Privacy Policy

Last updated October 27, 2026

This policy covers the games and accounts. The iPhone utility apps have their own, shorter policy: Privacy for Inlet Apps.

What we collect

• Email address — only if you sign in. Used to send magic-link authentication emails and to attach purchases to an account that survives device loss.
• Release-notify address — only if you type one into the “email me when it ships” form on an unreleased game's page. Stored as that address against that one game, used for exactly one message (that game shipped) and nothing else. No account is created, nothing is charged, and you can have it removed at any time by emailing [email protected].
• Account identifier — a random UUID we generate so your saves and entitlements can be looked up. Not tied to any personal info beyond your email.
• Game saves — only if you opt into cloud saves. The save blob (score, progress, settings) is stored keyed to your account.
• Purchase records — which games you own (SKU + payment processor transaction id). Used to recognize you as the owner on other devices.
• Daily leaderboard score and anonymous id — when you finish ALL CLEAR's Daily puzzle, the game sends that day's score and star tier (none, bronze, silver or gold) to our server, signed in or not. If you are not signed in, it is filed under an anonymous id the game makes up on your device the first time: “anon:” plus 8 random letters and digits, stored only in the game's save on that device (the browser version uses the browser's own random game id instead). The id is not derived from your device, contains nothing about you, and is not linked to your email. We use it for two things only: ranking the day's leaderboard (which shows rank, score and star tier, never the id or a name) and telling you what percentage of players you beat. We keep your best score per day. Scores are kept until you delete them: in ALL CLEAR, Settings → Account → Delete my leaderboard data erases every score filed under this device's id (and your account's, if you are signed in) and gives the device a new id. Because the id is not linked to you, that button is the way to delete it; deleting your account also erases your account's scores.
• Display name — only if you start or join a co-op or versus match: the name you type is shown to the other player and stored with that match's state.
• Co-op game state — for turn-based matches, the shared board state is stored on our servers until the game ends or you delete it.
• Aggregate site analytics — we count visits with Cloudflare Web Analytics. It sets no cookies, uses no local storage and does not fingerprint visitors. For each page view Cloudflare records the page address, the referring site, the browser, operating system and device type, and the country (derived from the IP address, which is not kept for analytics). We see only totals, never an individual visitor. Not linked to your account.
• Store counters — our own servers keep a running count per game of events such as product page views and buy-button clicks. Each is a single number added to a total; no visitor identifier, IP address or account is stored with it, so a count cannot be traced back to a person.

What we don't collect

• No session recording, no Google Analytics, no advertising pixels, no cross-site trackers, no behavioral ad profiling. Because analytics sets no cookies, there is no cookie banner.
• No contact lists, photos, precise location, or device identifiers beyond what your browser or OS sends with ordinary HTTP requests. (The leaderboard id above is a random value the game creates, not a device identifier.)
• No credit card numbers — payments are handled by Stripe; we never see the card.

Who we share with

• Stripe — processes payments. Receives your email and billing info during checkout.
• Resend — delivers transactional email (sign-in links, gift receipts).
• Cloudflare — hosts our servers and delivers the games. Handles the underlying HTTP requests.
• Cloudflare Web Analytics — counts visits to this site, as described above. It is part of Cloudflare, already listed here as our host; no separate cookie or tracker is added.

That's the full list. We do not sell data, and we do not share data with any other party.

How long we keep it

Account data is retained until you delete your account. Sign-in magic-link tokens are purged after use or 15 minutes, whichever comes first. Co-op game state older than 30 days is purged automatically. Daily leaderboard scores are kept until you delete them with Delete my leaderboard data or delete your account.

Deleting your account

Email [email protected] with "Delete account" and the email address you signed up with. We will delete the accounts row, all saves, DLC/entitlement records, and any co-op game state within 7 days. You can also delete your account from inside any Inlet game via Settings → Account → Delete account — the game calls our DELETE /account endpoint directly. Deleting an account also erases every daily leaderboard score filed under it.

To delete only your daily leaderboard data, signed in or not, open ALL CLEAR and choose Settings → Account → Delete my leaderboard data. The game calls our DELETE /me/leaderboard endpoint for this device's anonymous id (and your account, if signed in); the scores are erased at once and the device gets a new anonymous id, so later scores are not connected to the deleted ones.

Children — COPPA compliance

Inlet games are not directed at children under 13. We do not knowingly collect personal data from anyone under 13, consistent with the U.S. Children's Online Privacy Protection Act (COPPA, 15 U.S.C. §§6501–6506) and EU GDPR Article 8 (digital consent at age 16, lowered by Member State to 13). If you believe a child has submitted data, email us and we will remove it within 30 days.

Your rights (GDPR / UK GDPR / CCPA)

Wherever you live, you can email [email protected] to: (a) see what data we hold about you, (b) correct it, (c) delete it, or (d) export it as a JSON file. We respond within 30 days. The legal frame that applies to your request depends on jurisdiction:

• EU + UK residents — GDPR (Regulation 2016/679) and UK GDPR. You have the rights of access (Art. 15), rectification (Art. 16), erasure / "right to be forgotten" (Art. 17), restriction (Art. 18), portability (Art. 20), and objection (Art. 21). Lawful basis for processing your account data is contract (Art. 6(1)(b)) for game saves/entitlements and legitimate interest (Art. 6(1)(f)) for security/anti-fraud telemetry. We do not transfer data outside the EEA except via Stripe (payment processing, processor agreement) and Cloudflare (hosting, EU-bound traffic stays in EU data centers under Cloudflare's Standard Contractual Clauses).
• California residents — CCPA (Cal. Civ. Code §§1798.100 et seq.) and CPRA. You have the rights to know, to delete, to correct, to opt-out of sale/sharing, and to limit use of sensitive personal information. We do not sell your data and have not in the prior 12 months. We do not share data for cross-context behavioral advertising. The categories of personal information we collect, as defined in §1798.140(v), are: identifiers (email address), internet/network activity (purchase telemetry, game state), and commercial information (purchase history).
• All other jurisdictions. We honor erasure and access requests on the same 30-day timeline regardless of legal mandate.

Changes to this policy

If we materially change how we handle data, we will update this page and (if you have an account) email signed-in users. The "last updated" date above always reflects the most recent change.

Contact

Questions, concerns, or requests: [email protected].