DPDP Act 2023 Compliance

The DPDP Act governs personal data. SudoCodo collects no personal data on any server — no names, contacts, or identifiers — so most obligations have nothing to attach to. This note exists so parents, teachers and regulators can verify that claim precisely.

On-device game state (levels, stars, ratings, daily counters) is processed solely to render your progress back to you. It is never repurposed for advertising, profiling or sale — see Privacy §3.

Because no personal data is collected, no consent notice is required to play. Where the platform host (Vercel) logs routine server telemetry such as IP addresses in access logs, that processing is governed by the host's own policy, not by anything SudoCodo does.

Access, correction and erasure are exercised directly on the device: progress is visible in-game, and Reset progress or clearing site data erases it completely and immediately — no request, review queue or waiting period needed.

There is no user database to breach. If a vulnerability affecting players is ever found in the app or its supply chain, we will disclose it in the public repository (GitHub issues) and ship a fix promptly.

SudoCodo is designed for children and processes no personal data at all — no verifiable parental consent workflow is needed because there is nothing to consent to. Behavioural tracking and targeted advertising are absent for everyone, children included. Parents and teachers supervising play is still encouraged.