Privacy Policy

What we collect

Squaredrangle is a puzzle game with optional accounts and leaderboards. The data we collect depends on how you use the app:

• Guest accounts — when you first open the app we create a guest profile tied to a randomly generated device identifier. We don't collect your name, email, or phone number for guest accounts.
• Sign-in accounts — if you use Sign in with Apple or an email magic link, we receive and store your email address and display name. These come from the identity provider; we never see your password. If you use Apple’s Hide My Email, we only ever see the relay address.
• Subscription status — if you buy the Online Multiplayer subscription, we store its expiry date and Apple’s anonymous transaction identifier so we know your subscription is active. We never see your payment details; Apple handles the transaction.
• Gameplay data — scores, combo counts, game durations, palette IDs, and the client platform (web / iOS / Android). This is what powers leaderboards.
• Friend data — usernames you choose, friend connections, and pending friend requests.
• Logs — we deliberately do not write per-request logs, so your IP address is not stored by the application. Your IP is processed transiently in memory to rate-limit abusive traffic, and appears in our web server’s short-lived operational logs, but it is never linked to your account.

What we don't collect

• No advertising identifiers (no IDFA, no AAID).
• No third-party analytics (no Google Analytics, no Facebook SDK).
• No microphone, camera, contacts, or location data.
• No cross-app tracking.

How we use your data

• Render your profile, friends list, and the leaderboards you appear on.
• Authenticate you on each request via a JWT session token.
• Detect abuse (rate-limit excessive requests from a single IP).
• Send transactional sign-in emails (magic links). We never send marketing email.

Who we share with

We don't sell or rent your data. The only third parties that touch your data are infrastructure providers we need to run the service:

• Hetzner Online GmbH (Germany) — hosts our servers and databases.
• Apple — verifies your Apple identity token if you use Sign in with Apple, and processes App Store purchases and subscriptions.
• Strato AG (Germany) — delivers magic-link sign-in emails.

None of these have access to your gameplay data or friends list.

How long we keep your data

Your account and gameplay data are kept until you delete the account. You can delete your account at any time from the Profile screen in the app — it removes your profile, all scores (global / daily / friends), all friendships, and all linked sign-in providers. Deletion is immediate and permanent.

Your rights

Under GDPR and most other privacy laws, you have the right to access, correct, export, and delete your data. The in-app Profile screen lets you do all of this directly. If you need help, email us at info@squaredrangle.com.

Children

Squaredrangle is not directed at children under 13. We do not knowingly collect data from children under 13. If you believe a child has created an account, email us and we'll delete it.

Changes to this policy

When we update this policy we'll change the “Last updated” date at the top. Material changes (such as new data collection) will be announced inside the app on first launch after the change.

Contact

Questions, requests, complaints: info@squaredrangle.com.