Privacy

The short version

• You can play every game without an account. Then everything stays on your phone (in your browser's storage), and nothing about you reaches our servers.
• If you put your scores online, we keep your nickname, your avatar choice, your state or country, your scores and level, and any handles you add. Everybody who opens Sapo can see these on the leaderboards. That is the point of a leaderboard.
• We do not sell your data, we do not show ads that follow you around, and we do not ask your real name, age or phone number.

What we keep, and why

• On your phone only: your coins, unlocks, missions, streak, settings and bests. To remove them, clear this site's data in your browser settings.
• A guest account is made when you pick a nickname, so your scores can join the boards. It is a random number, not your name.
• On the leaderboards (public): nickname, the drawn avatar you picked, your state (or country, and its continent), your level, your best score per game and today's daily-challenge score.
• Your handles (optional, public): the X, Instagram or TikTok usernames you type. We show them as plain links marked "not verified", because anybody can type any name. We never fetch anything from them.
• If you sign in with Google: your Google account id, email address, name and profile picture, which Google shares with us. We use the id and email only to sign you in, and the picture only if you choose "Use my Google picture".
• If you sign in with TikTok: your TikTok id (for this app only), display name and profile picture (and your TikTok username, if TikTok gives it). The picture shows only if you choose "Use my TikTok picture"; a matching TikTok handle shows as verified.
• Your game record when signed in (private, only you can read it): coins, unlocks and a few bests, so they follow you to another phone.
• Adverts: we count how many times each advert was shown or tapped, per day and per place in the game. The count carries no information about who saw it.
• Visits: Cloudflare Web Analytics counts page views without cookies and without following you across sites.

Our legal basis under the Nigeria Data Protection Act 2023 is your consent (you choose to put scores online, add handles or sign in) and our legitimate interest in running fair leaderboards and keeping the service safe (for example, removing impossible scores).

Who holds it

Your online data is stored with Supabase (database and sign-in) and the site is served by Cloudflare. Their servers may be outside Nigeria; both protect data with encryption and contractual safeguards, which is how the Act allows such transfers. Google and TikTok handle their own sign-in pages under their own privacy policies.

How long

Until you delete it. Guest accounts nobody has used for 12 months are removed.

Delete your data, or ask what we hold

• In Sapo: open your Profile, then Delete my data (tap it twice). Your account, nickname, scores, daily scores, handles and record are removed from our servers at once.
• Or write to hello@playsapo.com from the email you signed in with (or tell us your nickname) and we will delete it within 30 days.
• You may also ask for a copy of your data, ask us to correct it, or object to how we use it. If you are not happy with our answer, you can complain to the Nigeria Data Protection Commission (ndpc.gov.ng).

Children

Sapo has no age check and asks for no personal details to play. Please do not use your full real name as a nickname. If you are under 18, play as a guest without signing in, or ask a parent first. A parent can ask us to delete a child's data at the address above.