account record, profile, gameplay history, aggregates, and leaderboard entries are deleted. Copies may persist in encrypted backups for up to 90 days before those expire. Feedback you sent us is the exception, below.
• Feedback you send us: kept for as long as it is useful to us, including after you delete your account. A note you sent is like a letter you mailed: deleting your own account does not recall it, and we may keep acting on it. It carries your account identifier, app version and device model, and never your email address. If you want a particular note removed, write to hello@dayzlegame.com.
• Dormant anonymous accounts: an anonymous account that is never signed in to and has not been used for 24 months may be deleted along with its data.
• Emails we sent you: our mail server’s record of a send is kept for 30 days and holds a scrambled form of your address rather than the address itself. The copy Gmail leaves in our sending account is moved to the trash as soon as the email is sent and deleted for good within 30 days. An unsubscribe from the welcome email is kept, in the scrambled form, for as long as it needs honouring. See Emails we send you.
• Crash reports: retained by our provider for approximately 90 days.
• Usage analytics: user-level analytics records are automatically deleted on our provider’s retention schedule, which we set to no more than 14 months. Aggregate, non-identifying counts may be kept indefinitely.
• Advertising data: we keep no record of the ads you were shown that is tied to your account. What our ad provider holds is retained on Google’s own schedule, described in its privacy policy.
• Website server logs: a short period set by our host, typically days rather than months.
• Transaction records: kept as long as tax and accounting law requires, typically six to seven years, even after you delete your account.

How we protect it

Data is encrypted in transit and at rest by our providers. Access to production data is limited to the people who need it, protected by multi-factor authentication. Our database enforces per-account access rules at the server, so one player’s credentials cannot read another player’s data — and gameplay records are write-once, which means they cannot be quietly rewritten after the fact.

No system is perfectly secure, and we won’t pretend otherwise. If a breach affects your personal information and creates a real risk of significant harm, we will notify you and the relevant regulators as the law requires — within 72 hours of becoming aware, where the GDPR applies.

Your rights

Wherever you live, you can:

• Access the personal information we hold about you, and get a copy.
• Correct anything inaccurate. Your username and profile are editable in the app directly.
• Delete your account and its data. In the app: Profile → Edit profile → Delete account. It is immediate and it is not reversible.
• Withdraw consent you previously gave — turn off reminders, remove your profile picture, or switch off usage analytics in the app’s settings. If you allowed personalised ads on iOS, Settings → Privacy & Security → Tracking withdraws that permission, and Ads covers the Android equivalent.
• Complain to us first, and to your data protection authority if we don’t resolve it.

To exercise a right, email hello@dayzlegame.com from the address on your account, or tell us enough to locate your account if it is anonymous. We respond within 30 days, and within one month where the GDPR applies — extendable by two further months for complex requests, in which case we will tell you why. We will not charge you, and we will not treat you worse for asking. We may need to verify your identity before acting on a request.

If you are outside North America

As explained under Where Dayzle is offered, we offer Dayzle in Canada and the United States only. We do not target, market to, or direct our service at the European Economic Area, the United Kingdom, or anywhere else, and for that reason we have not appointed a representative under Article 27 of the GDPR or its UK equivalent.

If you have reached the web version from outside North America and played anyway, we are not going to use that as an excuse to treat your data worse. As a matter of policy, and regardless of where you live, we extend to you:

• Restriction — ask us to pause processing while a dispute about accuracy or our legitimate interests is resolved.
• Objection — object to processing based on our legitimate interests, on grounds relating to your particular situation. If you object to direct marketing, we stop, no questions asked.
• Portability — receive the data you gave us, and the data generated by your use of Dayzle, in a structured, machine-readable format.
• Freedom from automated decision-making that produces legal or similarly significant effects. We don’t do any. Your Brain Score is a description of your play, not a decision about you, and it has no consequences outside the app.

These sit on top of the access, correction, deletion, and consent-withdrawal rights under Your rights, which we already give everyone. Email hello@dayzlegame.com to use any of them.

If you believe we have mishandled your data and we have not put it right, you can raise it with your local data protection authority. In the EEA, a list is maintained by the EDPB; in the UK it is the Information Commissioner’s Office. We would genuinely appreciate the chance to fix it first.

If you are in Canada

We handle personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation. You have the right to access your personal information, challenge its accuracy, and withdraw consent subject to legal and contractual restrictions — noting that withdrawing consent to the processing we need in order to run your account means closing the account.

