Privacy Policy

If you choose Google or Apple sign-in, we use the name, email address, and provider account identifier supplied by the selected provider to create and sign in to your account and confirm account links. The authentication server processes a login-session identifier, session creation and expiry times, IP address, and browser user agent for session security and operation. It also processes the selected provider’s OAuth tokens and one-time authentication state as needed for account authentication. If you choose ranking participation, we process an unnamed ranking identifier and completion records. To review puzzle difficulty, we process an independent per-game random attempt identifier, puzzle identifier and difficulty, timestamp offsets, number entries and deletions, memos, hints, undo and redo, and foreground/background or completion events. When a user explicitly requests a hint in Practice mode, we may asynchronously process the initial grid, confirmed entries, and next logic step as an anonymous example to improve technique explanations. Memos and account, session, or device identifiers are not included in or stored with these server examples. We do not collect phone number, date of birth, location, contacts, photos, or data read through device permissions.

Games in progress and settings (language, immediate error flags, highlight level) are stored on this device. Completion records are stored on the device too, and only if you have joined the ranking is a copy sent to a server. A local queue retains anonymous gameplay events while offline and sends them in batches after a connection is available. What stays on the device cannot be read by anyone. Records you send to the ranking appear in public standings and can be seen by others.

Playing the game does not use an external server. The puzzles are bundled with the app, and solving and hints run entirely on your device. If you have joined the ranking, completion records are sent to a server. You can play from first launch without a network. Ranking participation, Google or Apple sign-in, and queued anonymous difficulty analysis need a connection.

There are no ads and no advertising identifiers. We use no third-party advertising or cross-app tracking tools. Anonymous gameplay events are stored in our Supabase analysis service only to review puzzle difficulty while you play; there is no separate opt-out for this analysis. Memo contents, account, ranking, guest, and device identifiers are not included in the analysis payload. There is no dedicated deletion UI: when the raw-storage review threshold is reached, new chunks are summarized instead of stored raw, and previously stored raw chunks are not promised to be deleted automatically. If you join the ranking, completion records are stored on the ranking server (Supabase) and shown in public standings. For Google or Apple sign-in, the selected provider is the authentication provider that receives the sign-in request and returns the account information needed for authentication to the authentication server. The authentication server stores the account data, selected provider connection and OAuth tokens, and session data above in its Better Auth database while the account exists. The account-deletion flow deletes those account, provider, and session records and linked ranking-server records.

The app requests no camera, microphone, location, contacts, or storage permission. What it declares on Android is listed here in full. Internet — loads the screens bundled inside the app, sends completion records to the ranking server when you join, batches anonymous gameplay analysis, and is used for Google or Apple sign-in and account-deletion reauthentication. Vibrate — the short buzz when you place a number, make a mistake, or finish a puzzle. It can be turned off in settings. One app-internal permission — added automatically by an Android support library; only apps sharing this app’s signature can hold it, so it is never exposed to other apps or to you. None of these permissions access personal information on your device.

What is stored on the device is removed when you delete the app. Records already on the ranking server remain even if you delete the app. To delete them, delete your account first. Turning ranking participation off preserves existing server records and stops only future submissions. You can start account deletion in Records after signing in again with the linked Google or Apple provider. When it completes, it deletes the Better Auth user account, selected provider connection and OAuth tokens, sessions, this device’s ranking-record link, and linked ranking-server records. It is not shown as complete until the account, provider-token, and ranking-record actions all finish; you can sign in again to retry. It does not delete games or settings on the device. One-time authentication state is retained until it is used or expires; expired state is removed during a later account-deletion request.

Google or Apple sign-in and ranking participation are optional, and every feature of the game works without them.

If this policy changes, this page and the effective date above are updated together.