Haboku privacy policy
This version of Haboku shows no ads and has no analytics. If a later version adds ads, this page will say what the ad provider collects before that version is released. Without signing in, nothing personal leaves your phone. If you sign in, we keep the minimum, and this page lists all of it. Nothing is sold or shared with anyone.
On your phone
Your progress, your settings and the puzzles you have solved are kept in the app's own storage on your phone. Uninstalling the app removes them.
Shared puzzles are codes that the app makes on your phone. You share them through Android's own share sheet. They do not pass through our server.
The puzzle of the day
The app fetches the puzzle of the day from our server, haboku.tiggertoo.uk. That request carries no account and no identifier. Like every request to this site, it reaches the server through Cloudflare, and the web server records it: the IP address it came from, the country Cloudflare reports for that address, the identifying headers sent with it and the address requested. We use this to keep the service secure and to count use. The logs are deleted after 14 days.
If you sign in with Google
Signing in is optional. It lets the server verify your scores. This is everything our server keeps about a signed-in player. We keep nothing else.
| What we keep | Why | How long |
|---|---|---|
| Google's identifier for your account: a fixed number that Google gives us. It is not your email address. | To know it is you when you sign in again. | Until you delete your account. |
| A display name: the name on your Google profile or, if it has none, the part of your email address before the @. | To show next to your scores. | Until you delete your account. |
| Your sign-in session: a SHA-256 hash of its token (never the token itself), when it was made, when you last used it and when it expires. | To keep you signed in. | It stops working 90 days after you last use it, and is deleted within a day after that. It is also deleted when you sign out or delete your account. |
| For each puzzle you solve while signed in (tutorial lessons are never sent): which puzzle, the time you took, the hints you used, when you solved it, and our server's signature over that record. | To verify and show your scores. | Until you delete your account. |
The puzzle itself (its grid) is also kept, so that other players' solutions of it can be checked. Nothing in it links it to you.
The server's own log notes a random internal account number when you sign in, when it receives a score (with the puzzle, its grade and size, your time and hints, and whether it was your first solve of that puzzle), and when you delete your account. It is not your name or your Google identifier. The log is deleted after 14 days.
Google is involved only as the sign-in provider. Google's privacy policy applies to your Google account.
Where it is kept
On our own server in the UK, on our own hardware. No third-party cloud holds it.
Deleting your data
- In the app: open Account and tap Delete my account, then tap it again to confirm. The server deletes your account, every session and every score at once.
- Signing out deletes that session from the server.
- Uninstalling removes everything on your phone.
- Without the app: see Delete your Haboku account.
Children
Haboku is for a general audience. We do not knowingly collect anything from children beyond what this page describes.
Questions
For privacy questions, ask on the Community Discord. If this policy changes, this page changes with it, and its date in the site map changes too.