If you are not satisfied with our response, you can complain to the Office of the Privacy Commissioner of Canada, or to your provincial commissioner.

If you are in the United States

Residents of California, Colorado, Connecticut, Virginia, Texas, and other states with comprehensive privacy laws have rights to know, access, correct, delete, obtain a portable copy of, and limit certain uses of their personal information, and to appeal a refusal. Exercise any of them at hello@dayzlegame.com.

We do not sell personal information. We never have, and we do not take money for your data in any form.

“Sharing” is a broader idea, and it applies to one thing we do. California and several other states use “share” to mean disclosing personal information so that advertising can be targeted based on your activity across different businesses. If — and only if — you opt in to personalised ads on iOS, our ad requests carry your device’s advertising identifier to Google, and that is sharing as those laws use the word. Everyone else is outside it: every request we make for a player who has not opted in, and every request on Android and the web, is flagged non-personalised.

Your opt-out is a switch you control directly. Settings → Privacy & Security → Tracking on iOS turns it off immediately and permanently, and we treat that as your opt-out of sharing. You can also email hello@dayzlegame.com and we will confirm the state of your account. We will not treat you any differently for opting out, and no part of Dayzle is withheld from you for it.

We do not process sensitive personal information in order to infer characteristics about you, and we do not profile you in any way that produces legal or similarly significant effects.

Global Privacy Control. This website sets no advertising cookies and runs no ad tags, so a GPC signal reaching dayzlegame.com finds nothing to opt out of. An in-app advertising identifier is not governed by a browser signal — the iOS tracking setting above is the control that works there, and it is a real one.

Under California’s “Shine the Light” law, we do not disclose personal information to third parties for their own direct marketing purposes.

Children

Dayzle is not directed to children. You must be at least 13 to have a Dayzle account. If you are somewhere with a higher minimum age for consenting to online services on your own, that higher age applies to you instead.

We do not knowingly collect personal information from children below those ages, and we do not build the kind of profile that children’s privacy laws — COPPA in the United States, and its equivalents — are concerned with. Dayzle is not directed to children for advertising purposes either: our ad requests are not tagged as child-directed because the app is not one, and the permission that enables personalised ads is not something a child’s account should be reaching. If you believe a child has given us personal information, write to hello@dayzlegame.com and we will delete the account and its data promptly.

Cookies and the website

This section is about dayzlegame.com, the marketing site you are reading now.

• Server logs. Our host, Cloudflare, records standard request information including your IP address, browser user agent, the page requested, and the time. This is used for delivering the site, security, and abuse prevention, and is retained briefly.
• Web fonts. The site loads the Manrope typeface from Google Fonts, which means your browser makes a request to Google’s servers and Google receives your IP address. If you would prefer that not happen, a content blocker will stop it and the site will simply render in a fallback typeface.
• Counting link opens. Two addresses on this site exist only to be handed to someone: /get, which every share card and caption prints, and /f/CODE, which a friend invite carries. When one of those two pages is opened we send a single count to PostHog recording that it happened, which of the two it was, which shared card the link came from, and the site you arrived from. Nothing is stored on your device for this — no cookie, no local storage — so each open is counted on its own and cannot be tied to any other visit or to you. A friend code is never sent: the address is reported as /f/, with the code removed. We do this to find out whether shared links actually get opened, which is the only way to tell if sharing works at all.
• Product analytics on the rest of the site. The other pages are wired for full PostHog analytics, which does use local storage and a cookie — and it is currently switched off: no such script loads, and no analytics cookies are set. If we turn it on, we will update this policy first, and we will not set a non-essential cookie or local storage entry on a visitor whose local law requires consent for it without asking.
• No advertising cookies. We do not run ad tags, retargeting pixels, or social media trackers on this site.

The web version of Dayzle at play.dayzlegame.com uses browser storage to keep you signed in and to hold your in-progress puzzle. That storage is strictly necessary to provide a service you asked for, and no consent banner is required for it.

Changes to this policy

We will update this policy when what we do changes. The “last updated” date at the top always reflects the current version. If a change materially affects your rights — a new category of data, a new purpose, a new recipient — we will give you notice in the app or by email before it takes effect, and where the law requires consent, we will ask for it rather than assume it.

Contact us

Privacy questions, requests, and complaints: hello@dayzlegame.com.

Coordn8r Software Inc., Ontario, Canada.

A real person reads that inbox. If you are exercising a privacy right, say so in the subject line and we will treat it as a formal request from the day it arrives.