Privacy Policy

The short version. You can play every game without telling us who you are. Your सिक्के and streak live on your device until you choose to sign in. If you sign in, we keep your email, your player profiles and your plays so your progress follows you. We don't sell data, we don't run advertising trackers, and our analytics use no cookies.

1. Who We Are

Bolbala is a product of Solve For Why Pte. Ltd., a company incorporated in Singapore. When this policy says “Bolbala,” “we,” “us” or “our,” it means Solve For Why Pte. Ltd. Privacy questions: hello@solveforwhy.org.

2. What We Collect

a) On your device only (no account needed). As you play, your browser stores your सिक्के, streak, which games you played today, words you've tapped, your chosen goal filter, your sound setting, and your cookie choice. This stays in your browser's local storage. It is not sent to us unless you sign in.

b) If you sign in. Your email address (for the sign-in link), or your name and email from Google if you choose Google sign-in; the player profiles you create (a nickname, whether it's a child's profile, your timezone); and your plays — which game, when, the round results, the सिक्के earned. Nothing typed or spoken inside a game is stored beyond the result.

c) If you sign up for Bolbala — Play of the week. Your email address and when you signed up, so we can send the Sunday game and stop when you unsubscribe.

d) Analytics. We use Umami, a privacy-focused analytics tool, to count page views and which games are played. It sets no cookies and stores no identifiers; we see aggregate numbers, not people.

e) Voice. Games that listen to you speak use your browser's speech recognition on your device. Audio is not uploaded to us. Games that speak Hindi use your browser's text-to-speech.

f) If you write to us (email, WhatsApp): what you send, so we can reply. Riddles you contribute may be published (see our Terms).

g) Bolbala inside ChatGPT. When you play Bolbala in ChatGPT, ChatGPT sends us only what's needed to open a game: which game, or the situation you want to practise (for example, “at the tailor”). We don't receive your chats, your name or your OpenAI account. OpenAI's privacy policy covers your conversation with ChatGPT.

We do not collect payment details today. If paid features are introduced, payments will be handled by a payment provider under its own policy and we will update this page first.

3. How We Use It

To run the games and keep your progress; to make the games adapt to how you play; to send the Sunday puzzle and sign-in links; to understand which games people enjoy so we can make better ones; to keep the Service safe and fair (for example, spotting automated play); and to answer you when you write to us.

4. Children

Bolbala is for all ages, and many players are children playing alongside a parent or grandparent. We do not knowingly collect personal data from children under 13 (or the applicable age of consent where you live) without a parent or guardian.

A child plays through an adult's account, on a profile the adult creates and marks as a child's profile. That profile carries only a nickname — no email, no date of birth. Child profiles receive no marketing email, no advertising and no social features. If you believe a child has given us personal data directly, email us and we will delete it.

5. Legal Basis (GDPR / UK GDPR)

Where these laws apply: we process account and play data to perform our contract with you (running the Service); the Sunday puzzle email on your consent (you can withdraw it any time); analytics and fair-play measures on our legitimate interest in running and improving a free service, balanced against your privacy — which is why our analytics are cookieless and aggregate.

6. Your Rights

You can ask us to show you the data we hold about you, correct it, delete it, export it, or stop using it for a particular purpose. Email hello@solveforwhy.org from your sign-in address; we respond within 30 days. Unsubscribe from emails with the link in any email or at bolbala.fun/unsubscribe. Clear your browser's site data to remove everything stored on your device. You may also complain to your local data-protection authority; in Singapore that is the PDPC.

7. Who We Share Data With

We don't sell or rent personal data. We share it only with the services that run Bolbala, under contracts that limit what they may do with it:

• Supabase — accounts, sign-in and our database (hosted in Singapore).
• Google — only if you choose “Continue with Google”; Google tells us your name and email.
• Resend — sends our emails (sign-in links, the Sunday puzzle).
• Vercel — hosts the website.
• Umami — cookieless analytics (servers in the EU).

We may also disclose data if the law requires it, or to protect the safety of players and the Service. If Bolbala is ever sold or merged, your data would transfer with it under this policy.

8. Where Data Lives

We are based in Singapore and our database is hosted there. Some providers above process data in other countries (for example the EU and the United States) under standard contractual safeguards.

9. How Long We Keep It

Account and play data: until you delete your account (then removed within 30 days, except records we must keep by law). Sunday-puzzle emails: until you unsubscribe. Analytics: aggregated, indefinitely, never tied to you. Messages you send us: as long as needed to help you, then deleted.

10. Cookies and Storage

Bolbala uses only essential browser storage: your sign-in session, your cookie choice, and the game progress described in Section 2(a). No advertising cookies, no cross-site tracking. If advertising is ever introduced on adult profiles, we will ask for consent first where the law requires it, and this page will change before that happens.

11. Security

Connections are encrypted (HTTPS). Sign-in uses one-time links or Google — we never store passwords. Database access is restricted by row-level rules so an account can only read its own data. No system is perfectly secure; if we learn of a breach affecting you, we will tell you.

12. The Browser Extension

The Bolbala browser extension has its own, shorter policy at bolbala.fun/privacy-extension. In short: it works on your device and sends us nothing.

13. Changes

We will update this policy when Bolbala changes — for instance, when sign-in, family plans, embeds or paid features arrive. Material changes are announced on the site or by email before they take effect, and the date at the top always tells you the current version.

14. Contact Us

Solve For Why Pte. Ltd.
160 Robinson Road, #14-04, Singapore Business Federation Center, Singapore 068914
Email: hello@solveforwhy.org