Privacy Policy
Last updated: November 14, 2026
This policy explains how Balancdle (balancdle.com) handles your data. Balancdle is an independent daily puzzle game from GeneralB, the indie puzzle game brand behind the game. It is privately operated by an individual, not a registered business. Contact the operator about privacy at balancdle@gmail.com.
Operator identification remains unresolved. GeneralB is the public brand name, not a verified legal identity. The legal identity and service/contact address required by applicable controller and service-provider disclosure rules have not yet been supplied. This policy does not establish full compliance while those disclosures remain unresolved.
1. Data stored in your browser
You can play without an account. Game results and preferences are saved in your browser's local storage. Guest results remain on your device. Signing in also stores session information needed to keep you signed in. You can remove local data by clearing your browser's site data; this does not delete results already saved to your account.
The table below covers storage implemented by Balancdle and the consent-based Google Analytics cookies. Local storage has no built-in expiry: where a validity period is listed, our code checks it when reading the record. Session storage normally lasts for the tab's browsing session and may be restored by your browser. Functional storage supports a feature you request; it is not used for advertising.
| Name / storage key | Provider / location | Purpose | Essential or optional | Retention |
|---|---|---|---|---|
| _ga; _ga_* | Google Analytics / first-party cookies on Balancdle | Distinguish browsers and maintain analytics session state. | Optional: explicit analytics consent | Google documents a 2-year default, updated on visits; browser limits may shorten it. Balancdle sets no code override; Google tag settings still need confirmation. |
| cookie_consent_analytics | Balancdle / local storage | Remember analytics acceptance or rejection and update Consent Mode. | Necessary to remember your privacy choice | Acceptance valid for 365 days; rejection prompts a new choice after 183 days but remains denied. The stored record is not automatically deleted. |
| cookie_consent_advertising | Balancdle / local storage, if present | Read a separately stored advertising choice; the analytics panel does not create it or grant advertising consent. | Necessary if used to remember a privacy choice | Same 365-day acceptance and 183-day refusal review periods. No automatic deletion; Google CMP storage is separate. |
| cookie_consent (legacy, if present) | Balancdle / local storage | Keep a refusal compatible with older consent code; new visitors are not given this key by the current panel. | Necessary privacy preference | No automatic expiry; until browser site data is cleared. |
| balance:v3:day:<day> | Balancdle / local storage | Save completed rounds, scores, positions and completion times; resume daily progress and calculate local statistics/streaks. Signed-in results also sync to your account. | Functional: requested gameplay, not tracking | No automatic expiry; until browser site data is cleared. |
| balance:howto-open; balancdle:movable_hint_dismissed | Balancdle / local storage | Remember the instructions panel state and whether the movable-object hint was dismissed. | Functional preferences, not tracking | No automatic expiry; until browser site data is cleared. |
| balancdle:units | Balancdle / local storage | Remember your Metric or US mass display preference. Automatic selection uses the browser locale's explicit country or territory, not precise location; an unknown or missing region defaults to Metric. | Functional preference, not tracking | No automatic expiry; until browser site data is cleared. |
| balancdle:pending-invite | Balancdle / local storage | Remember who invited you while you play or register. | Functional: requested friend invitation | Valid for 7 days; removed when an expired/invalid invitation is checked or after successful connection. |
| balancdle:auth-resume-day | Balancdle / session storage | Return to the chosen game day after sign-in. | Necessary for requested sign-in continuation | Removed when sign-in resumes the game; otherwise the browser's tab/session lifetime. |
| balancdle:just-completed:<day> | Balancdle / session storage | Show the score animation once after finishing a day. | Functional gameplay display, not tracking | Removed when the results page reads it; otherwise the browser's tab/session lifetime. |
| sb-<project-ref>-auth-token | Lovable Cloud authentication / first-party local storage | Store sign-in session and refresh tokens to keep your optional account signed in. The project-specific part varies by deployment. | Necessary when you sign in | Persistent and automatically refreshed; removed on sign-out or clearing site data. Token/session expiry follows authentication settings, not a fixed local-storage lifetime. |
Google's GA4 cookie documentation gives the default lifetimes above, not a verified property-specific setting. Browser restrictions can reduce them. Google authentication or advertising may use their own cookies on their domains. Advertising/CMP cookie names and lifetimes have not been verified for this site while approval is pending; they must be inventoried when that setup is active rather than assumed here.
