Privacy, in plain sight.

What we collect

When you use Sign in with Apple, we receive an Apple-specific account identifier, an authorization credential stored in encrypted form for account security and deletion, and, only when Apple provides it, your chosen name or private relay email. We store your public player name, avatar, published challenge metadata, explorer paint strokes, gameplay outcomes, timing, attempts, scores, and ranking statistics. Artwork image files remain bundled in the app and are not uploaded.

Our hosting service may process limited technical request data such as IP address, date and time, requested URL, device information, and error details for security and reliability.

How we use information

• To authenticate your account and synchronize progress.
• To publish challenges and calculate leaderboards.
• To prevent cheating, duplicate events, and abuse.
• To diagnose outages and comply with legal obligations.

We do not sell personal information or use it for targeted advertising.

Cookies and analytics

The current website does not intentionally use advertising cookies, tracking pixels, or third-party analytics. Your browser or hosting infrastructure may still retain standard technical data needed to deliver a secure web request.

Third-party services

Authentication is provided by Apple and hosting by Fly.io. These providers process information under their own privacy policies.

Data retention and security

Account and gameplay data is retained while your account is active. Session credentials are protected by iOS Keychain, server sessions are stored as one-way hashes, and the Apple refresh token used for authorization revocation is encrypted at rest. You can permanently delete your account and associated gameplay data from the bottom of the Profile screen. Deletion revokes Apple authorization when a stored revocation token is available and removes that encrypted token; older accounts without one are guided through Apple’s manual disconnection steps. We use HTTPS and private database networking, but no system can be guaranteed completely secure.

Children

Paint & Seek is not directed at children under 13, and we do not knowingly collect personal information from children through this website.