Privacy policy
In short
- No sign-up, no email address, no password. The app creates an anonymous account the first time you open it.
- We keep your play history so your progress, leaderboard results and duels work and can be restored on a new phone.
- Ads are shown by Google AdMob, and the app asks for non-personalised ads only.
- The app sends usage events, such as which puzzles were solved, how long a session lasted and when an ad was shown, to PostHog, an analytics service, under the installation identifier and never a name. You can switch this off in Settings.
- You can delete your account and everything tied to it from Settings, at any time, with one tap.
- We do not sell your personal data.
What we collect, and why
Your account
When you first open Wirelight the app creates a random identifier for the installation. So that a reinstall gets its progress back without a sign-up, the app also sends one identifier the operating system keeps across an uninstall: on Android the Android ID combined with the app's package name, on iPhone a random value the app stores in the device Keychain. Our server stores only a one-way hash of it. We never ask for a name, email address, phone number or password.
Your display name is assigned by us from two random words. It is shown on leaderboards and in duels, and you can draw a new one in the app. Nothing you type in the app is ever shown to other players.
If you view a recovery code in Settings, the server keeps a hash of it so the code can move your account to another phone. Anyone who has the code can do that, so keep it private.
Your play
To run the game we keep, under your account identifier: the puzzles you have solved and your times, hints used, daily puzzle results and stamp weeks, duel results and your Power rating, your energy balance and the history behind it, and which boards you have been dealt. This is what restores your progress on a new phone, places you on leaderboards, pays daily prizes, matches you in duels and lets us reject cheated results.
Solve recordings
In duels and on Random boards the app may record the sequence and timing of your moves on the board. Those recordings are what other players race against in a duel, shown under a display name that is not yours, and they are how we measure each board's difficulty. A recording contains the moves and their timing and nothing else. Chapter puzzles and the daily puzzle are not recorded.
Technical data
Our servers run on Cloudflare. Like any web service they receive your IP address and basic request details with every request. We use the IP address for up to an hour to limit repeated sign-in and recovery attempts, and Cloudflare processes it to deliver and protect the service under its own privacy policy. We do not build a profile from it.
Analytics
To see how the game is played and how often ads should appear, the app sends usage events to PostHog, an analytics service. An event says what happened and when: a puzzle solved and its time, a hint used, a board abandoned, a duel finished, an ad shown, the app opened, and a session ended and how long it lasted, together with the app's version and your phone's operating system. Events are sent under the random installation identifier described above, never a name, and the app does not ask PostHog to work out your location from your IP address. You can switch analytics off at any time in Settings, under Privacy, and the app then sends nothing more to PostHog. PostHog processes them under its privacy policy. Deleting your account in the app does not reach these events, because they hold nothing that points to your account once it is gone. Write to us if you want them deleted as well.
There is no crash-reporting service in the app. The advertising and purchase services below also process data.
Advertising
Ads are served by Google AdMob. The app asks Google for non-personalised ads only. To serve and measure ads, Google's SDK collects information about your device, your advertising identifier, an approximate location derived from your IP address, and how you interact with ads. Google uses this under its privacy policy and explains its use of information from apps that use its services here. You can reset or limit your advertising identifier in your phone's settings.
If you are in the European Economic Area or the United Kingdom, Google's consent form is shown before any ad is requested, and where that applies it can be reopened from Settings.
When you choose to watch an ad for a bonus and finish it, Google tells our server, quoting your account identifier, so the bonus can be credited.
We advertise Wirelight on Meta's apps, such as Facebook and Instagram, and use Meta App Events to see which of those ads lead to installs. While Usage analytics is on, Meta's SDK collects app installs and opens, basic device and app information such as the phone model and system version, purchase events on iPhone, and, where allowed, your advertising identifier. Meta receives your IP address with these requests and processes this information under its privacy policy to measure and improve advertising. This measurement is separate from the Google ads shown inside the game, and nothing in the game changes whether it is on or off.
In the European Economic Area and the United Kingdom, nothing is sent to Meta unless you agree: on Android the app asks you, and on iPhone you agree by allowing Apple's tracking prompt. Elsewhere, ad measurement is on by default. On Android you can switch it off in Settings, under Ad measurement. On iPhone, Meta receives your advertising identifier only if you allow Apple's tracking prompt; without it, Meta receives installs and opens without the identifier, and Apple reports installs to Meta in an anonymous, aggregated form. Everywhere, switching Usage analytics off in Settings turns Meta measurement off, and on iPhone you can withdraw tracking permission in the phone's Settings under Privacy & Security, then Tracking.
Purchases
On iPhone you can buy Remove Ads. Apple handles the payment and we never see your payment details. RevenueCat, a purchase service, records the purchase against your account identifier so it can be restored on a new phone, under its privacy policy. There are no purchases on Android.
Where your data is kept
On Cloudflare's infrastructure. The database is located in Western Europe, and Google, Apple, RevenueCat, PostHog, Meta and Cloudflare process data in their own regions, so your data may be handled outside the country you live in.
How long we keep it, and how to delete it
We keep your account and play data for as long as your account exists. Settings, then Delete my data, removes your account and everything tied to it: your devices, energy history, leaderboard rows, duel history, recovery code and display name. Solve statistics and recordings are kept for difficulty measurement but no longer carry your account identifier. Duel logs older than seven days are moved nightly to an archive kept for operations; a deleted account's identifier in that archive no longer points to anything.
Deleting the app alone does not delete your account, because the server is what lets a reinstall recover it. Use Delete my data first if you want nothing left.
Children
Wirelight is not directed at children under 13 and we do not knowingly collect personal information from them. The app has no chat, no messaging and nowhere to type anything other players can see.
Your choices and rights
- Delete your account and its data at any time from Settings.
- Control advertising through Google's consent form where it is shown, and through the advertising identifier settings on your phone.
- Depending on where you live, you may have the right to access, correct or delete personal data, or to object to its processing. Because we hold no name or email address, we can act only on a request that quotes the id shown at the bottom of the Settings screen. Write to us at zero.shot.interactive@gmail.com.
Changes to this policy
Any change is posted on this page with the date at the top updated.
Contact
Zero Shot Interactive, zero.shot.interactive@gmail.com.