Privacy Policy

Squaredrangle is a puzzle game with optional accounts and leaderboards. The information associated with your profile depends on the features you use.

• Guest accounts. A guest profile uses a randomly generated device identifier. Guest profiles contain no name, email address, or phone number.
• Sign-in accounts. Sign in with Apple and email magic links provide an email address and display name. Identity providers keep password credentials. Apple Hide My Email supplies its relay address. Apple sign-in also provides an encrypted refresh credential for access revocation during account deletion. Its encryption key is stored separately from the database.
• Subscription status. Online Multiplayer records include the product, status, purchase date, expiry date, Apple transaction identifiers, and verified App Store notification metadata. This metadata applies renewals, expirations, refunds, and revocations once. Complete signed notification payloads and payment-card details are excluded from Squaredrangle records. Apple handles each transaction.
• Gameplay data. Scores, combo counts, game durations, palette IDs, and the client platform power leaderboards.
• Friend data. Records include chosen usernames, friend connections, and pending friend requests.
• Operational data. Application request logging is disabled. Rate limiting processes IP addresses transiently in memory. Web-server operational logs retain IP addresses for a short period. Those entries carry no Squaredrangle account link.

• Advertising identifiers, including IDFA and AAID
• Third-party analytics, including Google Analytics and the Facebook SDK
• Microphone, camera, contacts, and location data
• Cross-app tracking data

• Render profiles, friend lists, and leaderboards.
• Authenticate requests with a JWT session token.
• Revoke Sign in with Apple access during account deletion.
• Verify and maintain App Store purchase entitlements.
• Apply rate limits to abusive traffic.
• Deliver transactional magic-link emails. Squaredrangle sends no marketing email.

Squaredrangle does not sell or rent personal data.

• Hetzner Online GmbH, Germany. Hosts the service servers and databases.
• Apple. Verifies Apple identity tokens and processes App Store purchases and subscriptions.
• Strato AG, Germany. Delivers magic-link sign-in emails.

Hetzner infrastructure stores the service database. Apple and Strato receive no gameplay data or friend lists.

Live account and gameplay data remain until account deletion. Deletion removes the profile, global scores, daily scores, friend scores, friendships, purchase-entitlement links, encrypted Apple revocation credential, and linked sign-in providers from the live service.

Routine infrastructure backups can contain an older copy during the normal rotation period. Backup rotation expires those copies. Backups serve disaster recovery.

An anonymous receipt can confirm a completed deletion for 90 days. Expired receipts are removed at service startup and during the six-hour privacy cleanup.

A de-linked purchase-notification audit record can remain for transaction integrity and duplicate-event prevention. It contains Apple-generated event and transaction identifiers. It contains no Squaredrangle account ID, profile, or email address.

GDPR and many other privacy laws provide rights to access, correct, export, and delete personal data. The Profile screen provides these controls in the app. The web deletion page remains available after the app has been removed.

Squaredrangle is designed for people aged 13 and older. We do not knowingly collect data from children under 13. Contact us if you believe a child has created an account.

The date at the top records the latest policy update. Material changes can also receive notice through the app, website, email, or another appropriate channel where required.

Send privacy questions, requests, and complaints to: