Privacy Policy

Last updated: 13 May 2026

Introduction

Nap'Sac ("we", "our", or "the app") is a puzzle adventure game. We respect your privacy and are committed to protecting your personal data. This policy explains what information we collect, why, and how we use it. The app and website are operated from the European Union and we comply with the GDPR.

Information We Collect

We collect the following data to provide the game experience:

  • Player ID: a randomly generated unique identifier (UUID) stored locally on your device. You can play entirely anonymously using only this ID.
  • Account information (optional): if you create an account, we store an email address, a hashed password, and an optional display name (username). This is only used to sync your progress, recover access, and display you on leaderboards or to friends.
  • Game progress: puzzle attempts, solutions submitted, scores, stars earned, attempt counts, time spent, and timestamps. Stored locally and synced to our servers for leaderboards, weekly arenas, and progression.
  • Gameplay interactions: the sequence of tiles you tap during each puzzle, used to improve puzzle design and detect cheating.
  • Social data (optional): if you use the friends feature, we store your friendship links, challenges sent and received, and battle results.
  • Preferences: language, theme, and notification preferences.
  • In-game purchases: records of characters and world objects purchased using in-game stars. No real money is ever involved.

What We Do NOT Collect

  • We do not collect your location data.
  • We do not access your photos, contacts, or any personal files.
  • We do not use advertising trackers or third-party analytics SDKs.
  • We do not process any real-money payments or financial information.
  • We do not sell or share your data with advertisers.

Legal Basis (GDPR)

We process your data on the following legal bases: performance of a contract (providing the game and account features you requested), our legitimate interest (anti-cheat, anomaly detection, balancing), and your consent (optional notifications and account creation). You can withdraw consent at any time by disabling features or deleting your account.

How We Use Your Data

  • To provide game functionality: saving progress, computing scores, awarding stars and medals.
  • To power leaderboards, weekly arenas, battles and friend challenges.
  • To improve the game: aggregated data helps us balance puzzle difficulty and detect bugs.
  • To enable cross-device play when you create an account.
  • To send optional reminders for the daily quiz (only if you enable them).

Leaderboards & Social Features

If you participate in the Daily Quiz, Weekly Arena, Battles or global leaderboards, your username (or anonymized player ID if no username is set) and scores are publicly visible to other players. You can play and progress without ever setting a username — anonymous players appear as a short code on leaderboards.

Notifications

The app may request permission to send local notifications to remind you about the daily quiz or pending friend challenges. Notifications are entirely optional and can be disabled at any time in app settings or in your device settings.

Data Storage & Security

Game data is stored locally on your device using an SQLite database. When online, your progress is synced to our servers hosted in the European Union. All data transfers use HTTPS. Passwords are securely hashed (Argon2 / PBKDF2) and never stored in plain text. Backups are encrypted at rest.

Data Retention

Account and game data is retained while your account is active. When you reset progress in an arena, previous attempts are soft-deleted but may be retained on our servers for up to 12 months for game balancing and anti-cheat. Closed accounts are fully deleted within 30 days, with anonymised leaderboard records retained as score-only entries.

Your Rights (GDPR)

Under the GDPR you have the right to access, rectify, port, restrict or delete your personal data, and to object to processing. To exercise any of these rights, contact us at the address below. We will respond within 30 days.

Third-Party Services

The app may use the platform's built-in in-app review system (Apple/Google) to ask for feedback and the platform notification services to deliver reminders. No personal data is shared beyond what these platforms handle natively. We do not embed any third-party advertising or analytics SDK.

Children's Privacy

Nap'Sac is suitable for all ages. Anonymous play does not collect identifiable information. Account creation is restricted to users 13 and over (16 and over in some EU jurisdictions). We do not knowingly collect personal information from younger children.

Data Deletion

You can delete all local data by uninstalling the app. To request deletion of server-side data — including your account, game progress, friends and all associated records — contact us at the address below. Deletion is irreversible.

Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. Material changes will also be announced in the app.

If you have any questions about this privacy policy, please contact us at contact@norse.be.