Privacy Notice
Last updated: 19 May 2026
1. Who we are
Decode is operated by Olugbenga Samuel Ogunjobi, based in the United Kingdom. Olugbenga Samuel Ogunjobi is the data controller for personal data processed through the service. You can contact us through the support link in the app.
2. Data we collect
- Account data — email address and password hash, or Google account identifier when you sign in with Google.
- Game data — puzzle results, streaks, stats, and gameplay preferences.
- Support messages — anything you send us through support channels.
- Usage and device data — basic telemetry (page views, errors, device type, IP address) used to keep the service running and to diagnose issues.
- Payment data — collected directly by Paddle (see "Sharing" below); we receive only the information needed to grant your supporter access (Paddle customer ID, subscription status, plan).
3. How we use it
- Provide the daily puzzle, save your streak, and sync stats across devices (contract performance).
- Grant and manage supporter access after a purchase (contract performance).
- Keep the service secure and prevent fraud or abuse (legitimate interests).
- Diagnose bugs and improve the product (legitimate interests).
- Respond to support requests (legitimate interests / contract performance).
4. Sharing
- Paddle — our Merchant of Record. Paddle handles all payments, billing, tax, invoicing, refunds, and subscription management. See Paddle's privacy notice.
- Hosting and infrastructure providers — to run the database, authentication, and the website itself.
- Professional advisers — legal, accounting, and similar advisers where necessary.
- Authorities — where required by law.
5. International transfers
Some of our providers process data outside the UK/EEA. Where they do, we rely on appropriate safeguards such as Standard Contractual Clauses or UK/EU adequacy decisions.
6. Retention
We keep account and game data for as long as you have an account. Delete your account at any time by contacting support; we will erase or anonymise data we no longer need to keep for legal or accounting purposes.
7. Your rights (UK/EU GDPR)
You have the right to access, rectify, erase, restrict, port, and object to processing of your personal data, and to withdraw consent at any time. We will respond within one month. You also have the right to complain to your local data protection authority — in the UK, the Information Commissioner's Office (ICO).
8. Security
We use appropriate technical and organisational measures including encryption in transit, access controls, and Row-Level Security on our database.
9. Cookies and local storage
Decode uses essential cookies and local storage to keep you signed in and to remember gameplay preferences (theme, haptics, sound). We do not use third-party advertising cookies. Paddle may set its own cookies on the checkout overlay.
10. Changes
We may update this notice from time to time. Material changes will be highlighted in the app.