Privacy Policy

The same practices apply to all seven games, with the exceptions noted below:

• Board Hub — a collection of classic board games. No accounts; your progress and settings stay on your device.
• Oculta — an aetheric timing puzzle set across five hidden realms. Playable without an account; an optional sign-in lets you save level progress to your account.
• Taply — a decision-making app. No accounts and no server; your decisions, wheels and settings stay on your device.
• Refract — a colour-timing arcade game. No account is needed; your best score and settings stay on your device. If you submit a score to the shared global leaderboard, we store the display name and score you submit online, using Supabase as the database provider, so other players can see the rankings.
• Dot&Stick — a live dots-and-boxes game. No account is needed and your settings stay on your device. Online matches run through Supabase, which passes the moves of a match between players in real time and stores the display name you choose for the match; match data is removed once the game is over.
• Six Seven — a tap party game. No account, no server and no leaderboard; your levels, scores and settings stay on your device.
• Flipfold — a Cambio card game with no account and no chat. Solo games, settings, streaks, statistics, rewards and card backs stay on your device. Online friend games use an anonymous player ID and Supabase in Frankfurt, Germany to store your chosen display name and emoji, session token, room code, players, moves, results, daily scores and online status. Friend scores are visible only to people you have played with; there is no public leaderboard.

We do not ask for your name, phone number, contacts, photos, precise location, or microphone or camera access. Apart from the optional Oculta account described below, our games have no sign-in and store your progress and settings on your device.

We collect aggregated, anonymous usage and stability data so we can fix bugs and understand which parts of a game people use. This typically includes app version, device model, operating system version, coarse region, session length, in-game events such as a round started or finished, and crash logs with technical diagnostics.

This data is collected through Google Analytics. It is not used to identify you personally, and we do not attempt to link it to a real-world identity.

Our games show ads served by Google AdMob. To serve and measure ads, Google AdMob may process a mobile advertising identifier, device and network information such as IP address and device type, and interaction data such as ad views and clicks. Depending on your settings, ads may be personalised.

You can limit this at any time: on iOS, decline the tracking prompt or turn off "Allow Apps to Request to Track"; on Android, delete or opt out of the advertising ID in Settings. Where required, we ask for consent before personalised ads are shown.

Our games use the following third-party processors, each of which operates under its own privacy policy:

• Google Analytics — anonymous usage and stability analytics, including crash reporting. See Google's Privacy Policy.
• Google AdMob — ad serving, measurement, and personalisation. See Google's Privacy Policy.
• [Lovable Cloud](https://lovable.dev/privacy) — our sign-in and database provider, used only for the optional Oculta account, to store your email, nickname and level progress securely.
• [Supabase](https://supabase.com/privacy) — the database provider behind the Refract global leaderboard, Dot&Stick online multiplayer and Flipfold friend games, storing the display name and score you submit and passing live match moves between players.
• Apple App Store and Google Play — they deliver and update our games and handle the optional "rate this app" prompt; they receive the data described in their own privacy policies.

These providers may process data in countries outside your own, and their use of your data is governed by their respective policies. Mikisu Studio does not control their data practices.

Our games are intended for a general audience and are not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will remove it.

We share data only with the service providers needed to run our games — Google Analytics (for analytics and crash reports), Google AdMob (for advertising), Lovable Cloud (our sign-in and database provider, for optional Oculta accounts), Supabase (the database provider for the Refract global leaderboard, Dot&Stick online multiplayer and Flipfold friend games), and the app stores. We do not sell your personal information. Analytics and crash data are retained only as long as they are useful for improving the games; account and leaderboard data is kept until you ask us to delete it.

You can reset or opt out of your advertising identifier in your device settings, decline optional tracking prompts, play Oculta without an account, and uninstall a game to remove locally stored data. Depending on where you live, you may also have the right to request access to or deletion of your data — write to us and we will act on it.

If this policy changes materially, we will update the date at the top of this page and, where appropriate, note it in the game.

If you have questions about this privacy policy or want to discuss how our games handle your data, we want to hear from you. Email Mikisu Studio at mikisu.dev@gmail.com and we will get back to you.

You can also reach us through the support link on the game's app store listing.

Oculta can be played entirely without an account. If you choose to create one so your progress follows you to another device, we store:

• Your email address — used to sign you in and to contact you about your account.
• Your password — held in encrypted form by our sign-in provider, Lovable Cloud; we never see it.
• A nickname you choose — shown in the game.
• Your level progress — which levels you completed and the stars you earned.

We use this only to run your account and restore your progress. We do not use it for advertising and we do not sell it. To delete your account and everything stored with it, email us at mikisu.dev@gmail.com and we will remove it.

Flipfold creates an anonymous device player ID for online friend games; it does not ask for an email, phone number or password. Room and game history is deleted 30 days after last activity, daily challenge results after 90 days, and inactive anonymous IDs after 180 days. Use Settings → Delete my online data to remove the player ID, display name, hosted rooms and daily results. Local games and rewards remain until you delete the app.

With consent where required, Google Firebase Analytics measures events such as completed games, offered rewards and session length, together with an app-instance ID, device model, operating system, app version, language and approximate country/city from the IP address. Display names and room codes are never sent to analytics. Firebase Remote Config uses an installation ID to fetch feature settings. Analytics retention follows the retention setting configured in Firebase. In the EEA, UK and Switzerland analytics stays off until you agree after your first game; change this in Settings → Privacy choices.

Flipfold has no forced ads. Google AdMob videos appear only when you choose a reward such as undo, a solo-card peek or card-back progress. Google may process the advertising ID where allowed, IP address, approximate location, device/app information and ad interactions for delivery, measurement and fraud prevention. Declining personalised ads still gives the same reward with a non-personalised ad. You can disable reward offers in Settings → Reward offers.

Sharing a result hands the image or text to the app you choose through your device share sheet; we do not receive it. Flipfold does not collect your real name, email, phone, contacts, precise location, photos, microphone or camera data, and we do not sell personal information.

Online play is processed to provide the game; analytics and personalised advertising rely on consent; security, fraud prevention and reliability rely on legitimate interests. Google may process data internationally under appropriate safeguards. Flipfold is a general-audience game, is not directed to children under 13, encrypts data in transit, and enforces game rules on the server so players can read only their own view of a game.

For access, correction, deletion, portability, objection, withdrawal of consent or another privacy request, email mikisu.dev@gmail.com. EU/UK residents may also complain to their data protection authority; California residents have CCPA/CPRA rights.