Privacy Policy

About this policy

The Daily is developed and published by Scadu Games ("Scadu Games," "we," "us," or "our"). This Privacy Policy explains what the game keeps on your device, what limited information is used by platform services, and the choices available to players and families.

The game does not ask for an email address, password, legal name, birthday, postal address, phone number, precise location, contacts, photographs, camera data, microphone recordings, or social-media profile. Private League players choose a 2-to-16-character alphanumeric display name that does not need to be a real name.

The game has no chat or free-form player messages. Members of the same invite-only league can see display names, character cosmetics, round progress, placements, and completed round guess history when league rules permit it.

Information stored locally

The Daily stores information on your device so it can function and preserve your progress. This may include:

• Submitted guesses and unfinished or completed puzzle state;
• Experience, level, coins, hints, streaks, unlocks, selected backgrounds, color themes, and game styles;
• Daily and custom-game statistics, completion history, guess distributions, elapsed times, and hints used;
• Owned entitlements, fulfilled purchase-token hashes, applied-refund identifiers, and random purchase installation credentials; and
• Sound volume, display options, reduced motion, and keyboard layout.
• On ad-supported Android builds, a device-local interstitial counter and recent round identifiers used to keep ad pacing consistent across restarts without counting the same resumed round twice.

Gameplay profile and daily-progress files use Godot's encrypted-file format. Settings use a local settings file. Anonymous sign-in credentials, the Player ID, cached online profile, synchronization preferences, and League guesses awaiting upload use encrypted local files. Supported progress values are also synchronized as described below; this is not a complete backup of every local file. Your operating system or store platform may separately back up application data according to your device and account settings.

Daily puzzle timing

The Daily uses your device clock to choose the daily puzzle, calculate streaks, and show the countdown to the next puzzle day. Daily rollover follows Pacific Time. The game does not request your location or contact a time server for this calculation.

Online accounts and private Leagues

In builds with online account services enabled, the game automatically initializes an anonymous Firebase Authentication account for progress synchronization, even if Leagues is not opened. Firebase supplies an installation identity and The Daily assigns a nine-digit public Player ID. No email address or password is requested by the game. Single-player modes remain playable offline.

Google Cloud Firestore stores an opaque internal player key, Player ID, display name, avatar/body/color/expression/animation selections, settings, inventory and loadouts, linked identity records, synchronized gameplay values, and hashed per-installation synchronization checkpoints. Optional invite-only asynchronous Leagues additionally store memberships, league configuration, host actions, round start and completion times, partial and completed guesses, results, standings, and reward receipts. Limited security and audit records are also retained.

The service uses this information to authenticate players, synchronize progress, operate private leagues, rank rounds, prevent tampering and duplicate rewards, support account linking/recovery, enforce league-specific bans, investigate abuse, and maintain the service. Google/Firebase may process IP addresses, request information, and operational/security logs while serving these requests. Account and League information is not used by Scadu Games for advertising or behavioral profiling.

Steam identity is verified with a temporary Steam authentication ticket; the service stores the Steam ID and owner Steam ID. Where configured and offered, optional Google Play Games linking on Android uses Google/Firebase authentication to associate a verified Play Games identity with the player account for recovery. The game does not receive Steam or Google passwords. Linking a phone account to Steam requires its Player ID and a short-lived one-time code, not the public Player ID alone. Account-linking codes are separate from League invite codes and should not be shared with other players.

League members can see names, avatars, round progress, times, and standings. Before a viewer completes a round, another player's answer preview contains feedback colors without guess text or the answer. After completion, the recorded guesses can be viewed. Account balances and device synchronization checkpoints are not exposed to other players.

Progress synchronization and recovery

When online services are enabled and connected, The Daily sends experience, coin and hint balances, unlocks, selected backgrounds/themes/styles, daily streaks, and daily/custom statistics to the account service. Synchronization runs after profile changes, periodically, when returning to the app, and through Utilities > Account & Sync > Sync Now. The random purchase installation ID identifies device synchronization requests; the service keeps hashed device checkpoints to avoid repeatedly importing the same progress.

Linked devices use the same online account. Initial linking merges progress conservatively rather than adding both devices' entire balances. Subsequent synchronization reconciles changes since the acknowledged device checkpoint. This includes balance changes from earning/spending coins, verified purchases, and applied refunds; store verification remains separate.

Previously synchronized values can be recovered only if access to the same account is restored, such as through a linked Steam identity or a linked Google Play Games identity where that option is configured and offered. An anonymous Android account remains installation-bound until linked; losing its local credentials can prevent recovery even when its data still exists online. A public Player ID is not sufficient proof of account ownership. Store purchase records alone are not a complete record of the remaining consumable balance.

