Privacy

Who is responsible

Suguru Daily (sugurudaily.com) is run by one person. I decide what is stored and why, which makes me the controller of your data under the GDPR. To ask anything about it, use the contact form.

What I store, and why

If you only play, nothing about you is sent to me beyond the puzzle itself. When you finish without an account, a random ID made in your browser lets the site keep your finishing time and put it on your account if you sign up later.

If you create an account (with an email and password, or with Google):

• your email address, to log you in. With Google, the account also keeps the name and profile picture link Google shares, but the site only ever uses the email address.
• your solves: dates, times, attempts and which cells you changed, for your streak, stats and badges
• the time a puzzle was opened, to work out how long a solve took

If you ask for the daily email reminder: your email address, your time zone and the hour you chose. A guest has to click a confirmation link in the first email before anything else is sent, and every reminder has an unsubscribe link.

If you turn on push notifications: the address your browser gives me to reach it, plus your account or random ID so a reminder isn't sent when you've already solved. Turn it off in Settings and it is deleted.

If you write to me: your message, and your email address if you add one, so I can reply. It reaches my inbox and I keep it only as long as the conversation needs.

The reason for all of this is to run the service you asked for (the GDPR's “contract” basis). Reminders and push notifications rest on your consent, which you can withdraw at any time.

What stays in your browser

The site saves a few things on your own device so it works the way you expect. They are needed to provide the features you use, so there is no cookie banner, and none of them are used for advertising or to follow you around the web:

• a login cookie, if you sign in
• your settings (theme, text size, colours, and so on) and the puzzle you have in progress
• the random ID mentioned above, plus small notes such as whether you saw the welcome dialog

You can clear all of it at any time in your browser settings.

Analytics

I use Umami, a cookieless analytics service, to see which pages are used and whether puzzles are started, finished and shared. It sets no cookies, doesn't follow you between sites and doesn't store your IP address. No email addresses or account IDs are sent to it.

Who else handles data

These services process data for me, only to run the site:

• Supabase: database and login (accounts, solves, reminders)
• Netlify: hosting
• Resend: sending the emails (reminders, confirmations, and contact messages)
• Umami: analytics, described above
• Google: only if you choose “Continue with Google” to sign in

Some of them are based outside the EU, so data can travel to other countries, under the safeguards the GDPR requires, such as standard contractual clauses. I never sell your data or share it for advertising.

How long, and your rights

Account data is kept while the account exists. Reminder and push details are removed when you unsubscribe, and push addresses are deleted when your browser says they have expired.

You can ask to see what I hold about you, correct it, have it deleted, or take a copy of it, and you can object to how it is used. To do any of these, or to delete your account, send me a message from the email address on your account. If you are in the EU you can also complain to your local data protection authority.

Changes

If this changes in a way that matters, such as a new service handling your data, I'll update this page and say so on the site. Last updated October 2026.