מדיניות פרטיות

English

Mishbetzet is a daily puzzle. You can play it with no account, no name and no email address, and that is how it opens the first time. This page says exactly what is stored, why, and for how long.

Stored even without an account

• A device identifier. The app draws a random string the first time it runs and keeps it on the device. It tells the server that this is the same player, and nothing more. It is not the IDFA, not an advertising identifier, and not any Apple or hardware identifier.
• Your play. Which puzzles you opened, whether you solved them, how long it took, how many hints you took, and the run of days that follows from it. The times are what make a leaderboard possible, and the run is what brings you back tomorrow.
• Your interface language, so the puzzle arrives in the right one.

Stored only if you choose to sign in

Signing in is entirely optional. It exists so your run survives a new phone, and no part of the game is closed without it.

• Your email address. Used only to send a six digit code and to recognise your account on the next phone. There is no password, so there is no password to leak. The code is stored one way hashed, is good for ten minutes, five attempts and a single use. We never send marketing, newsletters or promotional mail to it.
• A display name you choose. Other players see it on leaderboards and inside groups you belong to. Choose none and no name is shown for you.
• Groups you belong to, and the invite code you joined with.
• Boards you invent and share into a group, together with any reports and blocks you file. A block is stored so that it keeps working.

Not here at all

• No ads and no ad SDKs.
• No analytics, no tracking. There is no third party SDK in the app, and no tracking across other apps or websites.
• We do not sell or share your data with anyone, for any purpose.
• No device permissions. The app asks for no location, contacts, camera, microphone, photos or health data.
• No push notifications. The daily reminder is scheduled and fired by the phone itself. There is no push server and no notification token held by us.

Where it lives, and who else sees it

Data is held on servers the developer runs. The only third party is an email provider, which carries the sign-in code to your inbox and receives your address and that code for the purpose, and nothing else.

How long

Data is kept while the account exists. A sign-in code is destroyed within ten minutes or on use, whichever comes first. A session that goes unused expires after ninety days.

Deletion

In settings, two taps, delete account. Your row goes, and with it your plays, runs, group memberships, blocks, transfer codes and the boards you invented. The phone empties its own storage and draws a new identifier. What survives is only what belongs to somebody else: a group you founded carries on without a founder's name, and a board you shared into it stays playable without an author's. No request to us is needed and there is no waiting period.

Children

The game is not directed to children under 13 and we do not knowingly collect data from them. Players can share boards they invented into groups, so the app carries content reporting and player blocking, and reports are reviewed.

Your rights

Deletion is in your hands, inside the app. To see what is held about you, to correct it, or to have it exported, write to the address below and we will answer.

Changes

If this policy changes, the updated version is published on this page with a new date.

Contact

[email protected]