Your information

Privacy policy

Last updated: October 15, 2026

Shufolio is published by sycamoresky.com. This policy covers shufolio.com and the current Shufolio game, including its testing versions. For privacy questions or requests, contact support@shufolio.com.

Playing and saving progress

The game saves your unfinished puzzle, settings, downloaded pictures and hint balance on your device. Clearing the app or browser’s stored data can remove these local saves.

When online, the game can create a guest identity through Google Firebase. Google sign-in is optional. If you sign in, Firebase processes account details provided by Google, such as your account identifier, name and email. Completed puzzles can sync through Firebase, including the picture, grid size, moves, time played and completion time. The unfinished puzzle and hint balance currently stay on the device.

We use this information to run the game, restore completed progress and associate saves with the correct account. We do not ask for access to your contacts, microphone or precise device location.

Feedback you choose to send

A feedback report contains your message and a private app identity. You can include a reply email, a screenshot of the puzzle, and device and puzzle details. The form lets you review those details or leave them out. They include the app version, browser/platform, screen size, picture, grid, moves, elapsed play time and tile-lock setting.

Drafts stay on the device. Selecting Send queues a report for delivery, including automatic retries while the app is open. We store submitted reports privately in Firebase and use them to investigate problems, improve Shufolio and reply when you supply an email. Other players cannot read them. The optional screenshot captures only the puzzle.

Optional ads

The Android game integrates Google AdMob for rewarded ads that players request to receive hints. Availability depends on your connection, location, privacy choices and app version. Browser testing may offer an explicitly labelled simulated ad instead.

Google’s advertising SDK can process IP addresses, advertising or device identifiers, interactions with ads and diagnostic information for advertising, measurement and fraud prevention. An IP address may indicate an approximate location. Data handling depends on the applicable consent choices and ad configuration. See Google’s privacy policy and Google’s advertising data disclosure.

Where available, use Settings → Ad privacy options to review advertising choices or withdraw consent. You can continue playing without choosing personalized ads. Declining personalization does not necessarily prevent limited ads from being offered. The website’s puzzle demo has no ads.

The website and hosting

The website serves its pictures and fonts directly and does not include advertising or analytics scripts. Its puzzle demo runs in your browser and does not upload your moves or create an account.

Our hosting and network providers process connection information such as IP address, request time, requested page and browser information to deliver and protect the website and picture downloads. When Cloudflare’s proxy is enabled, it also processes traffic for delivery and security under Cloudflare’s privacy policy.

Providers and international processing

Google Firebase provides authentication and cloud storage for progress and feedback. Hosting providers deliver the website and pictures. Google AdMob provides the optional native ads. Authorized administrators can access feedback to provide support. We may also disclose information when required by law or necessary to protect the service and its users.

These providers may process information outside your country. Our Firestore databases are configured in the United States; other provider services may process data elsewhere. Google describes its safeguards and processing terms in Firebase privacy and security information.

Retention and deletion

Local data stays on your device until you, the app or your browser remove it. Cloud accounts and completed progress have no automatic expiry. You can ask us to delete them.

We delete feedback reports manually. Marking a report as reviewed does not delete it, and reports do not expire automatically.

You can request deletion of your Shufolio account, cloud progress or feedback at our data deletion page. We may need information that lets us identify your records and verify ownership. Deleting Shufolio data does not delete your Google account. Limited records may be retained when required by law or needed to handle security issues or outstanding requests; we will explain any applicable exception.

Your privacy choices and rights

Depending on where you live, you may have rights to access, correct or delete your information, receive a copy, restrict or object to processing, withdraw consent, or complain to your data protection authority. Contact support@shufolio.com to make a request. Where advertising privacy options apply, they also provide a way to exercise the choices offered for your region.

Where European data protection law applies, we rely on the applicable basis for each purpose: providing requested account and save features, our legitimate interests in support and service security, consent where required for advertising, and legal obligations where relevant. Withdrawing consent does not affect processing already carried out on that basis.

If you are a parent or guardian concerned about information a child submitted, contact us so we can investigate and arrange removal where appropriate.

Changes and contact

We will update this page when Shufolio’s data practices change and update the date above. New features that require a separate choice will present that choice in the app.

Publisher: sycamoresky.com
Support and privacy: support@shufolio.com