Privacy Policy
Effective: October 23, 2025 · Last Updated: May 19, 2026
At Enigma, we are committed to protecting your privacy. This Privacy Policy outlines how Wholesome Studio LLC ("we," "us," or "our") collects, uses, processes, shares, and secures your personal information when you access our puzzle client, the Enigma mobile application, our website at enigmabreak.com, and associated online services (collectively, the "Service").
By utilizing our Service, you consent to the data practices described in this policy. If you do not agree with these terms, please immediately discontinue the use of our services.
1. Information We Collect
1.1 Information You Provide Directly
While using our game, we collect information you explicitly input or provide to us, including:
- Lobby Display Name: The public moniker you choose for multiplayer lobbies and rank leaderboard lists.
- Account Registration Data: Emails and authentication passwords (should you choose to register an account to sync cross-device scores).
- Communications: Content of direct emails, support forms, or chat inquiries sent to our wholesome service team.
1.2 Information Collected Automatically
To maintain secure synchronized gameplay states, calculate ranks, and log debug diagnostics, we automatically collect:
- Authentication Credentials: Secure, anonymous Firebase Authentication tokens mapping your local device session to Firestore profiles.
- High-Frequency Gameplay Metrics: Active guess arrays, attempt counters, speed timers, and multiplayer state trackers synced via our Realtime Database hybrid trees.
- Technical Diagnostics: IP address, operating system, device model, hardware specifications, crash reports, and performance logs.
2. How We Use Your Information
We process collected information under standard legitimate business operations to:
- Operate & Sync Lobbies: Establish 6-digit multiplayer lobby rooms and coordinate real-time codebreaker feedback.
- Score and Leaderboard Systems: Calculate seasonal rank brackets, XP multiplier streaks, and post public tournament standings.
- Security & Anti-Cheat: Prevent reverse-engineering, analyze coordinate anomalies in active rounds, and ban bots/exploits.
- Diagnostics: Resolve server-side Callable Function runtime exceptions and optimize LCP performance scales.
3. Sharing of Your Information
We do not sell, rent, or trade your personal data. Your information is shared only under strict operational boundaries with:
- Operational Subprocessors: Cloud services like Google Firebase (Firebase Hosting, Cloud Firestore, Realtime Database, Cloud Functions) to maintain server logic.
- Legal Mandates: Authorities and courts when strictly required to comply with binding subpoenas, fraud reviews, or standard safety actions.
4. Data Retention and Security
Your dynamic profiles and stats are stored inside Firebase's industry-compliant secure databases protected by strict rules. Anonymous account tokens persist locally on your client device. While we implement robust safeguards to protect your records, no online database transmission can be guaranteed as 100% secure. You share all statistics at your own risk.
5. Children's Privacy (COPPA Compliance)
Our Service is not directed to individuals under the age of 13. We do not knowingly compile personal identifiers from children under 13. If we discover a player under 13 has bypassed restrictions and registered personal data (such as an email account), we will delete the data immediately.
6. Your Legal Rights & Choices
Depending on your jurisdiction (such as CCPA or GDPR), you may hold legal rights to access, update, export, or request complete deletion of the personal data we store. If you wish to delete your anonymous game credentials or Firestore statistics, please contact us.
7. Contact Information
If you have any questions, feedback, or data requests regarding this Privacy Policy, please reach out to our legal compliance unit at: