1. Who we are
Tegazumi Games is a collection of online puzzles and games operated by Tegazumi, based in London, United Kingdom (referred to as “we”, “us” or “our”). Our games are offered internationally. We are responsible for deciding why and how personal information is used in operating Tegazumi Games: we are the data controller for that information. UK data protection law applies to our operations; additional laws may apply according to where players live and how we offer the service.
For privacy enquiries, account deletion or to exercise your data protection rights, use our contact form. Choose the Privacy request category and provide a reply email so that we can verify ownership and respond.
2. Information we collect
Account information: If you create an account, our authentication provider, Clerk, may process your email address, account identifier, name, profile picture, sign-in method and security information. We can access the account information needed to identify and support your profile. We do not receive your Google password, and we do not store or manage email/password credentials ourselves.
Google sign-in: If you choose Google, Google and Clerk provide the basic identity information needed to register or sign you in, such as your name, email address, profile picture and Google account identifier. We do not request access to your Gmail, Google Drive, contacts or other Google account content.
Email announcement preferences: Players may choose to receive emails about new game releases and occasional Tegazumi Games updates by ticking a separate, unchecked opt-in box during signup or enabling the switch under Account settings. No one is enrolled automatically; declining does not affect gameplay or essential service/security emails. We retain the preference, consent date, source, wording version and change history against your player record, but do not store the account email address in our games database. When email announcements are introduced, we will use the verified account email held by Clerk. Consent can be withdrawn at any time through Account settings, and every announcement email will also provide a direct unsubscribe option without requiring a login. Marketing emails are not yet being sent.
Technical and security information: Hosting, security and authentication providers may process IP addresses, device/browser information, request timestamps, diagnostic information and login/security events necessary to deliver, protect and troubleshoot the service.
Approximate country for game participants: When a guest starts a game or a signed-in player synchronises their account, Cloudflare may provide a two-letter country code based on the network connection. We retain only that code and the date it was last observed alongside the existing guest-game identity or registered player record. The code is refreshed when an eligible future visit provides newer information, at most daily if unchanged, to help us understand the geographic reach of the games and support site operations. It is an estimate, not a verified home country: VPNs and shared networks can make it inaccurate. No raw IP address, city, precise coordinates or additional tracking cookie is saved for this feature. It appears only in the administrator account/guest lists, never in public profiles or leaderboards. Historic accounts without a code show an unknown location. The code is retained with the corresponding record and can be addressed through the privacy rights options below.
Anonymous website usage counts: We record a daily aggregate count when our homepage document is requested. These counters do not store a player identifier, IP address or device fingerprint, and may include visits by automated crawlers. They help us understand basic website usage and maintain the service. We do not use these counters to identify unique visitors.
Optional gameplay and sharing insights: With your explicit opt-in, we count in-app page visits, navigation, Play/Daily selections, coarse traffic-source categories (such as direct, search or social), viewport-width classes and share-button actions (including game/card and chosen platform). Aggregate counts have no persistent visitor ID, IP address, device fingerprint, message text or public profile URL. For a signed-in player, share actions can be linked to their account and viewed by authorised administrators. A click on a social-sharing option is not proof that a post was published. You can withdraw analytics consent using Cookie settings.
Support reports: If you use our help form, we store the category, issue title, description, optional device information and any email address you voluntarily provide for a response. The report is visible only to authorised administrators. Please do not include passwords or payment information. We also keep aggregate browser failure counts by error type and asset filename, without collecting error messages, stack traces or raw IP addresses. Abuse controls use short-lived keyed tokens rather than retaining raw IP addresses in our support database.
Plus billing: Where you purchase Tegazumi Plus, Stripe processes checkout, card and billing details. We store Stripe customer and subscription identifiers, subscription status and billing period information to activate features and manage your membership. We do not store full card numbers or security codes.
Local preferences: This website may use your browser's local storage to remember light/dark mode, sound and navigation preferences. These are stored on your device rather than in a central player profile. You can turn off remembering these appearance preferences through Cookie settings in your account, or on this Privacy Policy page.
Gameplay and leaderboards: We store verified game results, completion times, initials, daily history and, for signed-in players, associated performance and rankings. Guest scores use a random browser cookie whose token is stored in hashed form. If you choose to save a guest score to an account, we link the verified results associated with that browser cookie to your signed-in player profile; we retain original guest session records to protect score integrity and avoid crediting the same daily twice.
3. Why we use information and our legal bases
- Providing accounts and requested services (contract): Signing users in, administering their accounts and providing requested game features.
- Security and service reliability (legitimate interests): Preventing abuse, troubleshooting errors, keeping the site secure and understanding whether the service functions correctly. Our interests are maintaining a safe, reliable games platform.
- Legal obligations: Handling legally required records, privacy requests or applicable compliance obligations.
- Consent, where required: Optional analytics and game announcement emails use separate, off-by-default choices that can be withdrawn independently. No marketing email service has been activated yet.
Creating an account is optional for guest-accessible games. Certain future features, such as synchronising progress across devices, may require an account.
