Privacy policy

1. Controller and scope

APPLODI STUDIO LIMITED (埃鐠樂狄有限公司) is the controller for the processing described for Tibumo Puzzle, its presentation website and support. It is a limited company incorporated in Hong Kong under the Companies Ordinance, Chapter 622. Registered office: Room 5017, Floor 5, Yau Lee Centre, 45 Hoi Yuen Road, Kwun Tong, Hong Kong. Company Registration No.: 80379487. Business Registration No.: 80379487-000-05-26-8.

Privacy and support contact: contact[AT]applodistudio.com. Replace the [AT] marker with an at sign in your email application. This policy distinguishes the mobile app, website, stores and voluntary support requests. The website does not offer games playable in a browser.

2. Children and parental choices

Puzzle is intended for children accompanied by an adult. No child account, name, date of birth or public profile is requested to play. The 2–3, 4–5 and 6-and-over groups are difficulty choices, not the child’s actual age. Settings, purchases and external links are accessible after the parental check.

The app contains no advertising or identified advertising SDK. The services examined do not send the child’s progress to a publisher server and do not provide remote synchronisation. An adult should send support requests without unnecessary information about a child.

3. Data on the device

The app stores games, progress, tutorials already seen, the last selected level and path, and language, theme, sound, vibration and hint preferences locally. Parental controls use local data; when a code is configured, a hash with a random salt is stored, not the code in plain text. A hash is not encryption of all the data.

This data lets you resume a game, apply preferences and protect parental operations. No child account or progress server is involved in the services examined. The data remains on the device for as long as it persists there; no automatic expiry is provided. Migration versions may also be stored locally.

Restarting resets the current level, not all storage. The current settings have no global deletion button. System storage functions and uninstalling can remove installation data; their effect on system backups is separate. The publisher cannot remotely erase local storage it cannot access and does not guarantee restoration after reinstalling. The Android configuration examined disables automatic app backups; iOS backups depend on Apple features and settings.

4. App network connections and stores

The games and media are bundled and do not require content downloads from a Puzzle server to play. Purchases, restoration, updates and opening external links involve the corresponding services. The iOS 1.0 candidate examined contains no Puzzle analytics service or remote game updates. The browser statistics service used in development is not active in native apps; it does not describe collection of iOS or Android games.

On iOS, Apple manages the store account, billing and payment information under its own terms. The app receives product and transaction identifiers and purchase or revocation status needed to check access locally. No transmission of this information to a dedicated Puzzle server has been identified. The publisher does not receive payment card numbers through this flow. Unlocking is a one-time, non-consumable purchase with no subscription. The Google Play flow is not yet active; its processing will be described before release.

System, store and backup services are governed by their own policies. This policy does not claim that Apple or Google processes no technical data when their services are used.

5. Visiting the website

The server necessarily receives the IP address and technical request information, including the requested address, date, browser information and possible errors. This is used to deliver pages and operate and secure the website. Server logs are separate from visit statistics and may contain the full IP address.

The website saves the selected language and theme in browser local storage to respect these preferences. It requires no account. Fonts and illustrations on the Puzzle pages are served by the website. No payments are made on Puzzle’s presentation pages.

6. Optional statistics and your choice

Website audience measurement covers pages viewed and some voluntary actions, such as links, downloads and preference changes. It is separate from playing games in the mobile app. It uses a statistics instance self-hosted by the publisher. Disabling analytics cookies does not mean all data is anonymous.

The server configuration examined masks two bytes of the IP address recorded in visits. The full IP address is nevertheless used to enrich location information. Browser, system, referral and visit times may also be processed. The website sends no child’s name, parental answer or game content.

The website asks for an explicit choice before loading statistics, with acceptance and refusal offered equally. Refusing lets you continue browsing. You can change your choice using “Statistics” at the bottom of the page. It is saved only in this browser, for at most 180 days; clearing storage or using another browser requires a new choice. Withdrawal stops new transmissions without automatically erasing data already stored on the server. The statistics tracker omits query parameters, URL fragments and the full referring address. Technical requests may still include the originating website’s domain in an HTTP header. Browser feature detection is disabled.

7. Information sent to support

When you voluntarily contact support, we receive your email address, message, attachments and information needed to handle the request. Device models and versions, reproduction steps and transaction references may help. Do not send a password, parental code, card number, child’s photo or unnecessary sensitive data.

This data is used to answer your request, investigate a fault, handle a rights request and, where necessary, establish or defend a right. Providing essential information affects our ability to respond; no personal information about a child is required for a general enquiry. Messages are not used for advertising solicitation in the processing described here.

8. Purposes and legal grounds

Where the GDPR applies, providing features and handling a service-related request rely on performance of the service relationship or steps requested by the adult. Legal obligations, including rights requests or legally required retention, rely on the applicable obligation. Website security and defence of rights may rely on the publisher’s legitimate interest, taking individuals’ rights into account.

