Triangle Hurdle Privacy Policy

You can play Triangle Hurdle without giving us your name, your email, or anything else about you — signing in is optional. The game creates an anonymous identifier on your device the first time you open it, and that identifier, not you, is what your progress, Triangles and purchases are attached to. If you choose to create an account, with Apple or with an email address, see section 1.

One thing is worth knowing before you read the rest: the leaderboards are public — your leaderboard name and your points can be seen by anyone. Section 12 explains how to have everything erased, from inside the app, and the one thing that stays.

On first launch the app obtains an anonymous identifier from Sendora Cloud, our identity provider, and stores it on your device — including in the device keychain, so reinstalling on the same phone keeps it. Everything the game records on our server is attached to that identifier. It is not derived from your name, your email, your phone number, your advertising ID or your hardware.

Signing in is optional. If you create an account, Sendora Cloud keeps it:

• With Sign in with Apple, the app asks Apple for your name and email address. Apple shares them only if you allow it, and the email can be a private relay address that keeps your own hidden. They go to Sendora Cloud with your account — our own server never receives them.
• With an email address and a password, Sendora Cloud keeps the address and holds the password; we never see the password.

Creating an account keeps the same identifier, so nothing you have moves. Signing in to an account you made earlier switches the game to that account’s identifier. Without an account, there is no way for us to connect the identifier to a person.

Your progress — the levels you have cleared and their points, the Dailies you have solved and the past days you have opened — is kept on your device, so the game works offline. So are your settings (haptics, your reminder and its time), the solves still waiting to be sent, and a few counters the game uses to pace its ads and offers. Section 3 explains which of this our server also records.

Attached to your identifier, the server keeps:

• Daily results — which day you played, how long the solve took, how many hints you used, how many moves it took, and the points it scored. Your moves are sent so the server can replay them and check the solve; the replay happens in memory and the moves themselves are not kept.
• Classic and event levels you clear — which level, and its points — checked the same way.
• Past Dailies you solved later, and the past days you opened, and how (with Triangles or a video).
• Triangles — your balance and a running ledger of every one earned and spent, with what each was for (a hint on a particular board, a day you opened, a purchase, a chest) — and your purchases (section 8).
• Your timezone offset— a number of minutes from UTC, sent by your device, so that “today’s board” means the same thing every day. It is a timezone band, not a location.
• Your leaderboard name — one the game generates, or one you choose. See section 4.

The server sends this record back to the app when it opens and when you sign in, and the app joins it to the progress on your device — which is how your progress follows your account to another phone.

The weekly Daily leaderboard and the lifelong Classic leaderboard show every ranked player’s leaderboard name, points and rank — and on the Daily board, how many Dailies they solved that week. They are served without any sign-in requirement, so they can be read by anyone on the internet, not only by people who have the app. They carry no identifier: when the app shows you your own row, it is because our server recognised your request, not because your identifier was published.

The name is one the game generates for you — an adjective, a noun and a number — unless you change it in Settings. If you do, the name you type is published there, so don’t use your real name or anything that identifies you. A name you choose is checked against a list of words that are not allowed, and the only thing you ever type that is published is that name.

The game shows ads through Google AdMob. Two kinds arrive on their own: a banner at the bottom of the screen, and a full-screen ad that can appear when you leave a finished Classic or event level, or on every third restart of a board — never on the Daily’s win. No Ads and Premium both remove those two.

The third kind is never removed: rewarded videos you choose to watch — for a hint, or to open a Daily you missed. You are always the one who starts them.

Where the law requires it, the app shows Google’s consent form when you first reach its home screen; on iOS it then asks for permission to track through Apple’s App Tracking Transparency prompt, on that same visit. No ad is requested before you have answered. Your answers decide whether the ads you see are personalised. Declining does not change the game in any way — you will still see ads, they will simply be less targeted. Where Google says it is needed, Settings has a Privacy choices row to change your answer.

Google receives standard advertising signals directly from its SDK on your device; we do not see them and do not control them. How Google uses them is set out in how Google uses information from sites or apps that use its services. When you watch a rewarded video, and only then, the app passes your Triangle Hurdle identifier to Google, with what the video was for (a hint, or the day it opens), so that Google can confirm back to our server that the video really was watched. Banner and full-screen ads carry no such identifier.

The app sends crash and error reports to Sentry so that faults can be found and fixed. Reports carry the stack trace, a trail of what the app was doing (such as the screens and controls involved), and basic device context such as the model, the OS version and the app version.

They are configured not to attach personal information: no IP address is recorded with the report, no identifier, email or leaderboard name is attached to it, and anything after a ? in a URL is stripped before the report leaves your device.