4. Providers and sharing
We use service providers to operate Tegazumi Games, including Clerk for authentication and account security, Cloudflare for hosting, networking and infrastructure, and Stripe for optional Plus subscriptions and billing. If you choose Google sign-in, Google also processes information under its own privacy policy.
We do not sell player personal information. We may disclose information when required by law or where necessary to protect users, investigate misuse or defend legal rights, subject to applicable law.
5. International processing
Some providers may process information outside the UK or European Economic Area. Where required, we rely on the applicable legal transfer mechanisms and safeguards arranged with those providers, such as adequacy arrangements or contractual protections. Contact us for more information about applicable safeguards.
6. How long information is kept
We generally retain information needed for an active account while that account exists, and security/technical information only as long as reasonably necessary for its purpose. Exact technical log and authentication retention periods may depend on the relevant provider and its settings.
Optional analytics aggregate counters are kept for up to 90 days; authenticated share-action history is kept for up to 30 days and is removed when the corresponding account is deleted.
Resolved or archived support reports are automatically removed after 90 days without further updates; open reports remain until reviewed. Aggregate browser diagnostics are retained for 30 days, and temporary rate-limit tokens expire after a short period. Formal privacy rights requests and complaints may be retained for up to 24 months after closure to document our response and meet legal requirements, subject to review. A report may be removed earlier where required by applicable privacy law.
If you request account deletion, we will review and act on the request without undue delay, ordinarily responding within one month as required by UK data protection law. We will arrange deletion of account information for which erasure is required, including coordinating with Clerk and removing associated game records.
Residual copies may remain temporarily in security logs or backups, or longer where retention is necessary and lawful (for example, to meet a legal obligation or defend a claim). Our goal is for copies in backups we control to be removed through their normal rotation within 90 days after account deletion, where technically supported. This is a target, not a claim that all third-party systems currently apply an identical 90-day schedule. We will review the provider settings and deletion process before public launch.
7. Cookies and device storage
Necessary storage: Clerk and our infrastructure providers may set cookies or related storage for sign-in, security, fraud prevention and maintaining an authenticated session. Our own guest-session cookie supports submitting verified guest scores and claiming them after registering. Declining optional tracking does not prevent these requested features from working. Clearing site data may sign you out or prevent linking previously submitted guest scores to a newly created account.
Appearance preferences: Browser local storage remembers your selected colour theme, navigation layout, sound preferences and certain toolbar positions. These preferences do not serve advertising. You can use Cookie settings on this page to turn off remembering appearance preferences and remove the stored values; changes you make still work for the current visit. Some gameplay saves and account security data remain necessary for features you request.
Usage counts: Our server maintains aggregate page request counts without using an identifying browser cookie or tracking visitors individually. This is separate from device-storage analytics.
Optional analytics: First-party gameplay and sharing insights are off by default. They are activated only when you explicitly allow “Gameplay and sharing insights” in Cookie settings, which you can reopen to withdraw consent at any time. Sharing records are visible only in the administrator console, and no marketing or advertising trackers are used. The first-visit notice acknowledgement does not grant consent. Withdrawing consent stops future collection; you may separately request deletion of personal records.
To erase cookies or other browser-held data manually, use your browser's site-data controls. This may clear local preferences, guest-score association and sign-in sessions. You can also contact us through Support with questions about our use of cookies.
Manage your personal data
Download a copy of your account information, permanently close your Tegazumi Games account and linked Clerk sign-in, or submit a privacy rights request or complaint. You do not need to visit Clerk separately.
Signed-out users will be asked to sign in before downloading or deleting account data. If you cannot access your account, use the privacy request form instead. Erasure may exclude records we must legally retain.
8. Your data protection rights (including GDPR)
Under the UK GDPR and, where applicable, the EU GDPR, you may ask us to access, correct, delete, restrict or transfer your personal information, subject to relevant legal conditions and exceptions. Players in other countries may have additional privacy rights under their local laws. You may also object to processing based on legitimate interests, and withdraw consent where consent is the legal basis. Withdrawing consent does not affect earlier lawful processing.
Use our privacy request form to make a request. We may need to verify your identity before sharing or changing account information. You can also complain to the UK's Information Commissioner's Office (ICO) if you are unhappy with how we handle your information. EEA residents may also have rights to contact their local supervisory authority.
9. Children and privacy
Our games may be of interest to younger players. We do not require an account to browse the site. Leaderboards can display submitted results and guest initials; signed-in player profiles are private by default unless the player chooses to make them public. If you are a parent or carer with a concern about personal information associated with a young player, please contact us.
We are assessing safeguards appropriate for younger users, including the UK Children's Code. Please contact us if you need help removing a child's information or reporting inappropriate content.
10. Security, changes and contact
We use reputable infrastructure and managed authentication services and take reasonable steps to protect personal information. No internet system can be guaranteed completely secure.
We may update this policy when our games, account features, providers or legal obligations change. The latest version and date will be published on this page. For questions, use our contact form.