Your games stay between you and your friends.

Your account.

To play you create an account with an email address (which is also how you sign in), a display name, and a password. We store your password as a one-way hash, so nobody can read it back — not even us.

Basic device information.

When you sign in on a phone or tablet we record which platform it runs and the version of the app, along with an ID for that install. That's what keeps your games working when you switch between devices.

How you use the app and this site.

We keep a log of what happens in the app — like signing in, starting a match, making a move or sending a message — with the time, whether it worked, and your device's platform and app version. On this website we log which pages are visited and the site that linked there. The log never includes what you write in messages, your password, or your email address, and on this site we don't use cookies and only keep part of your IP address.

We use this log to audit how the service is being used, to find and fix problems, and to make the app faster and better. It's kept on our own servers — no third-party analytics service ever sees it — and it's deleted after 90 days.

Your games.

We store your friends list, invites, matches — every move — and the messages players send each other inside a match. A message is visible only to the people playing that match: there's no feed, no public leaderboard, and nobody else can see it.

We don't keep games forever. A match's moves and messages are deleted 90 days after it ends. We keep the result — which game, who played, who won, and when — so your stats stay right, until you delete your account. A match nobody moves in for 30 days ends on its own, and a challenge nobody accepted is deleted 30 days after it lapses. Our server backups are kept for up to 30 days, so deleted data is gone from them within that time too.

Direct messages.

Messages you send a friend directly are visible only to the two of you, and are deleted 90 days after they're sent. Either of you can delete the whole conversation sooner from its menu: that deletes it for both of you, on our servers and in your apps, straight away.

Circle chat.

Messages in a circle's chat are visible only to the people in that circle, and are deleted 90 days after they're sent. Whoever wrote a message can delete it sooner, and so can the circle's owner; deleting the circle deletes its chat. Someone who leaves a circle no longer sees its chat. If you block someone, neither of you sees the other's messages there.

How messages are stored.

The text of match chat, direct messages, circle chat and feedback is encrypted in our database, so a copy of the database or one of its backups can't be read without keys we keep separately. Our server holds those keys in order to deliver your messages, so this isn't end-to-end encryption. We don't read, monitor, scan or filter your messages — no person and no automated system at our end looks at what you write — and our own admin tools can't show message text. The only messages we see are ones someone reports to us. While a message is being delivered, a copy also sits in our delivery queue (for the live update and the notification) for up to a day.

Messages you hide.

You can hide any message someone sends you, in a match or directly, and show it again whenever you like. We store which messages you've hidden — just that you hid it, not anything about what it says — so they stay hidden on all your devices. Nobody else is told, and it doesn't change what anyone else sees. That record is deleted along with the message, or when you delete your account.

Feedback you choose to send us.

If you report a problem or leave feedback from in the app, we receive what you wrote plus technical details like your platform and app version. You may also attach a debug log; if you do, it contains technical information about your device. We use all of this only to fix things and improve the games.

If you report someone, the report includes a copy of the message you reported, so we can look into it even after the message itself is deleted.

The "I'm interested" form on this site.

It collects just an email address so we can let people know when there's news. That is the only thing it's used for — we don't pass it anywhere else.