The game does not send analytics about how you play — no record of boards, moves, taps or screens. The Sendora Cloud SDK does record a small set of events about the app itself:

• when a session starts, and when the app is opened, sent to the background or brought back;
• signing up, signing in and signing out, and which method was used;
• a purchase being granted (which product), and Restore purchases being used (how many purchases Apple returned);
• technical checks of your session each time the app starts, and reports if they fail.

Each event carries your identifier, a session identifier, the time, and basic device information — the device type and model, the OS version and the app version. If you have an account, its email address is attached to these events. Events made while you are offline wait on your device and are sent later.

Packs of Triangles, No Ads, All Dailies and Premium are bought through Apple. We never see your card, your billing address or your Apple ID.When you buy, the app gives Apple a token made from your identifier. Apple signs the transaction, the app sends it to our server, and the server checks Apple’s signature before granting anything. We record the original transaction number, what was bought, the Triangles it paid, whether it was a live or a test purchase, and the identifier it belongs to — so the purchase reaches the right player, is never paid twice, and a refund can be honoured. Restore purchases sends the transactions your Apple ID still holds, and moves No Ads, All Dailies and Premium to the identifier that restored them.

Apple also notifies our server about refunds. Those notices are recorded without your identifier, and a refunded purchase is withdrawn — see refunds.

The app asks for permission to send notifications only when you ask for a reminder — the daily reminder offered after a win, or in Settings, and an event’s Remind me. Reminders are scheduled on your device; nothing about them is sent anywhere.

Once notifications are allowed, the app also registers your device’s push token with Sendora Cloud, with your identifier, the platform and the app’s bundle identifier, so that we could send you a message — and if you tap a message we sent, it reports which one.

When you share a solved board, the app makes a picture of the board — with no name and no time on it — and asks Sendora Cloud for a short link to that board, which opens it in the app or, without the app, on this website. The request names the board, not you. Where the picture and the link go is up to you, through your device’s share sheet.

Our server does not store your IP address, your user agent or any device fingerprint, and it keeps no request log. It does read your IP address from each request in order to limit abusive traffic — that is held briefly in memory only, is never written to the database, and is not attached to your identifier. The server’s own operational logs can name an identifier when something goes wrong, for diagnosis. Our API sits behind Cloudflare, which carries the connection and so sees the IP address of every request, as any network provider between you and us would.

There is no Firebase Analytics, Amplitude, Mixpanel, Facebook SDK or AppsFlyer in this app, and it does not use your location, contacts, camera, photos or clipboard. The services involved are:

• Google AdMob — serves the ads, and confirms rewarded videos. See section 5.
• Apple — takes the payment and tells us the outcome (section 8), and, if you use Sign in with Apple, confirms who is signing in (section 1).
• Sendora Cloud — issues the anonymous identifier, keeps your sign-in if you create an account (section 1), receives the usage data in section 7, holds push tokens (section 9) and makes share links (section 10).
• Sentry — receives crash reports from the app. See section 6.
• Cloudflare — carries traffic between your device and our server, and serves this website.
• Google, separately from AdMob — the app checks whether you are online by requesting an empty page from a Google address; nothing about you is sent with it.

Our database is one we run ourselves, not a hosted service belonging to somebody else.

Game records are kept for as long as the game runs; there is no automatic expiry. Deleting the app removes what is on your device, but not what our server holds.

You can delete your account in the app— Settings, then Account, then Delete account — whether or not you ever signed in. That deletes your sign-in at Sendora Cloud and erases the records our server holds against your identifier: your Daily results, your level clears, your Triangles and their ledger, the days you opened, your purchases’ link to you, and your leaderboard name and entries, which disappear from the public boards. If the deletion is held for a grace period, the app says how long; signing back in before it ends cancels it, and otherwise the records are erased when it does. Backup copies of the database, when we keep them, expire within 30 days.

Signing in to an account you made earlier leaves the guest you were playing as behind — the app warns you first. Once the sign-in succeeds, that guest’s records are erased from our server the same way, its leaderboard entries included. If the erasure cannot reach us, write to us with the guest’s leaderboard name and we will finish it.

One thing is kept, and it is not about you. A receipt for a purchase — the store’s transaction number, what it was for and what it paid — and a record of a rewarded video confirmed by Google stay, with your identifier removed, so that they belong to nobody. That is what lets a refund be matched to a payment months later, and stops the same transaction being credited twice. They cannot be traced back to you.

To ask what we hold about you, or for a copy, or for erasure if you no longer have the app, email privacy@ropolabs.com with the leaderboard name the game shows for you.

Triangle Hurdle is not directed at children under 13, and we do not knowingly collect information from them. If you believe a child has given us information, write to the address below and we will remove it.

If this policy changes in a way that affects what we collect or who we share it with, the date at the top changes and the new version is published here before the change takes effect in the app.

For privacy questions, data requests, erasure requests, or complaints, email privacy@ropolabs.com.