Privacy Policy

Last updated 2 September 2026. Physiodle is operated from Queensland, Australia and handles personal information in line with the Privacy Act 1988 (Cth) and the Spam Act 2003 (Cth).

1. What we collect

Account details: username, email address and a hashed password (we never store the password itself). Optionally, your profession level (for example student or physiotherapist).
Game data: puzzles played, guesses, results, scores, streaks, friends and leaderboard placement.
Feedback: anything you send through the feedback form, including which puzzle and clue it relates to.
Usage analytics: page views, timestamps, an anonymous visitor identifier stored in your browser, device type and browser, and in-app events such as opening the share screen or turning reminders on. We do not use third-party advertising trackers.
Notification subscriptions: if you turn on daily reminders, the push subscription your browser generates, your chosen reminder time and time zone.

2. Why we use it

To run the game: log you in, save results, calculate streaks and leaderboards, and show friends' results.
To send account emails you need, such as password resets and email confirmation, when those features are available.
To send occasional Physiodle updates only if you opted in at signup or in your account settings. Every such email includes an unsubscribe link, and you can turn updates off in your account at any time.
To send a daily reminder notification if you turned it on. You can turn it off in the app or in your browser settings.
To fix puzzles and improve the game based on feedback and aggregate usage.

We do not sell personal information, and we do not rent or give our email list to anyone.

3. Where it is stored and who can see it

Physiodle runs on Railway (cloud hosting). Data is stored on Railway infrastructure, which may be located outside Australia.
Your account is shared with our sister game Pharmodle so one login works on both. Only the username, email and password hash are exchanged.
Daily reminders are delivered through your browser's push service (Apple, Google or Mozilla, depending on your device). They receive an opaque subscription token, not your account details.
Fonts are loaded from Google Fonts, which receives your IP address when the page loads.
Your username, results and streak are visible to other players on leaderboards and to friends you accept.

4. Cookies and local storage

We do not use advertising cookies. Your browser's local storage holds your login token, an anonymous visitor identifier and small conveniences such as whether you dismissed a banner. Clearing site data removes them.

5. Retention

Account and game data are kept while your account exists. Analytics events are kept in aggregate. Push subscriptions are deleted when you turn reminders off or when the browser reports the subscription is no longer valid.

6. Your choices and rights

Change your email preference or profession level in your account settings.
Ask us to access, correct or delete your personal information by emailing [email protected] from the address on your account. Deleting an account removes your username, email and results from Physiodle and Pharmodle.
If you are unhappy with how we handled a complaint, you can contact the Office of the Australian Information Commissioner (oaic.gov.au).

7. Children

Physiodle is intended for tertiary students and health professionals. We do not knowingly collect information from anyone under 16. If you believe a child has created an account, contact us and we will delete it.

8. Changes

We may update this policy. The date at the top shows the current version, and material changes will be announced on the site.

9. Contact

Alex Herchen, Physiodle. [email protected]