Optional website audience measurement relies on consent when enabled by your choice. Refusing or withdrawing does not restrict access to pages. The principles of Hong Kong’s Personal Data (Privacy) Ordinance are also considered for collection, use, security, access and correction of data processed by the publisher.

9. Recipients, hosting and transfers

Only authorised publisher personnel and providers needed for the relevant service should access data. Stores process their own operations; data is not sold or shared for advertising in the flows described.

The website and statistics instance use a Hostinger server in Kuala Lumpur, Malaysia. The invoice supplied by the publisher confirms Hostinger PTE in Singapore as provider. HOSTINGER PTE LTD currently gives its registered office as 16 Raffles Quay, #33-03, Hong Leong Building, Singapore 048581. APPLODI STUDIO LIMITED is established in Hong Kong. The support mailbox is hosted by Infomaniak, a Swiss provider. These parties are separate from local storage in the app.

The publisher is established in Hong Kong and the server is located in Malaysia; neither territory benefits from a general European Union adequacy decision. Hostinger’s terms incorporate a data processing agreement covering VPS services, among others, and providing European standard contractual clauses for transfers within its scope: https://www.hostinger.com/legal/dpa. The agreement also describes recipients, subprocessors and security measures. You can consult this framework or ask the publisher for a copy of the safeguards applicable to the processing concerned. IP masking and consent to statistics do not replace transfer safeguards.

10. Retention, deletion and backups

Local app data remains on the device without automatic expiry and is separate from system-managed backups. The publisher has no progress copy enabling remote restoration.

Statistics are used to monitor daily website traffic and compare it over time. The publisher determines their retention manually according to the usefulness of those comparisons, deletion requests that can be handled and any legal obligations or need to defend rights. As of 5 October 2026, no fixed deletion deadline is applied to detailed visits or aggregated reports, and automatic deletion is disabled. Withdrawing consent stops future collection; it does not automatically delete the history.

Support requests are kept in the Infomaniak mailbox while the request is being handled and then for no more than 24 months after the last exchange once it is closed. The publisher adopted this rule on 5 October 2026; messages and attachments are deleted manually, with no promise of automatic purging. Information necessary to meet a legal obligation or to establish, exercise or defend a right may be retained separately for the period justified by that obligation or dispute.

HTTP logs, when retained, serve operation, security and incident analysis. Their retention depends on the default settings and log rotation mechanisms of the software on the VPS. Hostinger publishes no single retention period applying to all such software, so no uniform number of days is stated here. Retention criteria are the time needed to diagnose, resolve and follow up an incident, and any legal obligations or defence of a right; data must not be retained beyond these needs.

The VPS uses the Hostinger backup settings left at their defaults by the publisher. The provider’s documentation specifies an automatic weekly backup and retention of the two most recent weekly backups, with each new backup replacing the oldest: https://www.hostinger.com/support/1583232-how-to-back-up-or-restore-a-vps-at-hostinger/. These copies may contain statistics data and logs present on the VPS and serve the server’s technical continuity. The publisher has not set up an additional dedicated backup. These backups do not contain progress stored only on your device and do not provide a game progress restoration service.

Technical mail copies follow the provider’s retention cycles and may remain after a message is deleted from the active mailbox. You can contact the publisher about logs or copies of your correspondence.

An erasure request concerns data the publisher holds and can identify. It does not automatically order deletion of data held separately by a store or in your personal system backups. Retention required by law or needed for litigation may restrict erasure, with an explanation of its basis.

11. Your rights and requests

You may contact the publisher at contact[AT]applodistudio.com or its registered office to request access to and correction of your data. Depending on applicable law, you may also request erasure, restriction, object to certain processing or ask for a portable copy of data covered by that right. You may withdraw consent to statistics at any time; withdrawal does not make earlier consent-based processing unlawful.

Specify the service, approximate period and information reasonably needed to locate your data. Proportionate verification may be requested if there is doubt about your identity or authority to act. We do not ask you to identify a child for a general enquiry and do not obtain new identifiers solely to identify a technical visit.

The absence of child accounts and identities in visits may prevent linking some technical data to a person. If data cannot be located using available information, we will explain that limitation. Requests are handled within applicable time limits: normally one month under the GDPR, with a reasoned extension where permitted, and 40 days for access requests under Hong Kong law.

You may complain to the competent data protection authority, including Hong Kong’s Privacy Commissioner for Personal Data or your country’s authority where its jurisdiction is established. Contacting support is not a condition that removes this right to complain.

12. Security and updates

The operating system protects app storage and the website is accessible over HTTPS. Security also depends on the device, its updates and protection of adult access. No system can guarantee an absolute absence of risk.

The document’s version and date appear at the top of the page. Changes are published with an updated version; a new purpose or processing requiring a fresh choice cannot be covered by an earlier general acceptance. The language versions describe the same processing.