Privacy policy

Last updated: 5 October 2026 · Applies to the web game at playpuffi.com

The short version

Puffi does not collect personal information from children: no names, emails, photos, chat or precise location, and no advertising of any kind. The game saves progress on your own device. Two things are optional and off until a grown-up turns them on behind the parent gate ("For grown-ups"): a cloud save with Google sign-in, and anonymous play statistics that help us improve the game.

What is stored, and where

The game saves the following in your browser's local storage, under the key puffi.save.v1:

• which chapters are finished, mementos found and kittens rescued (with their made-up names);
• best scores in Endless mode;
• the sound setting;
• simple play counters (for example, how many times a chapter was started), used only inside the game;
• a random identifier created on the device, which is not linked to any person and never leaves the device.

The game may also store its own files in the browser cache so it can be played offline.

Optional grown-up sign-in (cloud save)

Behind a parent gate ("For grown-ups" on the title screen), a parent or guardian can sign in with Google to back up the game and continue on another device. If you do:

• Google tells us a unique account number for your Google account. We store only a one-way scrambled version (SHA-256 hash) of it, so we cannot see or reverse it.
• We store the game save (chapters finished, Mementos, rescued kittens and their made-up names, best scores, play counters).
• We store a sign-in session so you stay signed in. On your device it is kept in local storage; on our side only a scrambled copy is kept. Sessions expire after one year.
• Google may also send your name, email address and profile picture. We do not store them.
• When you sign in, a script from Google (accounts.google.com) loads on that panel only, and Google's own privacy policy applies to the sign-in.

Deleting: in "For grown-ups", choose Delete cloud data. This removes the account, sessions and cloud save from our database right away. Progress on the device stays until you clear it.

We also count a few anonymous totals (for example, how many sign-ins happened per day). These counts contain no account or device information.

Optional anonymous play statistics (Google Analytics)

A grown-up can switch on Anonymous play stats in "For grown-ups". It is off by default, and nothing is loaded from Google until it is switched on. If it is on:

• Why: only to understand and improve how the game works (an internal operation of the service), for example which chapters are too hard, where players fall, and which features are used. Never for advertising, never to build a profile of a child, never to contact anyone.
• What is collected: page and game events (such as "chapter 3 started", "fell in chapter 3", "green gift caught"), the type of device and browser, the approximate country or city derived by Google from the internet connection, and a random identifier stored in a cookie (_ga). We do not send names, emails, sign-in details, account numbers, advertising IDs or anything typed by a child. The grown-up's Google sign-in is never linked to the statistics.
• Settings we use: advertising storage, ad user data and ad personalization are denied; Google signals, granular location and device data, and all data-sharing options are switched off; there is no link to Google Ads; no user ID is sent.
• Who processes it: Google Ireland Limited / Google LLC acts as our data processor (service provider) under the Google Ads Data Processing Terms. Data may be processed outside your country, including in the United States. Google Analytics does not log or store IP addresses for users in the EU, UK and Switzerland, and discards them after use elsewhere.
• How long: statistics data is deleted after 2 months.
• Turning it off: press Turn off in "For grown-ups". The tag stops and the _ga cookies are removed from this browser. You can also use Google's opt-out browser add-on, or email us to ask for deletion.

How long we keep data

• On the device: until you clear this site's data in the browser.
• Cloud save (only if a grown-up signed in): until you choose Delete cloud data or ask us; sign-in sessions expire after one year.
• Anonymous play statistics (only if switched on): 2 months, then deleted automatically.
• Server logs: kept by our hosting provider for its usual short period to run and protect the site.

What we do not do

• We do not ask children for names, emails, photos, location or any other personal information, and we do not keep the name, email or photo of grown-ups who sign in.
• We do not show ads, use advertising cookies or tracking pixels, or let anyone track players for advertising. The only third-party analytics is the optional, grown-up-approved play statistics described above.
• We do not sell or share data with anyone.
• The game has no chat and no way to contact other players.

Sharing a comic

After a run, the game can make a comic picture. Copying or saving it happens on your device. Nothing is uploaded unless you choose to share it yourself through another app.

Hosting

The website, the game server and its database are run on Cloudflare, which, like any web server, may process technical information such as IP addresses in its server logs to deliver and protect the site. See that provider's privacy statement. We do not access these logs for tracking.

Deleting your data

On the device: clear this site's data in your browser settings. In the cloud (only if a grown-up signed in): use Delete cloud data, or email us and we will delete it.

Changes

If a future version changes any of this (for example the mobile apps), we will update this page before that version goes live, and ask for parental consent where the law requires it.

Contact

Puffi is made by CyDuck Bilişim Teknolojileri A.Ş., which is responsible for the data described on this page (the “data controller” under the GDPR and the “veri sorumlusu” under KVKK).

CyDuck Bilişim Teknolojileri A.Ş.
Gürsel Mah. İmrahor Cad. Premier Kampüs Ofis A Blok No: 29/A İç Kapı No: 212, Kağıthane, İstanbul, Türkiye
Phone: +90 532 442 66 57
Email: [email protected]

You can write to us in English or Turkish. We answer privacy and deletion requests within 30 days.