2. Optional accounts and results
When you register, we store your email address, username and account information. Your round results, including the day, round, positions, score and completion time, are saved to your account to provide history and cross-device access. Passwords are handled by our authentication provider. If you use Google sign-in, Google supplies account information needed to sign you in.
Global score comparisons use anonymous aggregate statistics from completed account days. Other players cannot access your individual result records. Administrators can view aggregate player activity and game statistics.
Friend invitations store an invitation token in local storage with a seven-day validity period, so playing first does not lose the inviter. We store friendship requests and accepted connections to provide your friends list. Accepted friends can see your nickname, combined game statistics and completed daily scores; head-to-head scores are shown only once both players have completed that day. Friends do not receive your email, object positions or individual round records.
3. Visitor analytics
Lovable's visitor analytics uses no cookies, stores nothing on your device, does not keep IP addresses and does not identify visitors. This describes visitor analytics only; game progress, sign-in and advertising use separate tools described in this policy.
It records pages visited, where visitors came from, their country, browser, operating system and device type, time on page, page loading speed and errors. Click tracking is enabled, so it also records button and link clicks. Our game sends events when a day is started and when all five rounds are completed; those events contain the day number and whether it is today's game, not your email or nickname.
Analytics choices are sent through Google Consent Mode. Lovable's clicks and game events are held back until analytics consent in the EU/EEA, UK, Switzerland, Canada and when location is unknown. Elsewhere they are recorded unless your browser sends Global Privacy Control or you reject analytics. Global Privacy Control prevents those clicks and events even after acceptance. Page visits, time on page, page speed and errors are recorded for every visitor, without cookies and without identifying anyone. Acceptance is valid for up to 12 months; refusal is reviewed after 183 days and does not automatically turn tracking back on.
Lovable's detailed visitor analytics data is kept for 90 days and daily summaries for one year. These periods do not describe GA4. Lovable collects this data for us. Lovable's privacy policy explains how it handles it.
With your explicit analytics consent worldwide, Google Analytics 4 uses first-party cookies and pseudonymous browser identifiers to measure page views, visits, traffic sources and gameplay. GA4, unlike Lovable's cookie-free counting, can recognize a browser across visits while its cookies remain. Google receives technical request information including your IP address; Google states GA4 does not log or store individual IP addresses. Our integration disables Google signals and advertising-personalization signals.
- page_view: the visited page, with query strings removed and invitation paths reduced to /invite.
- game_start / game_complete: the day number and whether it is today's puzzle; completion means all five rounds are finished.
- final_score: the completed day's total score and day number.
- results_shared: successful native sharing or clipboard copying, the sharing method and day number.
- pattdle_click: a click on a Pattdle link and which promotion placement it came from.
We do not send GA4 your email, nickname, invitation token, account identifier or object positions. Aggregate Google reports are available only to authorized administrators. GA4 cookies and tracking do not start before explicit analytics consent. Reject analytics in the banner or use Cookie settings in the footer to withdraw consent; this stops new GA4 tracking but does not retroactively delete data already sent. Existing analytics cookies may remain until expiry or until you clear them in your browser. Global Privacy Control overrides acceptance. See Google's privacy policy and its data safeguards.
GA4 retention needs confirmation: the actual property-level user/event retention setting and any Google tag cookie-lifetime override have not been verified. We do not assume a 2-month or 14-month setting. Google's retention documentation distinguishes user/event retention from standard aggregated reports, which are not governed by that setting.
4. Providers and advertising
Lovable Cloud provides hosting, account authentication and data storage, including account details, friendship connections and saved results. Hosting and authentication may process technical information such as IP addresses for page delivery, security and sign-in. Passwords are managed by authentication services and are not shared with other players.
Google supplies web fonts loaded on site pages and optional Google sign-in; loading these services shares technical information such as your IP address and browser request information with Google. Google sign-in is initiated through Lovable's authentication integration before the session is managed by Lovable Cloud. See Google's privacy policy and Lovable's privacy policy.
