1. The short version
Stilloku works without an account and keeps core game data on your device. If you choose to sign in, we use Firebase to authenticate you and synchronize your progress. Anonymous product analytics can be turned off. Advertising requests are made only after the Google consent system says they are allowed.
2. Information we process
Game data stored on your device
Stilloku stores preferences, unlock progress, statistics, active puzzle sessions, elapsed time, notes, entered values, and mistake counts locally so the app can work offline and restore your game.
Optional account and synchronized progress
If you sign in with Google, Apple, or a passwordless email link, Firebase Authentication provides a unique user ID and may provide your email address, display name, and provider information. We use the Firebase user ID to keep synchronized settings, progress, statistics, and active sessions separate for each account. Stilloku does not receive or store your Google or Apple password.
Optional product analytics
When anonymous analytics is enabled, PostHog receives events such as app launch, screen views, game mode and difficulty, game start or completion, elapsed time, mistakes, feature use, unlock progress, ad outcomes, and settings changes. Events can include platform, app version, device/operating-system details, locale, timezone, account status, and a generated identifier. Signed-in analytics identity uses the Firebase user ID, not your email address.
Crash diagnostics
In non-debug builds, Firebase Crashlytics may receive crash traces, diagnostic logs, app version, device model, operating-system details, memory or storage state, timestamps, and installation identifiers. This information helps us find and fix failures.
Advertising and consent
Google AdMob and the User Messaging Platform may process consent choices, IP address, device information, advertising identifiers when available and permitted, and ad interactions. The type of advertising shown depends on your region, consent choices, device settings, and Google’s policies.
Website visits
Firebase Hosting may process request information such as IP address, browser details, requested URL, and timestamps to deliver and protect this website.
3. Why we use information
- Provide and restore puzzles, preferences, progress, and statistics.
- Authenticate optional accounts and synchronize data between devices.
- Understand broad feature usage and improve game balance when analytics is enabled.
- Diagnose crashes, prevent abuse, and protect the reliability of the app and website.
- Request and display advertising after applicable consent requirements are satisfied.
- Meet legal, security, and store-platform obligations.
Where applicable, processing is based on providing the service you request, your consent, our legitimate interest in operating a secure and reliable product, or compliance with law.
4. Service providers
We use companies that process information on our behalf or as independent providers:
- Google Firebase: Authentication, Realtime Database, Crashlytics, and Hosting.
- Google AdMob: advertising, consent collection, ad measurement, and fraud prevention.
- PostHog: optional product analytics and error diagnostics.
- Apple and Google: sign-in and mobile platform services you choose to use.
These providers may process information in countries other than your own and apply their own privacy terms. We may also disclose information when required by law, to protect users, or as part of a business transfer with appropriate safeguards.
We do not sell personal information for money. Advertising providers may process data for personalized or cross-context advertising only where permitted by your choices and applicable law.
5. Your controls and rights
- Play without creating an account.
- Turn off Share anonymous analytics in Settings.
- Open Ad privacy choices in Settings when required in your region.
- Sign out to stop new progress from synchronizing to that account.
- Delete your account and synchronized data from the profile screen.
- Reset statistics or remove local data through the app and device controls.
- Limit advertising identifiers through iOS or Android privacy settings.
Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a copy of personal information, and to withdraw consent. Visit Support for the current contact route. You may also complain to your local data-protection authority.
See the dedicated account deletion guide for step-by-step instructions.
6. Retention and security
Local game data remains until you reset it, clear the app’s storage, or uninstall the app. Synchronized game data remains while your account exists and is removed when the in-app account deletion succeeds. Analytics retention follows the configured PostHog project retention period. Firebase documents that Crashlytics crash traces and associated identifiers are generally retained for 90 days before deletion begins. Hosting request data may be retained by Firebase for several months.
We use encrypted network connections and account-scoped database rules. No system is perfectly secure, so we continuously limit the information collected and restrict access to what is needed.
7. Children
Stilloku is not directed to children under 13. If local law requires parental consent for a younger person to use online account, analytics, or advertising features, a parent or guardian should provide that consent or keep those optional features disabled. Contact us if you believe a child supplied personal information without appropriate permission.
8. Changes to this policy
We may update this policy as Stilloku, its service providers, or legal requirements change. We will publish the new effective date here and provide an in-app notice when a change is material.
9. Contact
Stilloku is currently in pre-release. Until the public support address is published, use the developer contact provided with your beta invitation. A permanent privacy and support address will be added here before the public store release.