Privacy Policy

Last updated [DATE]. Tuck is made by [LEGAL ENTITY]. Questions about this policy go to support@tuck.day.

This policy describes exactly what Tuck stores, where it lives and how long it stays. It is written to match what the app actually does.

The short version

Tuck asks you to type nothing about yourself. There is no sign-up form, no phone number and no advertising identifier, and you never type a name. If you sign in with Google or Apple we keep the email address of that account, and nothing else about it. If you play offline, nothing leaves your phone at all.

Playing offline

Choosing "Play offline" creates no account and sends nothing to our server. Your puzzles, times and records stay on the phone. Nothing in this policy's "on our server" section applies to you.

If you play with an account

A guest account is an identifier our server generates. It is not derived from your phone, your hardware or anything about you, and it is not shared with anyone.

Signing in with Google or Apple gives us two things: the opaque account identifier the provider issues for you, and the email address of that account. We do not receive and do not store your name or your profile picture.

The identifier is what recognises you as the same player on another phone. The address is kept so that we can tell you about your own account — a problem with it, a purchase, or a change that affects it — and so that we can find your account when you write to us for help. We do not send marketing or newsletters, and we will not start without asking you first. We do not sell it, share it, or give it to an advertiser or an analytics service; nobody outside [LEGAL ENTITY] receives it.

Your provider's sign-in screen names the address before you agree, and you can withdraw the app's access to your provider account at any time.

If you use Sign in with Apple you can choose *Hide My Email*, and we receive one of Apple's forwarding addresses instead of your own. That works perfectly well for us. Apple sends an address only the first time you sign in, so if you later change it with Apple we will still hold the earlier one.

What we store on our server

For an account, we keep:

• The account identifier, and whether it is a guest or signed in with a provider
• If you signed in with a provider: the email address of that account, whether the provider had verified it, whether it is one of Apple's forwarding addresses, and when we last saw it. A guest account has no address
• Your display name, and when you last changed it
• Your leaderboard scores and ranks, for the daily and random ladders
• Which dates you have solved, and how long each solve took
• Your coin balances, hints and streak freezes, and when you last claimed a gift
• A small settings record: sound, haptics, board colours and reminder preference
• Identifiers of solves already counted, so a solve sent twice is not scored twice
• Daily counters, so the limits on scored solves and rewards can be enforced
• When you last opened the game, to the nearest hour, so we can see how many people are playing

If you buy something, we keep the store's transaction identifier, what was bought, the platform, what it granted, and the receipt the store returned. We never see or store your card details: the App Store handles payment entirely.

For a signed-in device we keep only a SHA-256 hash of the access token, not the token itself, so a copy of our database cannot be used to sign in as you.

What we never collect

No phone number, contacts, calendar, photos, microphone, camera, precise or coarse location, health data, or advertising identifier. Tuck contains no advertising SDK, no third-party analytics and no cross-app or cross-site tracking, so there is nothing to opt out of. Your email address is never given to any of them, because there are none.

A guest account has no email address at all. Playing offline sends nothing anywhere.

Your display name

Names are assembled from two fixed word lists — an adjective and a noun, plus a number if another player already has that pair. You cannot type free text, which is deliberate: it means no one can put anything abusive or identifying on the leaderboard, including you.

What other players can see

Your display name and your score, on the leaderboard. Nothing else. Solve times also feed an anonymous aggregate — "faster than 63% of players today" — which names nobody.

What is kept on your phone

Separately from the server, the app stores on the device: your preferences and comfort options, your streak, your best time per weekday, the solutions you have found, your achievements, how many dailies you solved without a hint, any solve that could not reach the server yet, and your access token. Deleting the app removes all of it.

Notifications

The daily reminder and the gift nudge are scheduled by your phone, locally. We operate no push server and hold no push token. Turning them off in Settings stops them.

How long we keep it

A signed-in session expires after a year unused. Account data, your email address included, is kept until the account is deleted, because scores and streaks are the point of having one. We do not keep a copy of the address after that, and there is no mailing list for it to be left on.

Deleting your account

You can delete your account from inside the app: Settings, then Account, then Delete account. It asks twice, because it cannot be undone.

Deleting an account removes your scores, your solve history, the dates you solved and how long they took, your coin and hint balances, your streak freezes, your display name, your sessions, and the record tying your Google or Apple account to this game — your email address is part of that record and goes with it. The records kept on your phone go too: your streak, your best times, the solutions you found and your achievements. Your preferences — sound, haptics, colours and the comfort options — are about the phone rather than about you, so they stay.

One thing is kept, with you taken out of it: if you ever bought anything, the record that the sale happened stays — what was bought, on which store, what it granted and when — with your account no longer attached to it and the store's receipt discarded. We keep it for two reasons. A sale has to leave a record for accounting, which is an obligation we cannot set aside at request. And that record is what stops the same purchase being credited twice, which without it could be done by deleting an account and starting again.

Children

Tuck is not directed at children under 13 and we do not knowingly collect anything from them. There is no behavioural advertising in the app.

Changes

If this policy changes, the new version appears here with a new date.

Contact

support@tuck.day