Privacy Policy

Effective date:

What we collect

Shople does not require registration and does not collect personal information to let you play. Your gameplay stats (games played, win rate, streak, guess history) are stored in your browser's local storage only, they never reach our servers and are not shared with us.

Server-side gameplay data

To keep the daily puzzle fair and prevent bot abuse, our servers briefly process a session identifier, your guess count, and IP address for rate-limiting. This data is used solely to enforce fair play. It is not used for advertising or profiling, and it is not sold or shared with third parties. It expires automatically: the per-session records within 48 hours of being written, and the IP rate-limiting records within two hours.

Analytics

We use Google Analytics (GA4) to understand aggregate traffic patterns (pages viewed, general location, device type). This data is not tied to your identity.

Advertising

We display ads served by a third-party advertising network. The partner has not yet been finalized and will be named here once it is. These partners may use cookies or similar technologies to serve relevant ads, generally in one of three categories: strictly necessary (site function, always on), analytics (traffic patterns), and advertising (ad personalization, third-party cookies). Where required (EU/UK/California traffic), a consent banner lets you accept or decline personalized advertising before any such cookie is set. A full cookie disclosure table will be published here once the ad network and CMP are finalized.

Legal basis for processing (GDPR)

Where GDPR applies, we rely on your consent (for advertising cookies, obtained through the consent banner) and our legitimate interest (for aggregate, non-identifying analytics) as the legal bases for processing.

Data retention

Aside from the short-lived rate-limiting data described above, we do not operate a database of user data. Analytics and advertising cookie data are retained according to our providers' own retention schedules, not by us directly.

International data transfers

Our analytics and advertising providers may process data outside your country of residence, including in the United States. Where required, these transfers rely on the provider's own compliance mechanisms (such as Standard Contractual Clauses).

Your rights (GDPR/CCPA) and Global Privacy Control

Depending on your location, you may have the right to access, delete, or object to processing of data collected via cookies. You can exercise these rights through the consent banner or by contacting support@playshople.com. If your browser or a browser extension sends a Global Privacy Control (GPC) signal, we honor it as a valid opt-out request to the extent applicable law requires.

Security

All traffic to the Service is encrypted via HTTPS. We do not collect passwords, payment information, or other sensitive personal data because none is required to use the Service.

Children's privacy

Shople is not directed at children under 13 and we do not knowingly collect personal information from children.

Changes

We may update this policy. Material changes will be reflected here with a new effective date.

Contact