AdSense approval is pending. Balancdle already loads Google's AdSense script across the site for verification and future advertising. Loading it can send Google technical information, including your IP address, browser details and the page being visited, even when no advertisement is displayed. The results-page ad unit ID is currently unset, so Balancdle's fixed results unit does not request an ad. Google-managed Auto ads and Privacy & Messaging settings have not been independently verified.
Google and other third-party advertising vendors may use cookies or similar technologies to serve and measure ads based on your visits to this site and other websites. Google's advertising cookies enable Google and its partners to serve personalized ads based on those visits, where permitted and subject to the applicable consent choice. Advertising data is received by Google and participating advertising partners; their policies govern their retention.
You can manage Google's personalized advertising at Google Ads Settings, and find choices for participating third-party vendors at AboutAds. Opting out of personalization does not necessarily stop all advertisements or all advertising storage.
All four Google Consent Mode v2 signals (analytics_storage, ad_storage, ad_user_data and ad_personalization) default to denied before Google scripts load; a valid saved choice can restore the corresponding permission. Analytics acceptance never grants advertising consent. Appropriate advertising choices belong to Google's certified consent message. When it is available, Privacy settings in the footer reopens it; otherwise that link shows information only, not a consent manager.
The local analytics panel is not a Google-certified advertising CMP. Before advertising is activated for visitors in the EEA, UK or Switzerland, the operator must verify an appropriate Google-certified CMP integrated with the IAB Transparency and Consent Framework, including its handling of consent and withdrawal. This is not verified here; default-denied Consent Mode alone is not a substitute. See Google's CMP requirements.
5. Purpose and legal bases
Account authentication, cloud game history and friendship features are processed to provide the service you request (Article 6(1)(b) GDPR). Playing as a guest does not require an email or account; declining to provide account details means account-only features are unavailable.
Technical delivery, security, preventing abuse and cookie-free aggregate visitor measurement support our legitimate interests in operating and improving a reliable game (Article 6(1)(f)), subject to your applicable right to object. GA4 and optional analytics-cookie processing rely on your consent (Article 6(1)(a)); where required, optional Lovable clicks/events and advertising processing also require consent. Withdrawing analytics consent does not prevent gameplay. Essential storage supports the requested service or remembers your privacy choice; optional analytics storage waits for consent.
6. Retention and your rights
Account details, friendship records and saved results are retained while your account is open to provide your history and account features. To close your account and request deletion, contact balancdle@gmail.com. Account closure/deletion is handled on request, not by clearing browser storage. Any information that must be retained for a legal obligation or a justified security/dispute purpose is limited to that purpose and the required period. No fixed backend backup or security-log deletion period has been verified; contact us for clarification rather than relying on an invented deadline.
You may request access, correction, erasure, restriction, portability where applicable, or object to processing based on legitimate interests by emailing balancdle@gmail.com. You may withdraw consent at any time without affecting the lawfulness of processing before withdrawal. We may need proportionate information to verify your identity before acting on account requests. We respond within the applicable GDPR timeframe, normally one month; if a lawful extension is needed, we explain it.
Your profile page lets you view your account details, edit your nickname and download your own data. You can remove friendship connections from the Friends page. You may complain to your local data protection authority, including Poland's UODO. Gameplay scores do not make automated decisions with legal or similarly significant effects on you.
7. International transfers
Providers may process data outside your country and outside the EEA, including in the United States. Google's published transfer frameworks state that Google LLC participates in the EU-U.S. and Swiss-U.S. Data Privacy Frameworks and the UK extension, and describe Standard Contractual Clauses for applicable transfers. Google's advertising and analytics data-processing terms describe service-specific safeguards. The applicable mechanism depends on the service, recipient and transfer.
Lovable's published privacy policy describes EU Standard Contractual Clauses, the UK transfer addendum and Swiss adaptations for restricted transfers. We do not claim Lovable has a Data Privacy Framework certification. Its published data-processing agreement describes processor obligations; whether that agreement covers this project's plan and the applicable hosting/subprocessor arrangements still requires confirmation by the operator. Provider documents are not proof that every project-specific contractual step has been completed.
You can contact balancdle@gmail.com to ask about the applicable transfer safeguards and request relevant information or a copy, subject to lawful redactions. Project-specific hosting region, processing agreements and transfer coverage remain to be confirmed.
8. Changes
We may update this policy when the service changes. The date above identifies the latest version. See also our Terms of Service.