Privacy Policy

Last updated: May 31, 2026

1. Summary

Puff Doodle is a one-tap arcade runner that lets players create, upload, transform, save, and share doodle-style game characters. Because the game includes user-generated art, AI-generated sprites, leaderboards, referrals, purchases, analytics, and possibly ads, we may process account information, gameplay data, uploaded images or drawings, prompts and character notes, generated sprites, device information, and payment records.

We do not intentionally collect personal information from children under 13 unless we first implement a lawful parent-consent flow. If you believe a child under 13 has provided personal information to us, contact us at [email protected].

2. Information We Collect

2.1 Information you provide directly

• Account information, such as email address, display name, nickname, login method, password hash if we offer password login, OAuth identifiers, and account preferences.
• User-generated content, such as drawings, uploaded images, prompts, character notes, sprite pack names, generated characters, generated reaction states, custom sounds, share messages, obstacle props, and other content you choose to submit.
• Gameplay profile information, such as selected sprite, accessibility/easiness settings, locale preferences, saved packs, referral or invite codes, and leaderboard display choices.
• Communications, such as support requests, feedback, bug reports, survey responses, email campaign preferences, and messages you send to us.
• Referral information, such as an invited friend's email address or share destination if you choose to invite someone through the Services. Only send invitations to people who would reasonably expect to hear from you.
• Age-gate or consent information if we add an age screen, parental consent workflow, or family account controls.

2.2 Information collected automatically

• Gameplay and telemetry data, such as session start, game start, run completion, score, hoop/pass events, missed-hoop events, validated run metadata, leaderboard submissions, purchases, reward redemptions, and feature usage.
• Performance and diagnostics, such as crash logs, API errors, performance snapshots, pagehide/visibility events, browser/device details, app version, operating system, network information, and approximate time zone.
• Device and usage identifiers, such as IP address, cookie identifiers, local storage identifiers, analytics identifiers, advertising identifiers if ads are enabled, and security tokens.
• Website/app interaction data, such as pages or screens viewed, buttons clicked, studio/store/share flows opened, and approximate referral source.

2.3 Information from third parties

• Authentication providers may provide account identifiers, name, email address, profile image, locale, and other information you authorize.
• Payment providers, app stores, or billing partners may provide transaction identifiers, purchase status, refund status, subscription status, tax-related information, and limited billing metadata. We do not receive your full payment card number.
• AI, moderation, hosting, analytics, email, customer support, fraud-prevention, and advertising partners may provide service-related logs, status signals, moderation results, or aggregated reporting.

3. AI Sprite Generation and Image Processing

Puff Doodle may use AI features to transform drawings or uploaded images into game-style sprites, generate character states, infer a general sprite category for sounds or cosmetics, remove backgrounds, normalize sprite size, and moderate content.

When you use these features, your inputs and outputs may be processed by SunEgg systems and by third-party AI or infrastructure providers that help us provide the Services. Do not upload sensitive personal information, private documents, images of people who have not consented, or content you do not have rights to use.

We do not use private user content to train SunEgg-owned public AI models unless we ask for separate permission. We may use deidentified, aggregated, or operational data to improve safety, reliability, performance, abuse prevention, and product quality.

4. How We Use Information

We use information to:

• Provide, operate, maintain, and improve Puff Doodle and related Services.
• Create, store, transform, normalize, moderate, and display user-generated and AI-generated sprites.
• Save game progress, character packs, settings, purchases, credits, referrals, rewards, and leaderboard entries.
• Provide accessibility/easiness settings, localized content, category-aware sounds, and gameplay personalization.
• Process purchases, taxes, refunds, fraud checks, and billing support.
• Send transactional emails, account notices, magic links or verification codes, receipts, support replies, policy updates, and security alerts.
• Send marketing messages or product updates where permitted by law and your preferences.
• Analyze usage, performance, retention, difficulty bands, conversion funnels, feature engagement, error rates, and game balance.
• Detect, prevent, and respond to fraud, cheating, abuse, security incidents, policy violations, intellectual-property issues, and illegal activity.
• Enforce our Terms of Use and comply with legal obligations.

5. Cookies, Local Storage, Analytics, and Advertising

We may use cookies, local storage, session storage, SDKs, pixels, and similar technologies to keep you signed in, remember settings, store guest status, protect the Services, measure performance, understand usage, and support ads or attribution if enabled.

Some browsers send "Do Not Track" signals. Because there is no single industry-standard response to those signals, our response may vary. Where legally required, we will honor recognized opt-out preference signals, including Global Privacy Control, for applicable sale or sharing opt-outs.

If we use personalized advertising or cross-context behavioral advertising, some data sharing with advertising partners may be considered a "sale" or "sharing" under California privacy law even when we do not sell personal information for money. Where required, we will provide a clear "Do Not Sell or Share My Personal Information" link or equivalent control.

