Privacy Policy — Tulpor Puzzle Club

Last updated: 17 October 2026

Tulpor Puzzle Club (package uz.tulpor.puzzleclub) is a collection of puzzle, quiz, arcade and board games for Android by Tulpor. There is no e-mail, phone number or password account; signing in with Google is optional and only used to find your cloud save on a new phone. This page explains what stays on your phone, what our server keeps, and what our advertising partner receives.

On your phone

Your progress: stars and levels per game, coins, skins, settings, achievements and duel statistics.
Your year of birth — used to decide whether you are under 13 (then ads are child-directed and your photo is never sent). It is never shown to anyone; it travels to our server only inside your cloud save (below), so a restored phone keeps the right ad settings.
If Android backup is on, Android keeps a copy in your own Google account backup; we cannot read it.

On our server (ranking, online duels, cloud save, support, notifications)

Our own server (api.tulpor.com, hosted by Hetzner in Finland) keeps:

A random club ID and a secret created on your phone (no personal identifier).
Your nickname (unique, checked by a word filter; it can be changed once every 15 days), an avatar colour, your country (chosen by you; changeable once every 15 days) and, if you add one, a small profile photo (96×96 pixels). Players under 13 never send a photo.
Your results: total stars, stars per game, number of finished levels, and for chess and checkers your rating and win/loss/draw counts.
During an online duel: the moves of the game and the clocks, kept in memory only while the game lasts (plus about two minutes).
Cloud save (on by default, can be turned off in Settings → Save your progress → Cloud save): a copy of your progress — stars, levels, best scores, coins, skins, settings, nickname, avatar or photo, country, year of birth, duel statistics and your purchase records (below) — stored under your club ID so it is not lost and can be restored. It is updated after wins and purchases and when the app goes to the background.
Purchase records: for each Google Play purchase, the product (for example “coins_7000”), the Google Play order number, the time and the coins it gave, plus a short one-way hash of the purchase token, so a purchase is counted exactly once even across two phones. We never receive or store card or bank details — payments are handled entirely by Google Play. New purchases carry a hash of your club ID as Google Play's “obfuscated account id”, so a purchase can be matched to your club profile.
Google sign-in (optional, “Save your progress”): we receive a Google ID token, check it with Google's public keys and keep only a salted one-way hash of your Google account's ID, linked to your club ID. We do not store your e-mail address, name or photo from Google (your first name is shown only on your own phone).
Support messages (Settings → Help / Report a problem, or “Problem with a payment?” in the shop): your message, an optional contact you type (Telegram name or e-mail) and what the window says it adds — for a missing purchase your recent purchase records, for a bug or idea the app version, phone model, Android version, club ID, app language and screen. The message is forwarded to the Tulpor team in a private Telegram chat so we can answer quickly; our reply is shown in the app's inbox. Refunds, cards and cancelling a subscription are handled by Google Play and need no message to us.
Push notifications (off until you turn them on — the app asks you itself after you complete a world, or you use Settings → Notifications; Android 13 and newer then also ask for permission): the notification token that Google Firebase Cloud Messaging gives this app on your phone, your club ID, the app language, your country, the kinds of messages you chose (news, daily-gift reminder, league results), your time zone offset and the date you last opened the app. They are used only to send you those messages (for example to players of one language) and are deleted when you turn notifications off, when you delete your online profile, or when Google reports the token as no longer valid. Messages are delivered through Google Firebase Cloud Messaging, which receives the token and the message text for delivery. We send few messages; an automatic daily-gift reminder (at most once a day, only if you chose it and did not open the app that day) is off unless we announce it.

Other players can see your nickname, avatar or photo, country and results in the rankings and in duels. Nothing is sold.

Anonymous usage statistics

To learn which games people enjoy and where levels are too hard, the app sends small anonymous counters to our own server (api.tulpor.com) — for example “Sudoku opened 3 times, 4 minutes played, level band 11–20 won”, the app language and the chosen country. No name, nickname, profile id, photo, advertising id or device id is sent. A random install key (not linked to your profile) and the install day are used only to count daily players and how many come back; the server keeps a one-way hash of it for one day and then only the totals. Phones of players under 13 send the counters without that key. Nothing is shared with other companies. You can turn the counters off with Settings → Usage stats and error reports (on by default).

Crash and error reports (Google Firebase Crashlytics)

When the app crashes or one of its screens hits an error, a technical report is sent to Google Firebase Crashlytics so we can fix it: the error and where in the app it happened (code location, the screen and the game open at the time), the app version, Android version, phone model, free memory and storage, and a random Crashlytics installation ID. It contains no name, nickname, club ID, e-mail or photo — the app removes e-mail addresses, web addresses and long numbers from error texts before sending. Reports are kept by Firebase for up to 90 days and are used only to find and fix problems. The same switch, Settings → Usage stats and error reports, turns crash reports off (on by default).

Advertising (Google AdMob)

The app shows ads through Google AdMob: banners in menus, a full-screen ad between some levels, and rewarded ads only when you choose to watch one (for a hint, extra moves or coins). AdMob may use your device's advertising ID, approximate location and app interactions to show and measure ads, as described in Google's advertising policies. In the EEA and the UK you are asked for consent first (Google User Messaging Platform). For players under 13, ad requests are marked as child-directed and non-personalised. You can reset or delete the advertising ID in Android settings.

Permissions

Internet — ranking, duels, cloud save, support messages, notifications, error reports and ads. Vibration — small haptic effects. Photos — only if you pick a profile photo yourself (the system picker; the app never reads your gallery on its own). Notifications (Android 13 and newer) — asked only after you say yes to the app's own question or turn on Settings → Notifications; never at first start.

Children

The app is suitable for all ages. Players under 13 (by the year of birth they enter) get child-directed, non-personalised ads, and their photo stays on the phone.

Keeping and deleting your data

The cloud save, purchase records and support messages are kept while your online profile exists. In the app: Settings → Delete my online profile. It removes your nickname, photo, country, ranking and duel results, your cloud save, the Google sign-in link, your purchase records, your support messages and your notification tokens from our server at once (copies of support messages already delivered to the team's Telegram chat are deleted by hand on request). Cloud save then stays off until you turn it on again. Or e-mail us — see Delete your data. Uninstalling the app removes everything stored on the phone.

Contact

Tulpor · support@tulpor.com