Privacy Policy
Effective date: 2026-11-05
Operator: Product Magicians LLC, a Delaware company doing business in California.
Service: Roo, Artshift, Roodoku and Price Guesser at https://productmagicians.com.
1. Scope
This Policy describes the free daily-game service. It covers guest play, optional email/password or Google accounts, personal game progress and daily streaks, assist balances, necessary browser storage, optional gameplay events and support communications.
We do not currently run payment processing, live advertising, marketing subscriptions, public chat, public profiles or user-content uploads on Roo. If we add such features, we will describe the new data practices and make any required choices available before relying on them.
2. Information we handle
Account information
When you create or use an email/password account, the authentication service handles your email address, password credential, account identifier, verification/recovery information and authentication sessions. Authentication records are handled through Supabase; passwords are not publicly displayed or included in game saves. Resend processes the recipient address and message information needed to send verification and recovery emails.
If you choose Google sign-in, Google and Supabase process the basic sign-in information you authorize, including your email, account identifier, name and profile picture where supplied. Roo does not receive your Google password or request access to Gmail, Drive or contacts through this sign-in flow. Authentication tokens keep your session available in the browser.
Game progress and preferences
For signed-in play, we store account-linked puzzle identifiers/dates, board state or submitted price guesses, moves, hints/assisted status, completion and scores where applicable, Roodoku mistake/attempt counts, learned Artshift gestures and update timestamps. Roodoku account assist balances and idempotent spend records are stored so a repeated request does not deduct the same assist twice.
Guest game progress, guest assist balances and certain preferences are stored locally in your browser. They are not automatically merged into an account. When you use the explicit guest-copy feature, supported progress is copied to your signed-in account without intentionally overwriting existing results. Guest assist balances are not automatically transferred.
Daily streaks are derived from completed daily-game dates, not location tracking. Price Guesser’s estimated percentiles are calculated from simulated comparisons; the current feature does not collect other players’ guesses into a ranking service.
Optional gameplay events
Optional gameplay analytics are off by default. When enabled while signed in, the current implementation records Artshift game-start, game-completion and hint-use events associated with your account and challenge. Completion classification or limited event details may be included. This is not individual-swipe recording. Turning the setting off stops future optional events from that device; it does not itself erase records already stored.
Operational information
Requests to the website and account services expose technical information to hosting/authentication providers, such as network address, request timing, browser/device headers and error or security logs. Cloudflare hosts the website; Supabase provides authentication, database and related backend services; Google Workspace handles support email.
Support communications
If you contact us, we receive the information you send, including your email address and message content. Send only information needed to resolve your request. Do not send passwords, payment-card data or unnecessary sensitive information.
3. Why we use information
We use information to:
- Operate accounts, verification and password recovery.
- Save and restore game progress and preferences.
- Show your personal daily checklist, streak and result screens.
- Maintain assist balances and prevent duplicate deductions.
- Respond to support, account and data requests.
- Diagnose technical problems, protect the Service and address abuse.
- Understand limited gameplay events when you choose to enable them.
We do not use the current game implementation to sell personal information, run targeted advertising or build a public profile. These statements describe our own current use, not an assurance that third-party providers never process operational data under their own policies.
4. Cookies and local storage
Roo uses browser storage for guest progress, account-session convenience, account-scoped local progress caches and pending-save queues, mute/tutorial settings, theme preference and the optional-analytics choice. Account authentication may store session tokens in the browser. These tokens should be protected like access to your account.
Live advertising is not enabled. Google sign-in uses Google authentication and its provider session handling. Blocking necessary browser storage may prevent sign-in or local saves from working.
5. Sharing and service providers
Information needed to operate the Service is processed by our hosting, authentication/database and support-email providers. We may also disclose information when reasonably necessary to address a legal request, protect safety/security, prevent misuse, or handle a business transfer subject to appropriate safeguards and applicable notice requirements.
Roo’s current game UI does not publish your email, private board history or assist records to other players. The Share result action uses your device’s share sheet or clipboard to share the result you select. If you post that result elsewhere, the receiving service controls its own data handling.
Museum and retailer links lead to third-party sites. Their privacy policies apply after you follow those links. Product and artwork assets currently used for gameplay are served from Roo’s own deployment rather than hotlinked during each play session.
Cloudflare serves the site, Supabase handles accounts and stored game records, Google processes optional Google sign-in, Resend sends transactional account emails, and Google Workspace hosts support email. Following source links or sending support messages may involve additional providers. Our Supabase project is hosted in the United States. Service providers may process information in countries other than the one where you live.
6. Retention
Guest data remains in browser storage until it is cleared or otherwise removed by the browser or Service. Clearing browser storage does not erase records already saved in an account.
We retain account-linked game progress, preferences, assist receipts and optional gameplay events until you request account closure or deletion. They do not expire automatically because you stop playing. Requests are handled through the Contact section after we verify account ownership.
Resolved support correspondence is retained for 12 months after the request is resolved, then deleted through the support-mailbox procedure.
When an account is deleted, its linked game records are removed from the active database. Clearing browser storage does not remove account records, and removing account records does not itself clear local copies on your devices. Provider logs, backups and support messages are handled separately; account deletion does not promise immediate removal from every provider copy.
7. Your choices and requests
You can play as a guest, choose whether to create an account, mute sounds, acknowledge or replay tutorials, choose a theme and keep optional analytics disabled. You can clear local browser data through your browser settings. Use caution: this may remove unsynced guest progress and sign you out.
Requests for access, correction, account closure or deletion use the Contact section. Available rights depend on your location and applicable law. We may request enough information to verify your identity before disclosing or changing account data. Do not send your password.
Signed-in players can download their saved game progress, learning preferences and assist balances from the account screen. Optional event history and broader account-information requests are handled through the Contact section.
8. Children and families
Roo is intended to have approachable game content for a broad audience. This is not a claim of an official content rating or a statement that the current account implementation has parental-consent controls.
Roo accounts are intended for people age 13 and older. Signup asks for a self-declared age-eligibility confirmation without collecting a date of birth. This does not establish verified age or parental consent. Accounts for children under 13 are not offered in this release.
Concerns about information submitted by a child under 13 can be raised through the Contact section so we can assess the request and take appropriate action through the confirmed account-data process.
9. Security
We use technical controls intended to protect account-linked data, including database row-level access policies, validated game saves and separation of public configuration from privileged backend credentials. No online service can guarantee absolute security. Use a unique password, protect your device and report suspected unauthorized access.
10. Changes
We will update this Policy when practices materially change and provide notice where appropriate. The effective date identifies the version in use.