Privacy Policy

1. Who We Are

Flux Grid is operated by Mikisu Studio, acting as data controller for personal data processed through the Game. Contact: mikisu.dev@gmail.com.

2. What We Collect

• Leaderboard data — the nickname you choose, your completion time, and the number of moves used.
• Local gameplay data — stats, streaks, and progress stored in your browser's local storage.
• Challenge rooms — temporary nickname/room identifiers used to sync multiplayer matches.
• Analytics — anonymised usage events (e.g. game started, completed) via Google Analytics to help us improve the Game.
• Push subscriptions — if you opt in to daily puzzle notifications, we store the browser push token you provide.

We do not ask for your name, address, or payment details.

3. Lawful Basis (GDPR)

• Legitimate interest — to run the Game, power the leaderboard, and analyse aggregate usage to improve gameplay.
• Consent — for push notifications, which you can disable at any time in your browser or device settings.
• Contract / pre-contract — to deliver multiplayer challenge rooms you create or join.

4. How We Use Data

• To run daily puzzles, leaderboards, and multiplayer challenges.
• To debug, secure, and improve the Game.
• To send opt-in daily puzzle notifications.

We do not sell your personal data and we do not use it for advertising.

5. Cookies & Local Storage

The Game uses your browser's local storage to remember progress, streaks, and preferences. Analytics and session-replay providers may set their own cookies. You can clear local storage and cookies at any time from your browser settings.

6. Third-Party Processors

• Backend hosting — Lovable Cloud (Supabase) hosts the leaderboard, challenge rooms, and puzzle data.
• Google Analytics 4 — anonymised gameplay event tracking.

These providers act as processors on our behalf and may transfer data outside the EEA under standard contractual clauses or equivalent safeguards.

7. Retention

• Leaderboard entries are retained while the Game operates.
• Challenge rooms are deleted automatically after the match ends or expires.
• Analytics data follows the retention policies of the analytics providers.
• Local storage stays on your device until you clear it.

8. International Transfers

Some processors may store or process data outside the European Economic Area. Where this occurs, transfers are protected by appropriate safeguards such as the EU Standard Contractual Clauses.

9. Your EU Rights (GDPR)

If you are in the EU/EEA, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request erasure ("right to be forgotten").
• Request restriction of processing.
• Object to processing based on legitimate interest.
• Receive your data in a portable format.
• Withdraw consent (e.g. for push notifications) at any time.
• Lodge a complaint with your national data protection supervisory authority.

To exercise these rights, email mikisu.dev@gmail.com. Please include the nickname you used so we can locate any leaderboard entry.

10. Children

The Game is not directed to children under 13. If you believe a child has provided us data, please contact us and we will delete it.

11. Security

We use industry-standard measures to protect data, including transport encryption (HTTPS) and access controls on our backend. No system is perfectly secure, however.

12. Changes

We may update this Policy from time to time. Material changes will be reflected by an updated "Last updated" date above.

13. Contact

Questions or requests? Email mikisu.dev@gmail.com.