Privacy, in plain words.

Effective 8 September 2026 · Applies to Slipglyph for iPhone and this website

Slipglyph has no accounts, advertising, tracking SDKs, or developer analytics. Playing the iPhone game does not send your drawings or scores to us. This notice explains the limited processing that happens when you use Apple purchases, visit this website, share a result, or contact support.

Who is responsible?

Slipglyph is operated by Robert Jakobsson, who is the controller for support correspondence and any website personal data under his control. Contact: bobban@protonmail.com. Please put “Slipglyph privacy” in the subject.

What stays on your iPhone

The app stores drawings, challenge seeds, scores, completion dates, selected ink, and haptic preferences locally using iOS app storage. Your collection retains the latest 180 finished challenges. These records are not uploaded to a developer server, used for profiling, or sold. Apple’s device backups may retain copies depending on your settings. We do not operate a cloud sync service.

Delete your data

In the app, open Settings → Erase drawings & progress to remove the local collection and reset preferences. Deleting the app also removes its local data; use your device or iCloud settings to manage backups separately. There is no Slipglyph account to delete. Deleting progress does not cancel or remove your Apple purchase.

Optional purchases

Apple processes the one-time Studio purchase and payment details. Slipglyph reads Apple-signed transactions on your device to check whether your inks are unlocked. We do not receive your card details or send your transaction identifiers to a developer server. Apple handles purchase records, refunds, and App Store operations under the App Store privacy notice. Restore Purchases rechecks your entitlement with Apple.

Sharing is your choice

The game creates a share card only when you ask. It contains your drawings, score, challenge type and seed; it does not include an account name or device identifier. If you choose a destination from Apple’s share sheet, that service receives the content you select. Its own terms and privacy notice apply. A challenge seed identifies the shared puzzle, not a player. You can play without sharing.

Support correspondence

If you email us, we receive your email address, message, and any attachments you choose to include. We use these to answer the request and resolve problems. The legal basis is GDPR Article 6(1)(b) where necessary to provide the service you request, or Article 6(1)(f), our legitimate interest in responding to other enquiries. Do not send passwords, payment-card details, or sensitive information.

Support email is handled through Proton Mail’s email service. Correspondence is deleted within 90 days after the request is resolved, unless a legal obligation requires longer retention or it is necessary for a specific legal claim. In that case, access is restricted and retention lasts only as long as that requirement.

This website

OpenAI Sites and its Cloudflare infrastructure host and deliver this website. Opening a page necessarily exposes ordinary network request information, such as your IP address, requested URL, browser information, and request time, to the hosting infrastructure for delivery, reliability, and security. Our legitimate interest in providing and protecting the site is the basis for request processing under our control, GDPR Article 6(1)(f).

We add no advertising cookies, analytics cookies, tracking pixels, fingerprinting, or visitor identifiers. The playable preview keeps its stroke only in the current page’s memory; it is cleared when you reload or leave. We do not create a visitor database or copy hosting access logs into a separate system. Infrastructure records are handled according to the providers’ applicable retention and security practices.

Providers and international processing

Apple, Proton Mail, OpenAI, and Cloudflare may process information outside the European Economic Area. Where required, their applicable international-transfer arrangements include adequacy decisions or Standard Contractual Clauses. See Apple’s privacy policy, Proton Mail’s privacy policy, OpenAI’s privacy policy, and Cloudflare’s privacy policy for their roles, safeguards, and retention practices. Contact us for details of arrangements applicable to data under our control.

Your GDPR rights

Where applicable, you can request access, rectification, erasure, restriction of processing, or portability of personal data, and object to processing based on legitimate interests. We do not rely on consent for analytics or advertising because we do not add either. If we ever request consent for new processing, you may withdraw it without affecting earlier lawful processing. There is no automated decision-making with legal or similarly significant effects.

Write to bobban@protonmail.com. We will respond within one month, subject to any lawful extension explained to you. We may request proportionate information to verify your identity. You can complain to your local supervisory authority, including the Swedish Authority for Privacy Protection (IMY).

Children and changes

The game does not ask for age, contact details, location, photos, microphone access, or contacts. Purchases should be managed using Apple’s parental controls where appropriate. We do not knowingly collect children’s personal information through the game. Contact us to remove information a child may have sent to support. Material changes to this notice will be published here with an updated effective date, and in the app when relevant.