Privacy Policy
This policy explains what data the Twicetold app ("the game") uses on Android and iPhone, why, and what you can do about it. Twicetold is made by Golunex Games ("we", "us"). You can reach us at golunexgames@gmail.com.
1. Data on your phone
Your level progress, stars and best scores, settings (language, sound, music), which tutorials you have seen, your daily streak and the secret key of your anonymous player ID are saved on your device. If you sign in with Google or Apple, a copy of your progress is also kept on our server (the "cloud save" in section 2) so you can continue on another phone. Uninstalling the game or clearing its data deletes what is on the device.
2. Data our server processes
When you use an online feature (daily puzzle, leaderboards, hints, shop, sign-in), the game talks to our server. The server stores:
| Data | Why |
|---|---|
| A random player ID and a secret key, created automatically on first use (the key is stored only as a one-way hash) | To recognise your game without an account |
| Your display name. It starts as "Player-" plus six characters, and you can change it in the game | Shown publicly on the leaderboards |
| Results of the daily puzzle and of campaign levels: level or date, the moves you played, number of moves, time from opening the puzzle to solving it, points, stars, whether a hint was used | To score and rank results fairly and to reject impossible or automated results |
| Hint balance and the hints you unlocked (level, type, time) | So a hint you paid for stays unlocked and is never charged twice |
| If you choose "Continue with Google" or "Sign in with Apple": the stable account number Google or Apple gives our app for your account (not your email, name or photo) | To keep bought hints, your name and results with you on a new phone, also between Android and iPhone. Signing in is only required to buy hints |
| Cloud save, only when signed in: the levels you solved with your best points and stars, the hints you unlocked and your daily streak | So you can continue where you left off on another phone |
| Purchases: product, the purchase token from Google Play or the transaction number from the App Store, time | To credit each purchase exactly once. We never receive your payment details |
Like every website and app server, our hosting provider receives your IP address and basic request information (such as time and app version) to deliver the request and protect the service from abuse. We do not store IP addresses in our game database.
3. Services we use
- Cloudflare (Cloudflare Workers and D1) hosts our server and database. Cloudflare Privacy Policy.
- Sign in with Google, only if you choose it: Google's account picker on Android, Google's sign-in page on iPhone. Our server checks the sign-in with Google and keeps only the account number described above. Google Privacy Policy.
- Sign in with Apple on iPhone, only if you choose it. We ask Apple for no name and no email; our server checks the sign-in with Apple and keeps only the account number described above. Apple Privacy Policy.
- Google Play billing (Android) and App Store in-app purchase (iPhone) handle payments. Our server asks Google or Apple whether a purchase is genuine before it adds the hints.
- Google Play Integrity (Android) lets our server check that a result was sent by a genuine copy of the game. We receive a verdict about the app and device, not your personal data.
- Google AdMob, on Android (and on iPhone once rewarded ads are available there), shows an ad only when you choose to watch one for a hint. AdMob may collect device identifiers (such as the advertising ID), IP address and ad interactions, as described in how Google uses data from apps that use its services. Where the law requires it (for example in the EEA and the UK), the game asks for your consent first, and you can change your choice later in your device or in-game settings. On iPhone, the advertising identifier is only used if you allow it when iOS asks.
We do not use analytics or tracking tools in Twicetold.
4. Legal basis
We process the data in section 2 to provide the features you use (performance of our agreement with you) and to keep the leaderboard fair and the service secure (our legitimate interest). Personalised ads, where offered, rely on your consent.
5. How long we keep data
We keep your player record, name, results, cloud save and hint records for as long as your player ID exists, so your leaderboard history, progress and hints remain available. We delete them when you delete your data (see section 6). Purchase records may be kept for as long as tax or consumer law requires.
6. Your choices and rights
- Delete your data in the game: Settings (the gear on the main menu) → Delete my data. This removes your player, name, results, cloud save and hints from our server and resets the game on your phone.
- Sign out in the game: Settings → Sign out. Your progress stays in your account and comes back when you sign in again.
- Change your display name: Leaderboard (the trophy on the main menu) → the pencil button.
- Play offline: the campaign works without an internet connection, and nothing is sent to our server unless you use an online feature.
- Ask for a copy, a correction or the deletion of your data by email: see Delete your data or write to golunexgames@gmail.com.
Depending on where you live (for example under the GDPR in the EU or the KVKK in Turkey), you may also have the right to object to processing, to restrict it and to complain to your data protection authority.
7. Children
Twicetold is a general-audience puzzle game and is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has sent us personal data, email us and we will delete it.
8. Security
All traffic between the game and our server is encrypted (HTTPS). Player keys are stored only as hashes, and the server checks every result by replaying its moves before accepting it.
9. Changes
If we change this policy we will update the date above, and for important changes we will also tell you in the game.
10. Contact
Golunex Games · golunexgames@gmail.com