Privacy
What we hold, and what we chose not to.
Updated DATE · In effect from DATE
The short version
There is no email address or password on a Cantle account. We hold an anonymous ID, the display name you pick, your results, and your purchases. There is no advertising in the game and no third-party analytics in it either. Nothing we collect is used to track you across other apps or websites.
If you want it all deleted, write to [email protected] with your friend code.
Who is responsible
- Controller
- FILL: registered name, exactly as filed with Apple and Google
- Registered address
- DECIDE: the stores publish this on the listing either way — whether it also appears here is your call
- Contact
- [email protected]
What we collect
| What | Specifically | Why | Kept |
|---|---|---|---|
| Account | An anonymous ID generated on your device, a friend code, the display name you choose, and a sign-in token | So your progress and purchases survive reinstalling the app | FILL |
| Results | Which puzzle you played, how long you took, how many taps, and when you submitted | Leaderboards and your own history | FILL |
| Friends | Who you have added, and challenges between you | The friends feature | Until you remove the friend or delete your account |
| Purchases | What you are entitled to, and the store receipt that proves it | To give you what you paid for on every device | FILL — note tax law may set a floor here |
| Notifications | A push token and whether the device is iOS or Android — only if you turn notifications on | To send the notifications you asked for | Until you turn them off |
| Crash reports | The error, the stack trace, your platform and app version, and your anonymous ID | So a crash affecting many players is visible to us at all | FILL |
| Reports | Display names other players report as abusive | Moderating the leaderboard | FILL |
| Messages to us | Your address and whatever you wrote | To answer you | FILL |
Your display name is shown to other players on the daily leaderboard, and to anyone holding your friend code. Nothing else in that table is.
What we do not collect
This list is as much a part of the policy as the one above.
- No email address and no password — there is no such field on an account.
- No real name, phone number, postal address or date of birth.
- No location.
- No access to your contacts, photos or files.
- No advertising identifier. There is no advertising in the game.
- No third-party analytics, and no attribution or marketing SDK. None is built into the app.
Crash reports go to our own server rather than to a crash-reporting vendor, so that data stays on infrastructure you have already trusted with your scores.
Nothing we collect is used for tracking, in the sense Apple's App Tracking Transparency framework defines it. We never link it to data from other companies for advertising, and we never sell it.
Legal basis
Where the GDPR applies:
- Contract — running your account, your results and your purchases.
- Legitimate interests — keeping the service up, fixing crashes, and stopping cheating and abuse.
- Legal obligation — tax and accounting records for purchases.
- Consent — push notifications, which you turn on yourself and can turn off at any time.
Who else sees it
We do not sell personal data and we do not share it for advertising. These are the companies that process some of it on our behalf:
| Who | For what | Where |
|---|---|---|
| Apple | Distributing the app, taking payment, validating receipts | US and worldwide |
| Distributing the app, taking payment, validating receipts | US and worldwide | |
| RevenueCat | Checking purchases with the stores and keeping entitlements in step | US |
| DigitalOcean | The server the game talks to | Frankfurt, Germany |
| Cloudflare | Traffic in front of that server, encrypted backups, and mail sent to the addresses on this site | EU and worldwide |
Where it lives
The game server and its database are in Frankfurt, Germany. Backups are encrypted and stored with Cloudflare.
Apple, Google and RevenueCat are in the United States, so purchase data reaches them there. FILL: confirm the transfer mechanism each of the three relies on — Standard Contractual Clauses, the EU–US Data Privacy Framework, or both — and name it here.
How long we keep it
Retention is given per category in the table above. When you ask us to delete your account we remove your ID, display name, friend code, results, friendships and notification token.
FILL: say what survives deletion and why — purchase records almost certainly must, to satisfy tax law. Be specific about the period.
Security
Traffic between the app and the server is encrypted in transit. The server is firewalled to the ports it needs, access is restricted to keys we hold, and backups are encrypted.
We hold no payment details at any point: card numbers go to Apple and Google and never reach us.
Children
FILL: the minimum age, and what happens if we learn a younger child has an account. This has to match the age rating you give Apple, the target-audience answer you give Google, and the COPPA paragraph below — reviewers check all three against each other.
Your rights
Wherever you live, write to [email protected] to get a copy of your data, correct it, or have it deleted. Include your friend code, or we cannot tell which account is yours. We reply within FILL: a period you can meet.
European Union, EEA and United Kingdom
The GDPR gives you rights of access, rectification, erasure, restriction, portability, and objection to processing based on legitimate interests. Where we rely on consent you can withdraw it at any time, which does not affect what was done beforehand.
You can also complain to your national supervisory authority. FILL: as a controller outside the EU offering a paid app to EU consumers, check whether Article 27 obliges you to appoint an EU representative, and name them here if so.
The trader details required by the Digital Services Act appear on our App Store and Google Play listings.
United States
California. Under the CCPA as amended by the CPRA you may ask what we collect, ask us to delete it, ask us to correct it, and you will not be treated differently for asking. We do not sell or share personal information as the CCPA defines those words — there is no advertising in the game and no third-party analytics in it.
Other states. Virginia, Colorado, Connecticut, Utah and a growing list of others give comparable rights. We handle every such request the same way, whichever state you write from.
Children. FILL: state whether the game is directed to children under 13 and whether you knowingly collect their data. Must agree with the Children section above.
Ukraine
Personal data is processed in accordance with the Law of Ukraine "On Personal Data Protection". You have the right to know who holds your data and why, to see it, to have inaccurate data corrected, and to have it deleted, and you may apply to the Ukrainian Parliament Commissioner for Human Rights.
Changes
If this policy changes we update the date at the top. For anything material we will say so in the app or by email before it takes effect.