1. Who we are
Brainteasers Academy (the "Game") is operated by Nom Nom Games, Lda, a company registered in Portugal (company registration), acting as the data controller. You can contact us at i.joaquim@nomnomgames.net.
This policy applies to the Game on brainteasers.academy and on Facebook Instant Games.
2. The short version
3. What we collect
On Facebook Instant Games
| Data | Why |
|---|---|
| A random anonymous account identifier, created by our backend when you first play. It has no link to your Facebook identity. | To save your progress and restore it when you come back. |
| A session token, stored in Facebook's own game cloud save for your player. | So that the same anonymous account is restored on your next visit, including on another device. |
| A username and an avatar. We generate a default for you; you can edit both in your profile. | To display you in leaderboards, challenges and with friends you play against. |
| Game data: puzzles solved, scores, times, attempts, daily Run results, leaderboard ranks, challenge and campaign progress. | To run the Game, rankings and difficulty balancing. |
We do not ask for, and do not collect: your real name, email address, phone number, location, contacts, or your Facebook identifier.
On the website
You can play without an account. If you choose to sign in, we collect your email address (used for a one-time "magic link" sign-in) and the same game data as above. Progress also stays in your browser's local storage.
4. Anonymous usage analytics
We use GameAnalytics to understand how the Game is used (for example, which puzzles are started, completed or failed, and where players stop). GameAnalytics receives game events and may receive standard technical information such as platform, operating system, device type, language and approximate country, and an anonymous identifier generated by its SDK. We do not send your username, email or any Facebook information to GameAnalytics. See GameAnalytics' privacy policy.
5. Other services that receive data
- Supabase — our database and authentication backend, where account and game data are stored.
- DiceBear — avatar images are generated by
api.dicebear.com. Your avatar settings or username are used as a parameter in that image request, so DiceBear may see it along with your IP address, as for any image request. - Meta (Facebook) — if you play on Facebook, Meta runs the platform and the ads shown in the Game, and handles payments for purchases. Meta's own data practices are described in Meta's Privacy Policy.
We do not sell your data, and we do not use it to build advertising profiles.
6. Advertising and purchases
The Game may show rewarded and interstitial ads and offer purchases of puzzle packs. On Facebook, ads and payments are delivered and processed by Meta. We do not receive your payment details.
7. Cookies and local storage
We use local storage in your browser or app container to remember settings and progress. Analytics tools may also use local storage for their anonymous identifier. We do not use advertising cookies of our own.
8. How long we keep data
We keep your game data for as long as your account exists. You can ask us to delete it at any time (see section 10).
9. Children
The Game is not directed at children under 13 (or under 16 where local law requires a higher age). We do not knowingly collect data from them. If you believe a child has provided data, contact us and we will delete it.
10. Your rights and data deletion
Under the GDPR and similar laws you can ask to access, correct, export or delete your data, and to object to or restrict its processing. You can edit your username and avatar yourself in the Game.
To delete your data, email i.joaquim@nomnomgames.net. Because Facebook accounts are anonymous, please include your in-game username so that we can find your account. We will delete the account and its game data within 30 days. If you are in the EU/EEA, you may also lodge a complaint with your data protection authority (in Portugal: the CNPD).
11. Security
Data is transmitted over encrypted connections and access to our backend is restricted. No system is perfectly secure, but we limit what we collect so that there is little to expose.
12. Changes
We may update this policy. The date at the top shows the latest version. Significant changes will be announced in the Game or on this page.