Playing and saving locally do not send game data to our server. No advertising or analytics SDK is included.
Only choosing Share sends a replay: board size, tile appearances, moves, a game ID and an installation identifier derived from a public signing key. The server replays the game and computes the result. A checksum and signature check integrity; they are not proof of human play.
The public leaderboard shows the installation identifier, server receipt date, tile values/counts, maximum, total and move count. The best verified result per installation and board size is displayed. The identifier is pseudonymous, not anonymous.
Opening the leaderboard sends a normal HTTPS request, exposing your IP address to the server. Raw IPs are not stored by application code. Keyed address digests are used for a one-minute submission limit and periodically removed after a day. Submitted replay bytes are deleted on the server after analysis. Result records and submission metadata remain until the operator removes them.
Cancel deletes the local replay without sending it. After Share, the local upload file remains until the server acknowledges receipt. Failed uploads remain on the device for retry or discard. Signing keys and pending uploads are excluded from Android backup.
You can play without sharing, discard pending uploads in the leaderboard panel, or clear local app data. Clearing data or uninstalling does not delete already submitted server results. Contact the operator with your public installation identifier for a deletion request; ownership may need to be verified.
Operator setup required before public distribution: replace this paragraph with the developer’s legal name and working support/deletion email. This draft is not a substitute for the Google Play Data safety declaration.