Privacy Policy

NoodleFuse is a daily puzzle game run by a single person in London, UK. The site lives at noodlefuse.com. If you have any questions about your data or this policy, email hello@noodlefuse.com.

The data we hold on you:

• Email address— for sign-in and account recovery. Required.
• Username— you pick this. Shown publicly on leaderboards and the activity feed.
• First name— optional, used in your hub greeting only. Never shown to other players.
• Country— auto-detected from your IP at signup, displayed as a flag next to your username on leaderboards. You can change or remove it.
• Avatar choice— which of the preset avatars you picked.
• Game records— scores, completion times, and which puzzles you played. Used for leaderboards and your stats.

That's the lot. We don't collect addresses, phone numbers, payment details, or anything else. We don't track you around the web.

Google sends us your email address, your first name, and a stable account ID so we can link your sign-ins. We use those three things and ignore the rest. We never see your Google password, contacts, calendar, or any other Google service.

We use the bare minimum. Two kinds:

• Session cookies— set by our authentication system so you stay signed in. Strictly necessary; the site can't work without them.
• Vercel Analytics— aggregate visitor stats (page views, rough country, browser type). It's cookieless by design and doesn't identify individual users or follow you across sites.

No advertising cookies, no third-party tracking, no marketing pixels. That's why you don't see a cookie banner.

Account data and game records sit in a database hosted by Supabase (servers in the EU). The site itself is served by Vercel. Email confirmations are sent via Namecheap Private Email. These are our only data processors.

We keep your account and game records for as long as your account exists. If you ask us to delete your account, we remove your personal data within 30 days. Aggregated, anonymous statistics (e.g. “total games played across all users”) may survive deletion since they don't identify you.

Under UK GDPR you have the right to:

• Ask what data we hold on you.
• Ask us to correct anything that's wrong.
• Ask us to delete your account and all associated data.
• Ask us to send you a copy of your data in a portable format.
• Complain to the UK's data protection regulator (the ICO) if you think we've mishandled your data.

Email hello@noodlefuse.com for any of these. We aim to respond within a few days.

NoodleFuse isn't designed for under-13s. If you're a parent and you think your child has signed up, email us and we'll remove the account.

If we change anything material we'll update the “last updated” date at the top and, for significant changes, email registered users.