6. How We Share Information

We may share information with:

• Service providers and processors that host data, store files, deliver email, provide authentication, process payments, support AI generation, content moderation, analytics, security, customer support, fraud prevention, app distribution, and infrastructure.
• Other players or the public when you choose to share content, appear on leaderboards, use public profile features, send invitations, publish sprite packs, or participate in social features.
• Payment processors and app stores to complete purchases, refunds, subscriptions, receipts, tax calculations, chargeback handling, and fraud checks.
• Advertising and measurement partners if ads, attribution, or promotional campaigns are enabled.
• Professional advisors, such as lawyers, accountants, auditors, insurers, and business consultants.
• Authorities, courts, or third parties when we believe disclosure is required by law, necessary to protect rights or safety, or needed to enforce our terms.
• Successors in a merger, financing, acquisition, reorganization, sale of assets, bankruptcy, or similar business transaction.

We do not sell personal information for money.

7. Public and Shared Content

If you submit nicknames, profile details, sprites, scorecards, leaderboard entries, shared packs, comments, invite messages, or social obstacle props, that content may be visible to other users or recipients depending on the feature. Do not include private information in public-facing names, images, prompts, or shared content.

8. Children's Privacy

The Services are not intended for children under 13 unless and until we launch a specific child-directed or parent-managed experience with legally required parental consent and controls. We do not knowingly collect personal information from children under 13 without verified parental consent.

If you are a parent or guardian and believe a child under 13 has provided personal information to us, contact [email protected]. We will review the request and delete or disable the account or data as required by law.

If we later decide to market Puff Doodle directly to children under 13, support classroom use by children under 13, or knowingly collect personal information from children under 13, we will update this Policy and implement legally required notice, parental consent, review, deletion, and data-minimization processes before doing so.

9. Your Choices

You may be able to:

• Update account information, nickname, saved sprites, settings, and communication preferences in the Services.
• Delete saved character packs or request account deletion.
• Opt out of marketing emails by using the unsubscribe link or contacting us.
• Limit cookies or local storage in your browser, though some features may stop working.
• Use privacy controls offered by your browser, device, app store, or advertising partners.
• Contact us to request access, correction, deletion, portability, opt-out, or other rights where applicable.

10. Privacy Rights

Depending on where you live, you may have rights to request access to personal information, correction, deletion, portability, restriction, objection, withdrawal of consent, opt-out of certain advertising or data sharing, limitation of sensitive information use, and non-discrimination for exercising privacy rights.

California residents may have rights under the California Consumer Privacy Act and related regulations if those laws apply to us, including the right to know, delete, correct, opt out of sale or sharing, limit use of sensitive personal information, and not be discriminated against for exercising rights. We do not knowingly sell or share personal information of users under 16 without required consent.

To exercise rights, contact [email protected]. We may ask for information reasonably necessary to verify your identity and locate your account. Authorized agents may submit requests where permitted by law, and we may require proof of authorization.

11. Notice at Collection for California Residents

We may collect the following categories of personal information for the purposes described in this Policy:

• Identifiers: email address, nickname, account ID, OAuth ID, IP address, device identifiers, cookie identifiers, and transaction IDs.
• Customer records: purchase records, support communications, and account records.
• Commercial information: products or credits purchased, saved packs, transaction status, reward redemptions, and subscriptions if enabled.
• Internet or electronic activity: gameplay events, feature usage, diagnostic data, analytics events, referral source, and interaction logs.
• Geolocation: approximate location inferred from IP address or device settings, not precise GPS unless a future feature asks for permission.
• Audio/visual content: uploaded images, drawings, generated sprites, thumbnails, and optional custom sound-related assets if offered.
• Inferences: preferences, difficulty band, sprite category, engagement patterns, fraud risk, moderation status, and recommended content.
• Sensitive personal information: we do not intentionally request sensitive personal information. Avoid uploading sensitive personal data in images, prompts, or support messages.

We retain these categories only as long as reasonably necessary for the purposes described in this Policy, including account operation, legal compliance, security, dispute resolution, fraud prevention, and legitimate business records.

12. Data Retention

We keep information for as long as reasonably necessary to provide the Services, maintain accounts, support purchases, enforce rules, resolve disputes, comply with legal obligations, prevent fraud or abuse, and maintain business records.

Retention periods may vary. For example, account and purchase records may be kept while your account is active and for a period afterward; telemetry may be kept in identifiable form for a shorter period and then aggregated or deleted; content removed for safety or intellectual-property reasons may be retained in limited records to prevent repeat abuse.

13. Security

We use reasonable technical, administrative, and organizational measures designed to protect information. No online service can guarantee perfect security. You are responsible for keeping your account credentials secure and for using trusted devices and networks.

14. International Users

SunEgg is based in the United States, and information may be processed in the United States and other countries where our service providers operate. These locations may have privacy laws different from those in your country.

If we offer the Services in the European Economic Area, United Kingdom, or similar jurisdictions, we will rely on appropriate legal bases for processing, such as contract performance, legitimate interests, consent, and legal obligations, and we will use appropriate safeguards for international transfers where required.

15. Third-Party Links and Services

The Services may link to third-party websites, app stores, payment pages, social networks, ad networks, authentication providers, or AI services. Their privacy practices are governed by their own policies, not this Policy.

16. Changes to This Policy

We may update this Policy from time to time. The updated version will be posted with a new "Last updated" date. If changes are material, we may provide additional notice, such as an in-app notice, email, or website banner.

17. Contact Us