Privacy Policy

Riddle is a word game. We collect as little as we can. This page explains what we keep, why, and how to delete it.

What we collect

• If you sign in with Google: an internal Google account identifier (never your email address or password), the username you choose, and an automatically generated Player ID. We do not store your email, name, photo or contacts from Google.
• If you play online: the display name you use in a room, and the actions needed to run the game (clues, votes, emotes). Room data is temporary game state; it is not shown to anyone outside the room.
• Anonymous statistics: counts such as how many rounds were played and whether the Odd won. These contain no names, words or identifiers.
• On your device only: your profile for solo/offline play (XP, level, coins, equipped emotes, language and settings) and your Daily Challenge progress. This stays on your phone and is not uploaded.

What we do not do

• We do not sell your data.
• We do not read your messages: the game has no free-text chat and no voice chat.
• We do not request access to your email, contacts, location or microphone.

Google sign-in

Signing in uses Google Sign-In. Our server checks the sign-in token with Google's public keys to confirm who you are. We use only your basic profile identifier, and only to give you a Player ID and your chosen username.

Advertising

The game may show ads in the future (banner in the lobby, optional rewarded ads, and an interstitial after matches). If and when ads are enabled we will use Google AdMob, ask for your consent where the law requires it, and update this policy before launch. Ads are never shown during a round.

How long we keep data

Account data is kept until you delete your account. Temporary room state is removed when a room ends or expires. Anonymous statistics are kept to improve the game.

Your choices

• You can play as a guest without any account.
• You can change your username in the app, once a day.
• You can delete your account and Player ID at any time inside the app (Account, Delete my account), or by following the steps on the account deletion page.

Children

Riddle is not directed at children under 13, and we do not knowingly collect their data. If you believe a child has created an account, contact us and we will remove it.

Security

Connections use HTTPS. Secrets are kept on the server and never in the app. No system is perfectly secure, so please use a strong Google account password and two-step verification.

Changes to this policy

If we change how we handle data, we will update this page and its date. Contact: kirostudio.dev@gmail.com.

Last updated: 6 November 2026