A plain-language summary

Data safety

This summary is for players and app-store review. The full details are in our Privacy notice.

Data we may collect

• Email address and authentication account data, when you create an account.
• Synced puzzle results, streaks, statistics, tutorial state and account plan or entitlement data.
• Gameplay events, a random local player ID and timestamps when analytics is configured.

Why it is used

To sign you in, sync your history, provide archive and account features, secure the service, prevent abuse, measure whether the games work and improve the product.

Sharing and security

Account and gameplay data is shared with Supabase for authentication and database hosting. If payments are enabled, Stripe handles payment processing and billing identifiers. An optional analytics endpoint receives product events. We do not sell personal data or use it for ads. Data is sent over HTTPS and service credentials stay server-side.

What we do not ask for

The games do not need your precise location, contacts, camera, microphone or full payment-card number. Anonymous play does not require an email address.

Deletion

You can delete an account from /account. This removes the Supabase account and account-owned synced results, puzzle history, entitlements and user records, and clears the current browser’s local 27Rockets data. Shared puzzle content and anonymous aggregate data are not account records.