Network access and device permissions

Android builds may use internet, network-state, and advertising-ID access for Google Play Billing, purchase verification/refund reconciliation, Unity Ads, Firebase Authentication, progress synchronization, optional Google Play Games linking, and Private Leagues. Desktop builds may connect to Steamworks, purchasing services, and the account/League service.

The Daily does not request access to contacts, precise location, photographs, shared media, camera, microphone, phone records, or text messages.

Google Play and Steam purchases

The Android version can offer optional Google Play coin packs and a permanent Remove Ads entitlement. A Steam build can offer optional Steam Wallet coin packs. The store—not Scadu Games—collects your payment method and full payment details. The game does not receive your complete credit-card number, bank-account number, or store-account password.

Purchase-related information may include:

• Product identifiers, localized prices, quantity, purchase status, purchase time, and acknowledgement status;
• The application's package identifier;
• A store-issued purchase token, signature, and order identifier;
• Whether a permanent product is currently owned; and
• For Steam, a Steam ID, App ID, language, order ID, and temporary purchase-authentication ticket.

Android verification service

Before Android benefits are granted, The Daily sends the purchase token, package and product identifiers, quantity, locally retained fulfilled-token hashes, and random purchase installation credentials to the Scadu Games purchasing service. The service checks the purchase with the Google Play Developer API and verifies its state, package, product, quantity, and obfuscated installation ID.

The service keeps a transaction ledger containing the purchase token and hash, product, quantity, order identifier, random installation ID, transaction state, and refund adjustments. The installation secret is retained only as a SHA-256 hash. These records are used to prevent duplicate fulfillment, detect copied consumable tokens, restore eligible permanent entitlements, and handle refunds or chargebacks. They are not used for advertising or gameplay profiling.

Steam verification and refunds

The purchasing service verifies the temporary Steam authentication ticket and communicates with Steam's publisher-only Microtransaction API. Coin fulfillment occurs only after the service successfully finalizes the order with Steam. The service retains transaction and reconciliation records and uses Steam refund/chargeback reports to reverse coin grants when that Steam user reconnects.

Coin packs are consumable purchases. Verified grants, spending, and refund adjustments change the local balance, which participates in account synchronization when connected. Recovering a previously synchronized balance requires access to the same online account; unsynchronized changes and local processing history may be lost. The purchase ledger is not a complete spending-history backup. Remove Ads is an Android store entitlement restored through Google Play after reinstalling, not a cross-platform cloud coin entitlement.

Google and Valve retain transaction and account information under their own terms. Review Google's Privacy Policy and Valve's Privacy Policy.

Advertising in Android builds

Ad-supported Android builds use the Unity Ads SDK. Desktop builds do not include advertising.

The game requests contextual/nonbehavioral ad treatment for every player. Banners may appear on the main, Dailies, Custom game-selection, Settings, and League menus, but not during gameplay. After three distinct playable rounds, an automatic interstitial is attempted before the next new round. Resuming the same daily or League round and viewing completed results do not count again. Other-player League detail views have a separate ad gate: the first eligible view, then five further views or five minutes. Optional rewarded ads may grant an in-game hint. Purchasing Remove Ads disables banners and automatic/navigation interstitials but leaves optional rewarded ads available.

The Android interstitial counter, failed-attempt count, and up to 64 recent round identifiers are stored in an encrypted file on this device and survive game restarts. They are not part of the account-synchronized gameplay state. The counter resets when Unity confirms an interstitial started or after two failed new-round ad attempts; merely requesting an ad or watching a rewarded ad does not reset it. A new-round ad may wait up to three seconds to load. If unavailable or unsuccessful, play continues. After the first failed attempt the next new round retries; after the second, another three rounds can be played before retrying. An ad that loads late does not interrupt gameplay already in progress.

Unity and participating advertising partners may process information needed to request, deliver, limit, secure, measure, and diagnose ads. Depending on the device, region, and Unity's implementation, this can include IP address, general device and app information, the Android advertising ID when Android makes it available, app-set or other identifiers, ad interactions, consent state, and diagnostics. Scadu Games does not add this information to your local gameplay profile.

Contextual treatment restricts behavioral targeting; it does not mean that the advertising SDK processes no device or advertising information. Unity may apply consent or privacy mechanisms based on region and project configuration. For more information, review Unity's Privacy Policy.

Support communications and this website

If you voluntarily email Scadu Games, we receive the information you choose to provide, such as your email address, message, attachments, and troubleshooting details. We use it to answer your request, investigate problems, protect the game from abuse, and maintain necessary support records. Please do not send sensitive personal information in a support request.

This policy is hosted through Firebase Hosting. Google may process device, browser, network, cookie, and request information under its own privacy policy when you visit this page or use Google's email services. The game does not contact this website during ordinary play.

