Privacy notice

Your game, your choices.

This notice explains what information SPINGO processes, why it is used, how long it is kept and what rights you have under the EU General Data Protection Regulation.

Effective: 14 August 2026 · Controller: SPINGO, Estonia · Privacy contact: secure contact form

1. Scope

This policy applies to spingo.ee, the SPINGO browser game, the SPINGO Android and iOS applications, daily leaderboards, live duels, shared puzzles and related pages. SPINGO does not require an account and does not ask for a real name, date of birth, postal address or payment details.

2. Information processed

Information stored only on your device

Your selected language, visual theme, sound setting, nickname, personal best and temporary duel token are stored in browser or application local storage. This lets the game remember preferences without creating an account. You can remove these values by clearing site or app data, or by uninstalling the application.

Scores and nicknames

When you submit a completed score, the chosen nickname, score, best combo, run duration, game mode, daily run identifier and submission time are sent to the server. Do not use your real name or include contact information in a nickname. Leaderboards display the nickname and best result publicly.

Live duels

A duel uses a random room identifier and private player token. The server temporarily processes each player’s nickname, score, mistake state and finish state so both participants can see the match. Duel rooms expire automatically and are not used to build advertising profiles.

Technical information

The hosting infrastructure may process IP address, request time, requested URL, browser user-agent and security logs to deliver the site, prevent abuse and investigate failures. These logs are not published.

Contact requests

When you use the contact form, SPINGO stores the email address, optional name, selected topic, message and submission time so the operator can review and answer the request. The form does not store your IP address in the database.

Advertising and analytics

On the website, after AdSense is enabled, Google and its approved advertising partners may use cookies, web beacons, IP addresses or similar identifiers to deliver, measure and protect advertising. Yandex Metrica analytics is loaded only after the applicable consent flow permits analytics storage. Advertising and analytics choices are managed through Google’s certified consent platform for visitors in the EEA, United Kingdom and Switzerland. The current Android and iOS applications do not load AdSense or Yandex Metrica and do not collect advertising identifiers.

Learn how Google processes data on partner sites: How Google uses information from sites or apps that use its services. Yandex’s privacy information is available at yandex.com/legal/confidential.

3. Purposes and legal bases

4. Recipients and international transfers

Data may be processed by the hosting provider, Google advertising services and Yandex analytics as described above. When SPINGO is opened as a Telegram Mini App, Telegram provides signed session data such as the Telegram user ID, username, display name, language and optional profile photo. SPINGO validates this data on its server and uses it to initialise the player nickname and Mini App experience. The bot token is never sent to the browser. These providers may process information outside Estonia or the EEA using their applicable contractual safeguards and transfer mechanisms. SPINGO does not sell player identity data.

5. Retention

Public score records are kept while the leaderboard feature operates or until removal is reasonably requested and verified. Temporary duel data expires automatically. Contact messages are normally retained for up to 12 months after the last relevant correspondence. Operational logs are retained only as long as reasonably needed for security and diagnostics. Browser preferences remain on your device until you remove them.

6. Your GDPR rights

If GDPR applies, you may request access, correction, deletion, restriction, portability or objection, and you may withdraw consent at any time. Because SPINGO does not create accounts, a nickname alone may not be enough to prove that a public score belongs to you. We may request reasonable details about the submission to prevent deletion of another player’s result.

Send requests through the privacy contact form. You may also complain to the Estonian Data Protection Inspectorate or your local supervisory authority.

7. Children

SPINGO is a general-audience puzzle and is not directed specifically at children under 13. Do not submit personal information through a nickname. If you believe a child has provided personal data, contact us so it can be reviewed and removed.

8. Security and changes

Reasonable technical measures are used to limit access, validate submitted data and keep services available, but no internet transmission is completely secure. Material policy changes will be published on this page with a revised effective date.