1. Who we are
Threadsum (“we”, “us”, “our”) is a math-routing puzzle game available on the web and on iOS. This policy explains what data the game handles, why, and the choices you have.
2. What we collect, and why
- Email address — only if you choose email sign-in. We use it solely to send you a 6-digit sign-in code and to recognise your account. We never store the address itself. We convert it into an irreversible one-way fingerprint (a keyed hash) that cannot be turned back into your email; the plain address exists only for the moment it takes to send your code.
- Sign-in code — stored only as a hash, used once, and expires within minutes.
- Username — you choose it, and it is shown publicly on the leaderboards.
- Game progress — your scores, rating, endless level, and daily-race results, so your progress is saved and can appear on the leaderboards.
- Device identifier — a random id created on your device for anonymous play. If you sign in, your anonymous progress is merged into your account.
- Game Center (iOS, optional) — if you sign in with Apple Game Center, Apple confirms your identity to us. We store only a one-way fingerprint of your Game Center id, never your Apple account details.
- Technical data — like any website, our servers briefly process your IP address to deliver the game and to limit abuse (rate-limiting). We do not use it to track or profile you.
3. How email sign-in works
There are no passwords. You enter your email, we send a 6-digit code, and you type it back; a correct code signs you in. Your email is turned into a one-way fingerprint using a secret key held only on our server, so even we cannot recover your address from what we store.
4. Who we share data with
We never sell your data and never share it for advertising or marketing. We rely on a small number of trusted service providers (“subprocessors”) purely to run the game:
- Cloudflare — hosting, and the database that stores your account, scores, and rating.
- Resend — email delivery; it receives your address only to send your sign-in code.
- Apple Game Center — only if you choose to sign in with it (iOS).
That is the complete list.
5. Where your data lives and how long we keep it
Your account data is kept for as long as your account exists. Sign-in codes are deleted as soon as they are used or expire. Anonymous progress lives on your device until you clear it. Our servers and database are operated by Cloudflare.
6. Your choices and rights
- Delete everything — Settings → Account → Delete account removes your account and all its data (scores, rating, progress) from our servers. This cannot be undone.
- Sign out / erase local data — clears the game’s data from your device.
- Requests — to ask what we hold or to request deletion, email [email protected].
Depending on where you live (for example, the EU/UK under GDPR or California under the CCPA), you may have rights to access, correct, or delete your data. The controls above let you do this directly, and you can always contact us.
7. Children’s privacy
Threadsum is not directed to children under 13, and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, contact us and we will remove it.
8. Changes to this policy
If we change this policy, we will update the date above and post the new version on this page.
Contact
Questions or requests: [email protected]