Privacy policy

Who we are

Brandoozle (brandoozle.co) is operated by Centurion Creatives, LLC, Mechanicsville, Virginia, USA. We are the data controller for the personal data described here. For anything in this policy, write to privacy@brandoozle.co.

What we collect

If you play without an account

We store an anonymous identifier in a cookie so we can tell that the six guesses in one game belong to the same person, and so refreshing the page does not restart your puzzle. It is a random value and is not linked to your name or email.

Alongside it we record your guesses, how long each one took, whether you solved the puzzle, your score, and any difficulty rating you give.

If you sign in

Signing in with Google gives us your email address, your name and your profile picture. Your name and picture are never shown publicly — the leaderboard displays only the gamertag you choose, which we generate for you at sign-up and which you can change at any time.

We also keep your play history, streaks and lifetime statistics so the dashboard and leaderboard work.

Technical information

Our host records standard request logs. We store a broad device type (phone, tablet, desktop) against each game, so that timing statistics can be compared fairly — people type faster on a keyboard than a phone. We do not store your location against your account or against any game you play.

To stop automated abuse we keep a one-way cryptographic hash of your IP address for up to one hour. We do not store the address itself, and the hash is deleted automatically.

We also measure how the site is used — page views, and how quickly pages load — through Vercel Web Analytics, who host the site. It sets no cookies and stores nothing on your device. It records the page visited, the referring site, and a coarse country and device type; it does not build a profile of you or follow you to other websites, and we cannot use it to identify you.

Why we are allowed to use it

• To provide the game and your account— necessary to perform our contract with you.
• To prevent cheating and abuse, and to produce aggregate statistics about brand recognition — our legitimate interests. We have weighed these against your rights and use the least identifying data that works.
• For reminder emails and advertising— your consent, which you can withdraw at any time. Reminders are off until you switch them on, and advertising is not running on the site today.

Reminder emails

These are the only email we send you other than messages about your account. New accounts start with them switched on, and we say so on the sign-in page before you create one. If you already had an account when we made that change, we left your setting exactly as you had it.

You can turn them off at any time from your profile, or with the unsubscribe link in any reminder — one click, no sign-in needed. Turning them off does not affect your account, your streak or your scores.

We do not sell, rent or share your email address with anyone. It is handled by our email provider solely to deliver these messages, and by Google if you signed in with a Google account.

Sharing your result

When you choose to share a result, we create a page for it at a long, unguessable web address. That page shows the puzzle number, how many guesses you took and how long it took — the same things the shareable text shows. It never names the brand, so it does not spoil the puzzle for anyone who has not played.

It does not carry your name, your gamertag or your email address, and it is not listed in search engines. Nothing is published unless you share it, but once you post that address anyone who has it can open the page.

Aggregate statistics

Brandoozle measures how much of a logo people need before they recognize a brand. We combine everyone’s results into aggregate figures — solve rates, typical recognition speed, the most common wrong guesses — and we intend to license those figures to brand owners and researchers.

Those aggregates never identify you. They contain no names, no email addresses and no account identifiers, and we only produce them from large enough groups that no individual result can be picked out. We do not sell personal data.

Who else sees it

We use a small number of service providers to run the site. They process data only on our instructions and are listed, with what each one handles, on our subprocessors page.

We are based in the United States and all of these providers store and process data in the United States. If you are using the site from somewhere else, that is where your data is going.

We have a data processing agreement with each of them, which limits them to acting on our instructions and requires them to protect what they hold.

How long we keep it

• The anonymous play cookie lasts one year.
• Abuse-prevention IP hashes are deleted after one hour.
• Account and gameplay records are kept while your account exists.
• You can ask us to delete your account at any time and we will remove your personal data and your individual play records. Figures already combined into aggregate statistics cannot be pulled back out and will remain, but they do not identify you.

Your rights

You can ask us for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, or to receive it in a portable format. Where we rely on consent you can withdraw it at any time.

These are handled by hand rather than by a button on the site, so email us and we will do it. The one exception is reminder emails, which you can switch off yourself from your profile without asking anyone.

Email privacy@brandoozle.co and we will respond within 45 days. If you are not satisfied with how we have handled it, you can complain to your state attorney general’s office.

If you live in California, Virginia or another US state

Several states give residents specific privacy rights. Rather than work out which of them applies to you, we extend the same rights to everybody: ask us what we hold, ask for a copy, ask us to correct it, ask us to delete it, and ask us to stop.

We do not sell your personal data, and we do not share it for cross-context behavioural advertising. We have never done either and we are not planning to. The aggregate recognition figures we intend to license are counts and averages, not people, and are described above.

We will not treat you differently for exercising any of this. Your scores, streaks and account are unaffected either way.

Children

Brandoozle is not intended for children. You must be at least 13 to create an account, and we do not knowingly collect personal data from anyone under 13. If you believe a child has given us personal data, contact us and we will delete it.

Cookies

We explain every cookie we set, and why, on our cookie policy.

Changes

If we change this policy we will update the date at the top, and tell registered players by email if the change is significant.