Last updated: October 30, 2026
At SumMatrix, operated by Dana Noriega through muktiflow.com ("we", "our"), we respect your privacy and protect your personal data. This policy explains what we collect, why, and how we take care of it.
| Data | Purpose | Retention |
|---|---|---|
| Name or nickname | Greeting you inside the game and in emails. Other players are only shown its first 6 characters, with a number (see 2.5) | While you keep your account |
| Country and city (optional) | Showing you your country's and your city's leaderboard. If you don't give them, you only see the world one | While you keep your account, or until you delete them |
| Account identification, transactional email (welcome, password change) | While you keep your account | |
| Password (via Google Identity Platform) | Secure access. Managed by Google Identity Platform; we do not store it in plain text. | While you keep your account |
| Data | Purpose | Retention |
|---|---|---|
| Scores, level and progress | Saving your progress and showing your results | While you keep your account |
| Spark balance and refills | Managing the game currency and its limits | While you keep your account |
| Who invited you and whom you invited (referral program) | Giving the reward to the person who invites and to the invited person, only once | While you keep your account |
| Your email in a normalized form (lowercase and, for Gmail, without dots or anything from «+» on) | Keeping one person from collecting the referral reward with several accounts | Kept even if you close your account, only for that purpose |
| Your daily challenge tries (time, seconds per matrix and wrong pairs), your medals and your streaks of days played | Building the challenge leaderboard, giving its prizes only once, checking that the time is possible for a person and showing you your streaks | While you keep your account |
Payments are processed by Bold. We do not store card data. We keep the transaction record (pack, amount, date, status) to credit your sparks and meet accounting obligations. See Bold's Privacy Policy.
On the leaderboard, on the daily challenge leaderboard and in rooms, other players only see your public name: the first 6 characters of your name or nickname and a 3-digit number that tells apart two people with the same name (for example, «Santia482»), and your scores (in the challenge, your best time of the day and your medals). Your email is never shown to other players, neither in full nor in part. Your country and city, if you gave them, place you on those leaderboards but are not shown next to your name. You can stop appearing on the leaderboard at any time from the same screen. In a room, your name and result are seen only by the people who joined that room.
We use your data exclusively to:
We do NOT sell, rent or share your personal data with third parties for marketing purposes.
| Provider | Purpose | Data shared |
|---|---|---|
| Google Cloud Platform | Infrastructure and database (Cloud Run, Firestore) | Account and game data |
| Google Identity Platform | Authentication | Email and password (hashed) |
| Bold | Payment processing | Transaction data |
| Resend | Transactional email | Email and name |
All providers are contractually required to protect your data and use it only for the specified purposes.
You can use SumMatrix from any country. Your data is processed on Google Cloud and Resend servers located mainly in the United States. These providers meet international data protection standards, including standard contractual clauses for transfers from the European Union.
| Data type | Period |
|---|---|
| Account and game data | While you keep your account |
| Transaction records | 5 years (legal requirements) |
| Normalized email for the referral program | After the account is closed, only to keep the reward from being collected twice with the same email |
You have the right to access your data, correct it, request its deletion, receive it in a structured format, and object to certain uses. To exercise these rights write to info@muktiflow.com. If you are in Colombia, you can also contact the Superintendencia de Industria y Comercio.
We use a single essential session cookie, signed, to keep you logged in. We do not use advertising tracking cookies.
The Service is only for people 18 or older, and by signing up you declare that you are. It is not directed at minors and we do not knowingly collect data from minors (in particular, from children under 13 under U.S. COPPA, under 16 under the EU GDPR, or from children and adolescents under Colombia's Law 1581 of 2012). If we discover we hold a minor's data, we delete the account and its data. If you are a parent or guardian and believe a minor in your care gave us their data, write to info@muktiflow.com: we delete the account and confirm by email.
We may update this policy occasionally. The "Last updated" date indicates the current version. Significant changes are announced by email or inside the game.
SumMatrix is used from many countries. We apply the same protection standard to every user, aligned with:
If you believe we did not handle your request properly, you can contact your country's data protection authority: the Superintendencia de Industria y Comercio in Colombia, your national data protection authority in the European Union, the ICO in the United Kingdom, the Office of the Privacy Commissioner (OPC) in Canada, or the relevant state authority in the United States.
© 2026 Dana Noriega. All rights reserved.