Privacy Policy – Network Puzzle / SoyleApps

Last updated: 28 July 2026

1. Controller

SoyleApps
Am Feger 5
71063 Sindelfingen
Germany

Email: support@soyle.online

No data protection officer has been appointed because there is currently no legal obligation to appoint one.

2. Scope

This Privacy Policy applies to the Network Puzzle mobile game for Android and iOS, its online service at network-puzzle.soyle.online, and the Network Puzzle legal and support pages on soyle.online.

Network Puzzle can be played locally. Online features create a pseudonymous online profile so that ranked puzzles, public rankings, leagues, nickname moderation, profile export, deletion, and purchase restoration can work.

3. Data stored only on your device

The app stores game progress locally, including campaign levels, lives and regeneration times, achievements, Daily histories and streaks, personal bests, tutorial progress, sound and haptic choices, theme, language, reduced-motion choice, blocked-profile cache, queued ranked submissions, and a cached ad-free entitlement.

A refresh credential for the pseudonymous online profile is kept in Android Keystore or Apple Keychain protected storage. Local data is not automatically uploaded unless it is needed for an online feature described below. Clearing the app's storage or uninstalling the app removes local data according to the device operating system. Deleting the online profile does not automatically delete unrelated offline campaign progress already stored on the device.

4. Pseudonymous online profile and credentials

When the online service is used, the app creates a random profile identifier and a random public nickname. You may change the nickname in Settings. We store the profile identifier, nickname, profile creation time, nickname-change time, and profile status.

We do not require an email address, telephone number, real name, password, social login, date of birth, address book, precise location, camera, or microphone for the online profile. Server credentials are stored as cryptographic hashes. The app receives short-lived access credentials and a rotating refresh credential so it can prove control of the profile.

5. Ranked gameplay, ratings, and leagues

For Daily and competitive play, we process puzzle identifiers and descriptors, game mode, generator version, attempt start and completion times, clockwise tile/server actions, active solving time, move and minimum-move counts, assistance status, verification result, score, rating, placement progress, division, league membership, and season results.

Public ranking and league entries can show the pseudonymous profile identifier, public nickname, rank, puzzles solved, move efficiency, active solving time, rating or league points, and related performance values. Do not use a nickname that reveals information you do not want to make public.

6. Reports, blocking, and moderation

If you report another player, we process the reporting and reported profile identifiers, report category, optional details you submit, status, and timestamps. Blocking stores the two affected profile identifiers and the block time.

Moderation records can include the moderator identifier, affected pseudonymous profile identifier, action, reason, related report, and timestamp. These records are used to protect players, enforce ranking rules, handle abusive nicknames, prevent fraud, and document moderation decisions.

7. Purchases and ad-free entitlement

The optional non-consumable product remove_ads is sold by Google Play or the Apple App Store. Payment details such as card or bank information are handled by the applicable app store and are not received by SoyleApps.

To verify, restore, acknowledge, and revoke the entitlement, we process the store, product identifier, hashed purchase token, external and original transaction identifiers, purchase state, provider status, purchase/verification/revocation timestamps, and the profile-entitlement association. We also process signed store notifications and reconciliation information. Raw Google purchase tokens are not retained in the database.

8. Advertising and consent choices

The free version uses Google AdMob through the Google Mobile Ads SDK for banner, interstitial, and optional rewarded advertising. Rewarded advertising is offered for an optional time extension; competitive Ranked Arena attempts do not offer that extension.

Google states that the Mobile Ads SDK automatically collects and shares IP address, app/ad interactions (such as app launches, taps, and video views), diagnostic and performance information, and device or account identifiers such as the Android advertising ID or app-set ID, for advertising, analytics, and fraud-prevention purposes. On iOS, information may also include device identifiers, viewed-ad data, performance data, and ad interactions depending on device settings and consent.

Where required in the EEA, United Kingdom, or Switzerland, the app uses Google's User Messaging Platform and certified consent process before requesting ads. You can reopen available privacy and cookie choices in the app under Settings. On iOS, the system tracking permission may also be requested; refusing tracking does not prevent contextual or limited ads where available.

Google processes advertising data under its own terms and privacy policy. More information is available in the Google Privacy Policy. Network Puzzle does not currently include a separate first-party analytics or crash-reporting service; ad-related diagnostics and analytics described above are part of the advertising SDK.

9. Server, security, and diagnostic data

When the app communicates with our service, web server and application logs can process IP address, request time, requested route, request method, status code, request identifier, response duration, user agent, and technical error information. Authorization credentials and request bodies are not intentionally written to application logs.

