Privacy Policy

IPO Dash is a free daily puzzle game by FinLang Ltd. To run the game and its leaderboard we store your chosen callsign and your puzzle scores, tied to an anonymous account. If you choose to sign in with Google, we also store your email so your progress follows you across devices. No tracking. No ads. We never sell your data.

The data controller is FinLang Ltd, a company registered in the UK (ICO registration ZB998843). For any privacy question or request, contact privacy@ipodash.com.

Today, the game collects:

• Callsign — the name you choose for the leaderboard.
• Scores & play data — your times, attempts, hints used, an anti-cheat flag, the puzzle date and game mode.
• An anonymous account ID — a random identifier so your streak and scores persist. No email or name required to play.
• Google sign-in (optional) — if you choose to sign in, your email address and basic Google profile (your name and Google account ID), so your account and progress carry across devices.
• Standard server logs — our hosting providers transiently log technical data such as your IP address to serve and secure the site.

If you don't sign in, we never ask for your email or any contact details. Either way we do not collect location, device or behavioural tracking, analytics, advertising identifiers, payment details, or any special-category data — and there are no third-party trackers on the site.

We use the above only to run the game, save your progress, show the daily leaderboard, and keep it fair (anti-cheat) — our lawful basis is legitimate interests (delivering a service you asked for, in the least intrusive way we can). If you sign in with Google, we process your email and profile on the basis of your consent, given when you choose to sign in and withdrawable any time by signing out or asking us to delete your account.

We use only essential, first-party browser storage (your session, streak, callsign, and current puzzle). We use no advertising or analytics cookies, so there's no tracking-consent banner.

We don't sell or rent your data. It's handled only by the providers that run the game for us:

• Supabase (via Lovable Cloud) — database & anonymous authentication, hosted in Ireland (AWS eu-west-1, EEA).
• Lovable / Cloudflare — hosting & content delivery.

If you sign in with Google, Google handles that authentication. We may disclose data if required by law.

Your data is stored and processed in the European Economic Area (Ireland). The UK recognises the EEA as providing an adequate level of data protection, so no additional transfer safeguards are required.

We keep your callsign and scores while your account is in use; anonymous accounts and on-device data clear when you clear your browser. Under UK GDPR you can access, correct, delete, restrict, object to, or port your data — email privacy@ipodash.com and we'll respond within a month. You can also complain to the UK regulator, the Information Commissioner's Office (ico.org.uk).

IPO Dash is a family-friendly skill game and we know children play it. It's low-data by design — playable with no account, no email, and no tracking — aligned with the ICO's Age Appropriate Design Code. It's not directed at children under 13, and we don't knowingly collect personal data from them beyond a self-chosen callsign and scores.

We'll update this page and its date for any significant change — in particular when paid features (e.g. a Pro tier) launch, which is when any payment information would first be collected.