Privacy policy for Xeno Labs games

Playing as a guest or with an account

As a guest you can play without signing up. Your progress is saved only on your device (in your browser or the app). We don't ask for your name or email. Clearing your browser data or uninstalling the app deletes it.

With an account, your progress is synced across your devices. You can sign in two ways:

• With Google. Google shares your name, email address, profile picture and a Google account ID with us. We never see your Google password.
• With your email address. You give us your email and a password. Passwords are handled by Google Firebase Authentication and stored only as a one-way hash, so nobody (including us) can read them.

Signed-in players choose a display name and one of our preset avatars. You can't upload your own photos or images. Please don't use your full real name as your display name.

Gameplay, groups and leaderboards

To run the daily puzzles we store:

• Your results: answers, scores, solve times, streaks, stats and which archive puzzles you've played. Answers are checked on our servers, so they're sent there when you play.
• Your settings, such as language.
• Basic technical details our providers need to deliver the game and keep it secure, such as device type, operating system, app version and IP address.

Groups. If you create or join a group with friends, the other members can see your display name, avatar and results for the group's puzzles. You can leave a group at any time.

Global leaderboard. It's off unless you turn it on, and only signed-in players can join. If you opt in, your display name, avatar and scores are shown publicly on it. You can opt out at any time, which removes you from it.

There is no chat or messaging between players.

Premium purchases

Our games are free. Premium is an optional one-time purchase that removes ads and unlocks the puzzle archive.

• In the Android app, Premium is bought through Google Play. Google handles the payment and we never see or store your card or bank details.
• Premium isn't sold on the web at the moment. If that changes, payments will be handled by a payment company that acts as the seller (a "merchant of record"), and we'll name it here.
• We receive and keep a record of the purchase: an order ID, what was bought, the price, currency, country and date. It's linked to your account so Premium works on all your devices.
• Refunds follow the rules of the store or provider you paid through.

Ads

The free version shows a small number of ads. In our Android apps we use Google AdMob; if ads are shown on our websites, we use Google AdSense. Premium removes them.

• To show ads, count them and stop fraud, Google may use cookies (on the web), your device's advertising ID (on Android), your IP address and basic device information.
• Ads are only personalised where the law allows it and, where consent is required (for example in the EU, the UK and Switzerland), only if you agree in the consent message shown before ads load. You can change your choice at any time.

You can turn off personalised ads in Google's My Ad Center, and reset or delete your advertising ID in Android Settings → Privacy → Ads. See how Google uses information from apps and sites that use its services.

Children

Our games are made for players aged 13 and over and aren't directed at children under 13 (or the minimum age where you live). Anyone can play as a guest, but we don't offer accounts for children at this time, and children shouldn't create an account, join the leaderboard or make purchases without a parent or guardian.

If you believe a child has created an account, email privacy@xenolabs.dev and we'll delete it. If we ever add parent-managed accounts for children, we'll update this policy before they launch.

How we use your data

Only to run the games: saving and syncing your progress, checking answers, running groups and the leaderboard, handling Premium purchases, showing ads as described above, answering your emails, and keeping the games secure and working.

We never sell your data, never share it for anyone else's marketing, and never use it to train AI models.

Who helps us run things

• Google Firebase handles sign-in, checks answers and stores accounts and progress. See Firebase's privacy information.
• Google AdSense and AdMob show ads, as described above.
• Google Play distributes our Android apps and processes Premium purchases. See Google's privacy policy.
• Cloudflare hosts our websites. We may use Cloudflare Web Analytics, which counts visits without cookies and without tracking you across sites.

These providers may store data in the United States and other countries. We only share what each one needs to do its job, or what the law requires.

How long we keep it

Guest progress stays on your device until you clear it. For accounts, we keep your progress, group memberships and leaderboard entries for as long as your account exists, and delete them within 30 days of you deleting your account. Uninstalling a game doesn't delete your account.

Purchase records are the exception: we keep them for as long as tax and accounting laws require, even after you delete your account. Ad data is kept by Google according to its own policies.

Your rights

Wherever you live, you can ask us to see, correct, export or delete your data, and you can withdraw consent for personalised ads at any time. Depending on where you live, you may have more rights under local law (for example the ARCO rights in Mexico, the Australian Privacy Principles, or the GDPR in Europe), including the right to complain to your local data-protection authority.

To make a request, email privacy@xenolabs.dev. We'll reply within 30 days.

Deleting your account and data

In the game: go to Settings → Account → Delete account and confirm. This permanently deletes your account, progress, group memberships and leaderboard entries.

Without the game: email privacy@xenolabs.dev from the email address on your account and tell us which game you play. We'll delete your account and its data within 30 days and confirm by email.

As a guest: clear your browser's site data for the game, or uninstall the app. Nothing is stored on our side.

Deleting your account ends Premium on that account. Purchase records are kept only as long as the law requires (see above).

Security

Data is encrypted in transit (HTTPS) and at rest by our providers. Access rules make sure each account can only read its own data. No system is perfectly secure, but if something ever goes wrong we'll tell affected players and the authorities as the law requires.

Changes and contact

If this policy changes, the new version will be posted on this page with a new effective date, and for important changes we'll also let you know in the game. Questions? Email privacy@xenolabs.dev.