Privacy policy
Last updated: 17 October 2026
Operator: Antoni Karolewski, a sole proprietorship trading as Rootcause Games, NIP 9512445307, registered in the Polish business register (CEIDG), where the registered address is public. Contact: support@doodli.io.
The short version
Hukola is a daily puzzle game. It has no ads and no tracking across other sites. It stores your progress on your own device, and sends one thing to a server: your score for each game, so the app can show how you did against everyone else.
What stays on your device
Your results, your streak, which games you finished today and whether Unlimited is unlocked are stored in your browser’s local storage (or the app’s storage on a phone). Clearing site data removes them.
What we collect
- A random guest ID. When you play, the app signs you in anonymously. This creates a random ID with no name, e-mail or phone number. It lets your score count once per game per day.
- Your scores. For each game: the day number, the game and your points (0 to 100). These are combined into the daily crowd statistics, such as the median and the histogram.
- An account, only if you create one. If you choose to sign in, our sign-in provider (Clerk) stores your e-mail address or the social login you pick, and an optional display name. We use it so one identity follows you across devices.
- Newsletter, only if you tick the box. If you agree, we keep a note on your account that you want our e-mails and when you agreed, and we use your account e-mail address to write to you about Hukola. The box is never ticked for you. You can switch it off at any time in Settings, and every e-mail will say how to unsubscribe.
- Payment details, only if you buy Unlimited. Payments are handled by Stripe on the web, and by the Apple App Store or Google Play in the apps. We never see or store your card number. We store only that your purchase happened.
- Anonymous visit counts. We use Vercel Web Analytics, which counts visits, the screens people open and a few events (such as “a game was finished”) without cookies and without identifying you.
- A bot check. To stop scripts from filling the scoreboard with fake guests, we use Cloudflare Turnstile when a guest is created. It runs in the background and may look at your browser and network details to tell people from bots. Clerk also runs a bot check when you create an account.
- Technical logs. Our host (Vercel) keeps ordinary server logs, such as IP address and browser type, for security and to keep the service running.
What we do not do
We do not sell your data, show ads, or build advertising profiles. We do not use your scores for anything other than the crowd statistics and your own history.
Who processes data for us
Supabase (database and anonymous sign-in), Clerk (accounts, if you use them), Cloudflare (bot check), Stripe, Apple and Google (purchases), and Vercel (hosting). Each handles data under its own privacy policy and, where needed, standard contractual clauses for transfers outside the EU.
How long we keep it
Scores are kept so the daily statistics and history stay correct. Anonymous guest IDs that have not been used for a long time may be deleted. If you have an account and want it deleted, write to us and we will remove it and the scores tied to it.
Your rights
Under the GDPR you can ask to see, correct, export or delete the data we hold about you, and object to its use. You can also complain to your national data protection authority. Write to the contact address above.
Children
Hukola is not directed at children under 13, and we do not knowingly collect their data.
Changes
If this policy changes in a way that matters, we will update the date above and, for big changes, tell you in the app.