Last updated: October 10, 2026
This policy covers the Volnar Labs website (volnarlabs.com), the games playable on it, and our mobile apps once they are released. We keep it in plain language, because you should not need a lawyer to understand what happens with your data.
The short version
- You do not need an account and we never ask for your name or email to play.
- Your game progress is stored on your own device, not on our servers.
- If you finish the daily puzzle or challenge a friend, we store your time under a random ID that is not linked to you. No account, no email, no name unless you type one.
- We use Google Analytics on the website to understand how the games are used.
- Our mobile apps show ads served by Google AdMob. Ads keep the games free.
- We do not sell your personal data.
1. Who we are
Volnar Labs is an independent game studio. For anything privacy related, contact us at contact@volnarlabs.com.
2. Data we do not collect
We do not have accounts, logins or profiles. We never ask for your email address, phone number or payment details, and the only name we ever see is one you type yourself into a duel (see section 4). If you email us, we only use your message and address to reply, and we do not add you to any mailing list.
3. Data stored on your device
The games save things like your current board, completed puzzles, streaks and settings in your browser's local storage (or the app's local storage on mobile). This stays on your device; we hold no copy. The same storage holds two more things:
- a random player ID, generated on your device the first time you need one. It is a string of random characters, not derived from anything about you or your device, and it is the only thing that connects your entries in a ranking or a duel;
- an optional display name, if you type one for a duel.
Clearing your browser data or uninstalling the app wipes all of it, including the player ID. A new one is generated next time, and the old entries simply stop being yours.
4. Data we store on our servers
Two features need a server, because they compare you with other people. Both store the random player ID from section 3, never anything that identifies you.
- Daily ranking. When you finish the daily puzzle, we store the game, the date, the board, your player ID, your time, your time penalties and the number of mistakes and hints. We send back only your own percentile, never anyone else's result. One entry per player per day: the first run is the one that counts.
- Duels. When you challenge a friend, we create a duel and store the same kind of result for everyone who plays it, plus the display name you typed, if any. Anyone holding the duel link can see the times and names in that duel, so treat the link as public and pick a name accordingly.
There is no profile behind the player ID. We cannot tell who you are from it, and neither can anyone reading the database. Under the GDPR it still counts as personal data, because it singles out a device, which is why it is covered by your rights in section 12.
Our hosting provider, Cloudflare, processes your IP address to deliver the site and protect it from abuse. We do not keep our own access logs and we do not use IP addresses for anything else.
5. Analytics
We use Google Analytics to see, in aggregate, how people use the site: which pages are visited, roughly where visitors come from (country or city level, based on IP address), what device and browser they use, and events such as finishing a puzzle. This helps us decide what to improve. Analytics data is aggregated and does not identify you personally. Google Analytics retains this data for a limited period (currently up to 14 months). You can opt out with the Google Analytics opt-out browser add-on, and where a consent banner is shown, analytics only runs after you agree. Our mobile apps contain no analytics at all.
6. Advertising
Our games show ads so they can stay free. They are plain banners: we never interrupt a puzzle with a full-screen ad, and hints never require watching one.
The website currently shows no ads at all. If that changes, they will be served by Google AdSense and this page will say so beforehand. Our mobile apps show a banner served by Google AdMob. Ad providers may use cookies or device identifiers (such as the advertising ID on Android) to measure ad performance and, where you have consented, to personalize ads. Where required, you will see a consent dialog before any ad loads, and you can choose non-personalized ads or decline entirely; if you decline, no ad is shown. You can reopen that choice at any time with Ad privacy settings at the bottom of any screen in the app. You can also control ad personalization in your Google Ad Center and reset the advertising ID in your device settings. How Google uses this data is described in How Google uses information from sites or apps that use its services.
7. Cookies and similar technologies
We do not set tracking cookies of our own. Cookies and similar identifiers on our pages come from the third-party services above (analytics and ads). Nothing in those categories runs before you agree: the banner you see on your first visit sets everything to denied by default, and only your choice unlocks it. You can change or withdraw that choice at any time with the Cookie settings link in the footer of every page, and you can block or delete cookies in your browser; the games work fine without them.
8. Mobile apps
Our mobile apps are the same games packaged for phones. The puzzles you can play offline are bundled with the app; the daily puzzle, the ranking and duels are fetched from volnarlabs.com, exactly as on the website. In addition to the above, an app uses the advertising ID for ads, as described in section 6. We collect no crash reports ourselves; Google Play may share aggregated, anonymous crash statistics with us as the developer of the app. If a future app offers optional features such as achievements or leaderboards through Google Play Games Services or Apple Game Center, those platforms process your gamer profile under their own policies and only if you sign in to them. Our apps currently offer no in-app purchases; if that changes, payments would be handled entirely by Google Play or the App Store, and we would never see your payment details.
9. Legal bases (EEA/UK)
Where the GDPR applies, we rely on your consent for personalized advertising and analytics (which you can withdraw at any time via the consent dialog), and on our legitimate interest for the rest: keeping the games working and safe, and running the ranking and duels you chose to take part in.
10. Sharing of data
We do not sell or rent personal data. The only parties that process data for us are the service providers named above: Google Analytics, Google advertising services, the app store platforms on mobile, and Cloudflare, which hosts the site and the ranking database. Each acts under its own privacy policy. Duel results are shared with the people holding that duel link, because that is the point of a duel. We may disclose data if the law requires it.
11. Data retention
Ranking and duel entries (section 4) are kept while they are still useful for the rankings and for comparing duels over time; we delete older entries when they no longer serve that purpose. They are tiny rows holding a random ID and a time. Analytics data is retained by Google Analytics for up to 14 months. Data stored on your device stays there until you delete it. Emails you send us are kept only as long as needed to handle your request.
12. Your rights
Depending on where you live (for example under the GDPR or CCPA), you may have the right to access, correct or delete personal data, to object to or restrict processing, to withdraw consent, and to lodge a complaint with your supervisory authority. Because we store so little, the fastest route is usually: clear your browser data (local storage and cookies), use the consent dialog or the Google links above for ads and analytics, and email us for anything else. To have your ranking and duel entries deleted, send us your player ID before you clear it: we have no other way to find your rows, and once the ID is gone from your device it cannot be recovered.
13. Children
Our games are family friendly, but the website and apps are not directed at children under 13, and we do not knowingly collect personal data from them. Where consent dialogs and ad settings apply, ads for users flagged as under the age of consent are non-personalized. If you believe a child has provided us personal data, contact us and we will delete it.
14. International transfers
The service providers we use (Google) may process data on servers outside your country, including in the United States, under safeguards such as the EU standard contractual clauses and the EU-US Data Privacy Framework.
15. Changes to this policy
If we change this policy, we will update this page and the date at the top. Significant changes (for example, a new category of data) will be called out on the site.
16. Contact
Questions, requests, complaints: contact@volnarlabs.com.