Privacy notice
Updated 22 October 2026
This notice covers the mobile game, its optional online account and this information site. You can play the puzzles without an online account. Online races and private groups require sign-in. Features such as store purchases or rewarded videos process the data described below only when available and used.
Who is responsible?
Dali AI GmbH, Wassergrabe 4, 6210 Sursee, Switzerland, is responsible for the game's processing. Contact: kontakt@dali-ai.ch. Company registration: CHE-410.112.306.
Playing on your device
Your puzzle progress, points, coins, lives, tricks, album, daily bonus and language, music and animation choices are stored on your device. Game music and fonts are bundled with the app. We do not receive all local game data simply because you play offline. Removing app data can remove local progress; an online account is not a complete backup of every local item.
Optional Apple or Google sign-in
The provider verifies your identity and sends a sign-in token to our service. Our account database stores an internal account ID, a hashed provider identifier, session hashes and timestamps. A provider token or the provider's local sign-in service may contain your name and email; our game account database does not save those name/email fields or your profile picture. We do not receive your password or request access to your contacts, files, Gmail or iCloud documents. For Apple sign-in with token custody enabled, we also keep an encrypted authorisation token bound to your account so that we can revoke access when you delete it.
Online points and groups
We store your chosen race name, its public-display confirmation, level results, points, puzzle proof, timestamps and reward history to run the monthly competition and prevent duplicate credits. Your chosen name, points, progress and rank are visible to other participants. Choose a nickname rather than a real name. Private group members can see each other's name, points and progress. Group membership, owner and invitation records are stored; anyone holding a valid invitation can use it to join, so share links only with intended friends. Invitation pages do not expose member lists. Groups award no prizes.
Purchases and rewards
Apple or Google handles payment details. We receive and verify product and transaction information, purchase-token or transaction hashes, purchase status, account binding and coin amounts; we keep a server ledger to prevent repeated credits. We do not receive your payment-card number. Daily/monthly rewards and any video rewards also have account-linked, uniquely identifiable receipts. A request to delete your game account does not cancel a transaction or request a store refund.
Optional rewarded videos
When enabled, Google AdMob and Google's User Messaging Platform process the privacy choice and ad request. Google may process IP address (and approximate location derived from it), device/app information and identifiers, ad views/interactions and diagnostics. Our configuration disables personalised ads and the publisher first-party ID and requests the most restrictive age treatment; this does not make an ad request data-free. No precise-location permission is requested. Video rewards are checked through a signed Google server callback containing a reward request reference, transaction information and reward type. We do not put your race name or email in that callback. Where a privacy choice is required, ads are blocked until the SDK permits the request. Privacy choices can be reopened from the app's settings when available. Watching a video is voluntary; the puzzles remain playable without it.
Hosting, support and other recipients
Cloudflare, Inc. (United States) hosts the service. The game database is restricted to the European Union; Cloudflare's global network can still process requests, connection information such as IP address, security/rate-limit data and operational diagnostics outside the EU, including in the United States. An IP hash is used for sign-in rate limiting. Apple and Google process sign-in, store and advertising data under their own notices, including in Ireland/the EU and the United States. Support emails, including your address, message and any attachment you choose to send, are received by Hostpoint AG in Switzerland. Do not send passwords, full card details or identity documents unless a specific, proportionate verification is agreed. We do not add an independent analytics SDK to the game or analytics scripts to these information pages.
Why we process data
We process necessary account, gameplay, purchase and support data to provide the features you request; security and duplicate-credit controls serve our legitimate interest in protecting the game and other players. Your public name is saved only after your confirmation. Where legally required, optional advertising/device processing relies on the privacy choice shown to you. We retain required business records to meet legal obligations. Under applicable EU law these purposes correspond to contract performance, legitimate interests, consent or legal obligation. Declining optional features does not prevent offline puzzle play.
How long data is kept
Local data remains until you remove it or the app/operating system clears it. Online account, gameplay, group and reward records remain while your account exists and are erased when you delete it. Sign-in challenges expire after 5 minutes and sessions after 1 hour; expired rows are removed during service cleanup. A deletion-response receipt is usable for 24 hours to recover a lost confirmation and is then removed during cleanup. A minimal hashed identity suppression record remains for as long as needed to stop stale sign-ins recreating the deleted account. If you purchased coins, an unlinked transaction replay record remains while the same transaction could otherwise be credited again; it contains no account ID, name, email or payment-card details. These two security records currently have no fixed automatic expiry. Support correspondence is kept for handling and following up your request, normally no longer than 3 years after the last contact unless a legal claim or duty requires longer. Any mandatory accounting records are kept separately for the applicable statutory period. Apple, Google, Cloudflare and Hostpoint apply their own stated retention to data for which they are responsible. Automatic Apple-revocation retries remain valid for 7 days after deletion. The encrypted token and account binding are removed when Apple confirms revocation, or during the scheduled cleanup after that period ends; cleanup is scheduled every 15 minutes. If no stored token is available, you can still delete the game account and revoke the Apple authorisation manually.
International processing
Switzerland and EU countries provide recognised protections for the relevant transfers. For processing outside these areas, providers use the applicable adequacy frameworks or contractual safeguards, including standard contractual clauses and Swiss adaptations where required. Cloudflare's data-processing addendum and Google's transfer framework are linked below; contact us for information about the safeguards relevant to your request. EU storage of the game database does not mean all service processing stays in the EU.
Your choices and rights
You can change your race name in settings, decline the race, sign out, withdraw an optional privacy choice and request access, correction or deletion. Depending on the law that applies, you can also request restriction or portability and object to processing based on legitimate interests. Withdrawing consent does not affect earlier lawful processing. Contact kontakt@dali-ai.ch; we may need proportionate verification to avoid disclosing or deleting another person's data. You can complain to the Swiss FDPIC or the data-protection authority where you live in the EU/EEA. Account deletion instructions are linked below. No decision producing legal or similarly significant effects is made solely by the game's score calculation.
Young players and updates
The game is intended for players aged 13 and above and is not directed at children under 13. This does not replace any higher local age for valid privacy consent. We do not ask for a birth date or precise location. If you believe a child has supplied personal data without a required permission, contact us. We update this notice when the data flows change; the date above identifies this version.