How information is shared

Scadu Games does not sell or rent personal information. Synchronized single-player progress and private account balances are used for account functionality, not shared with other players, social networks, or general-purpose analytics companies. Private League information is shared with members of that league as needed for rosters, progress, standings, and round review.

Google/Firebase handles information for authentication, Firestore account/League storage, cloud hosting, optional Play Games linking, Google Play distribution/billing, verification/restoration, and email support. Valve and the configured services handle Steam authentication and purchases. Unity and participating partners handle advertising information separately from account synchronization. Information may also be disclosed when reasonably necessary to comply with law, enforce applicable terms, investigate fraud/security issues, or protect users, Scadu Games, or others.

Retention, security, and deletion

Local game information remains until overwritten through normal use, cleared through device settings, or removed by uninstalling. Clearing storage or uninstalling does not itself delete the online account or synchronized data. Unsynchronized changes, local credentials, and device-only records may be lost. The online account and synchronized progress are retained while the account exists; they do not share the League-results deletion schedule.

A League becomes completed and view-only when all active players finish. Its results remain available for 30 days before scheduled deletion. An incomplete League is finalized when it expires and follows the same 30-day review window. Single-player statistics and account-level placement totals are separate account records.

You can permanently delete an online account from Utilities > Account & Sync > Delete Online Account. Confirmation requires the Player ID shown in the game. Deletion removes the online profile, synchronized progress/checkpoints, settings, online inventory and loadouts, identity links, memberships, round starts, guesses, results, and associated league audit records controlled by Scadu Games. Hosted leagues transfer to another active member when possible or close. Linked Firebase identities associated with the account are also deleted; this does not delete the Steam or Google account itself.

Deletion instructions remain available after uninstalling at The Daily account deletion page. Local single-player progress and platform purchase records are separate and are not erased by the online deletion control. Successful deletion stops automatic synchronization on that installation until account services are enabled again. Re-enabling them may create a new account and upload the remaining local progress. Limited records may be retained when legally required or necessary for transaction accounting, security, fraud prevention, or dispute resolution.

Purchase-ledger records are retained by the purchasing service as needed to prevent duplicate fulfillment, process refunds and chargebacks, maintain transaction integrity, resolve disputes, and meet legal or accounting obligations. Store providers retain their own transaction records under their policies. Advertising information is processed and retained by Unity and participating partners under their applicable policies.

Support communications are retained only as long as reasonably necessary to answer the request, troubleshoot issues, maintain appropriate business records, resolve disputes, prevent fraud or abuse, or meet legal obligations. You may request deletion of support information Scadu Games controls by contacting us.

Scadu Games uses reasonable safeguards appropriate to the information handled, including encrypted local gameplay saves, hashed installation secrets, idempotent transaction records, authenticated store notifications, and store-hosted payment flows. No storage or transmission method can be guaranteed completely secure.

Children's privacy

The planned Android store audience for The Daily is age 13 and older. Single-player modes can be played offline without manual registration, chat, precise location, or an email address. Online-enabled builds automatically use an anonymous account for synchronization. Optional Private Leagues use the Player ID and an alphanumeric display name. Scadu Games does not knowingly request legal names or direct contact information from children through gameplay.

Filtered adult or offensive dictionary entries are excluded from hidden-answer selection but may remain valid player guesses. League members may see recorded guesses after they complete the same round. These filters reduce unexpected answer content; they do not guarantee that every player-entered name or guess is appropriate for every audience.

Android advertising is configured for contextual/nonbehavioral treatment for every player, and the game does not ask for a birth date or age. Parents and guardians should supervise purchases, ad interactions, and support communications. If you believe a child has sent personal information to Scadu Games through a support request, contact us so we can review and delete information we control where appropriate.

Your choices and rights

You can:

• Play single-player modes offline without manually registering;
• Use Private Leagues with an anonymous Player ID instead of an email address;
• Decline optional purchases and rewarded ads;
• Clear local game information through device settings or by uninstalling;
• Manage Google Play or Steam purchases through your platform account;
• Link to Steam, or Google Play Games where configured and offered, for recovery, and use Sync Now to retry synchronization;
• Delete the online account and synchronized progress from Account & Sync or use the public deletion instructions; and
• Contact Scadu Games to ask about, correct, or request deletion of support information we control.

Depending on where you live, privacy law may provide additional rights. Scadu Games will respond to applicable requests after taking reasonable steps to verify them.

Changes to this policy

Scadu Games may update this Privacy Policy when The Daily's features, service providers, legal requirements, or information-handling practices change. Updates will appear on this page with a revised effective date. Material changes will also be disclosed in the game or store listing when required.

Contact

Questions or privacy requests can be sent to scadugamessupport@gmail.com.