This data is used to provide the service, rate-limit abuse, investigate failures, secure profiles and purchases, and operate backups and recovery.

10. Support and website data

If you contact us, we process your email address, message, attachments, and any profile or technical information you choose to provide. Please do not send passwords, raw purchase tokens, or unnecessary personal information.

The Network Puzzle legal pages do not use website analytics, advertising scripts, or tracking cookies. They use browser local storage only to remember the selected English or German language. Web server logs can process the technical data described in Section 9.

11. Purposes and legal bases

• Providing the game and requested online features: Art. 6(1)(b) GDPR, including profile operation, rankings, leagues, exports, deletion, and entitlement verification.
• Consent-based advertising or device storage: Art. 6(1)(a) GDPR and applicable ePrivacy rules where consent is required. Consent can be withdrawn through the available privacy choices without affecting prior lawful processing.
• Security, fraud prevention, service reliability, contextual advertising, and proportionate moderation: Art. 6(1)(f) GDPR, subject to the applicable consent and objection rules.
• Legal and accounting duties: Art. 6(1)(c) GDPR where records must be retained.
• Support requests: Art. 6(1)(b) GDPR and/or Art. 6(1)(f) GDPR, depending on the request.

12. Recipients and service providers

• Google AdMob / Google Mobile Ads and User Messaging Platform: advertising, consent, measurement, diagnostics, and fraud prevention.
• Google Play and Apple App Store: payment processing, purchase verification, refunds/revocations, and store notifications.
• Hosting and infrastructure providers: operation of the website, API, PostgreSQL database, encrypted connections, logs, and backups.
• Email provider: delivery and handling of support and deletion requests.

Service providers receive only data required for their task. Public ranking information is visible to other Network Puzzle players as described in Section 5.

13. International transfers

Our own Network Puzzle backend is hosted in Germany. Google, Apple, and their service providers may process data outside the EU/EEA. Where required, such processing is based on adequacy decisions, standard contractual clauses, or other lawful safeguards described by those providers.

14. Retention and deletion

• Online profile, credentials, ranked results, ratings, league memberships, reports, blocks, and profile-linked entitlements: retained while the profile exists and deleted when the profile is deleted, except where a separate legal or security retention basis applies.
• Purchase and store-event records: hashed tokens, transaction references, status, and revocation records may be retained after profile deletion as necessary for entitlement restoration, fraud prevention, store reconciliation, accounting, or legal claims.
• Moderation audit records: a pseudonymous profile reference, action, reason, and time may be retained as necessary to demonstrate and secure moderation actions. Public nickname/profile data is removed with the profile.
• Technical logs: retained for a limited operational period according to server and log-rotation settings, then deleted or overwritten unless needed to investigate a specific security incident.
• Database backups: the operational backup schedule currently retains backups for 14 days. A restored backup must reapply deletion requests made after that backup before normal service resumes.
• Support requests: retained until the request is resolved and afterward only as required for follow-up, security, or legal duties.
• Advertising data: retained by Google according to consent choices, Google's policies, and applicable law.

15. Your rights

Subject to applicable law, you have rights of access, rectification, erasure, restriction, data portability, and objection, and the right to withdraw consent. The app offers profile-data export, nickname correction, advertising privacy choices, and permanent online-profile deletion in Settings.

You may also contact support@soyle.online. You have the right to lodge a complaint with a data-protection supervisory authority. The competent authority in Baden-Württemberg is the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg (LfDI BW).

16. Online-profile deletion

Use Settings → Online profile → Delete online profile for immediate authenticated deletion. If you no longer have the app, use the web deletion-request page to contact support without reinstalling it.

Deletion of the online profile does not cancel or erase the purchase from the app-store account and does not automatically remove local offline progress. Details are provided on the deletion page.

17. Children and family use

Network Puzzle is a general-audience puzzle game. It does not ask for a date of birth or child-specific profile information. Purchases should be made by adults or with the authorization of a parent or guardian. If you believe a child has provided personal data without appropriate authorization, contact us so we can investigate and delete it where required.

18. Automated decisions and changes

Performance calculations, puzzle validation, ratings, and league placement are automated game mechanics. They do not produce legal or similarly significant effects within the meaning of Art. 22 GDPR. Moderation sanctions can be reviewed by contacting support.

We may update this Privacy Policy when the service, providers, or legal requirements change. The current version is always published at this URL.