Pipa Games privacy policy

Pipa Games is operated by Avantika Utam. This policy describes version 1.6.0 and our support website.

No advertising or analytics SDK is included in the app. We do not use your gameplay to track you across other companies’ apps or websites.

Solo play and your profile

Your profile, puzzle progress, completed levels, favorites and settings are saved locally on your iPhone. Your free-form private profile is not shared with other players. Cloud accounts and purchases are disabled in this version; the app does not request your email for sign-in or sell a subscription.

Daily Coach and practice records

Daily Coach keeps your selected focus, difficulty, daily practice boards, attempts, results, move counts and hint use locally on your iPhone. If you enable the optional timer, active solving time is stored locally too. These records are not sent to our servers or used to diagnose health or measure intelligence.

You can share a practice report using the iOS share sheet; nothing is exported automatically. The destination you choose receives that report. Reset practice removes the local Daily Coach history and preferences without deleting your other puzzle progress or profile.

Personal daily puzzles and feedback

In build 19 and later, personal puzzle choices, difficulty ratings and saved boards are stored with your local progress. They are not sent to the feedback service. A random local identifier helps select each day’s board. Shared challenge links contain a one-puzzle seed, not that identifier.

Only when you tap Send feedback, we receive your message, selected topic and app version in a private Supabase inbox operated by Avantika Utam. Do not include personal details, passwords or room codes. No account, email address or puzzle history is attached automatically. We do not display feedback publicly or use it for advertising. We use it to improve the app and address problems. Your message may identify you if you include identifying text.

Feedback is deleted after 90 days by an hourly cleanup job. You can delete your submission immediately from its confirmation screen. After closing that screen, use our private support form for a privacy request and provide enough non-sensitive context to locate the message. Server-salted network-address hashes prevent spam, rotate hourly and expire within three hours. The service provider’s operational logs and backups are separate from this schedule.

Private support conversations

Our support form sends your selected topic, message, random ticket identifier and message identifiers to Avantika Utam through Supabase. It does not require an email address or account. We use this information to answer questions, investigate problems and handle privacy requests. Do not include sensitive personal information. Messages may identify you if you include identifying text.

Your browser creates a random secret for your ticket. The server stores its cryptographic hash. The secret remains in the private link you save; it is not sent to the website host as part of the page URL. Anyone with the full link can read, add to or delete the conversation. We cannot recover a lost link. No messages are public, and no email notifications are sent.

Tickets and all replies are deleted from the live database 90 days after the ticket is created, with hourly cleanup. You can delete a conversation immediately using its private link. This deletes the live records; it does not remove earlier copies from provider backups. Expired tickets cannot be read even before cleanup runs. Salted network-address hashes rotate hourly and expire within three hours; they limit spam. Separate provider logs and backups follow the provider policies described below.

Private multiplayer

Creating or joining a Wordlock Race sends a curated nickname, room-specific identifier, guesses and results to our Supabase service in Canada. Your invited opponent sees your nickname, guess count and result; they do not receive your guesses. Race rooms expire after 24 hours and are deleted within one additional hour.

Switchboard Together sends your curated nickname, proposed routes, preset notes, approvals and completion. Your invited partner can see shared gameplay. Each player’s private clue layer stays separate until both approve a matching route. These rooms expire after seven days and are deleted within one additional hour.

A random room credential and draft are kept in this iPhone’s device-only Keychain. Local completion history stays on the device. Server-salted network-address hashes used for rate limiting are retained for up to three hours. There is no public player directory, matchmaking, free-text chat or image upload.

Service providers

Supabase provides the support, feedback and multiplayer database and server functions in its Canada region. Connection and security logs can include IP addresses and request information. Providers may retain operational logs or backups under their own policies, separately from the room deletion periods above. See Supabase’s privacy policy.

Apple distributes the app through its App Store and TestFlight services and processes feedback you choose to send, including any screenshots or diagnostics attached to your report. See Apple’s privacy policy. This help website is hosted with OpenAI Sites; the hosting service processes ordinary requests needed to deliver the pages. See OpenAI’s privacy policy. The website uses Google Fonts to display typefaces; your browser requests font files from Google. See Google’s privacy policy. Website favorites for printable products, if used, are saved in your browser separately from app data. These pages contain no analytics scripts or advertising. The optional contact form sends information only when you choose to submit a request.

Sharing and controls

Sharing happens when you choose the iOS share sheet. Puzzle challenge links contain the game, seed and difficulty, but no email or authentication token. Share room invitations only with the person you want to play with.

You can edit your private profile in the app. Local saves are stored on this device; deleting the app removes its local app data, although device-only Keychain items can persist. Multiplayer server records expire on the schedules above. Use our support form if you need help with a privacy request. We may need enough information to identify your own room without exposing another player’s data.

Contact Avantika Utam

Use the private support form and choose “A privacy or deletion request” for privacy questions. Save your ticket link to read our response and provide further information. You can also delete that support conversation from the same link. Do not send passwords, sign-in codes or banking information.

Changes

We will update this policy before enabling accounts, subscriptions or new data uses. The effective date appears at the top of this page.