Privacy policy
GraviTiles · last updated 18 October 2026
This policy explains what the GraviTiles app and this website do with information about you. We keep it short and name the real services we use. If something here is unclear, write to us (see section 1).
1. Who is responsible
Simon Schretter, Josef-Klaus-Straße 14, 9020 Klagenfurt am Wörthersee, Austria.
Email: uranos.rex@gmail.com
2. What stays on your phone
Your settings, your campaign progress, your Arcade bests, your streak and daily mission progress, the tutorial state, your consent choices, a saved run, challenge runs and finished Arcade runs that wait to be sent, and the sign-in session of the server account (section 3) are stored on your device. The app can also schedule local reminders (for example the weekly challenge); they are created on your phone and need no server. Removing the app removes the local data.
3. What we process on our servers
You can play Arcade and the campaign without a connection, but when the app starts with a connection it signs in to a server in the background, and it sends the finished Arcade runs that are waiting there. The online parts (challenges, Friend Battle, missions, badges) use that server. For that we process:
| Data | Why |
|---|---|
| An anonymous player ID. It is created when the app first signs in to the server. We do not ask for an email or a password. | To recognise your progress and results. |
| The name you choose. Do not use your real name if you do not want it shown. | To show you on leaderboards and in Friend Battle rooms. |
| Your results in challenges and matches: tries, when each try started, best scores, streaks, rank, match results. Your daily mission badges and your badge counts. Leaderboard entries also note the app version and platform. | Leaderboards, challenges, missions and the badge room. |
| The move log of each online run (challenges, Friend Battle). A move log is the list of your moves, with the seed of the run. The Arcade runs you send for badges are replayed too; for them the server keeps only the result counts and the seeds of the most recent runs, not the moves. | The server replays the run to check the result, so that challenge, match and badge results cannot be faked. We keep the move logs of challenge and Friend Battle runs (including match reports and runs held back for a check) to tune the game and to investigate cheating. We plan to delete them after 180 days; that automatic cleanup is not running yet, and until it is we delete them by hand on request. |
| What the app says about itself when it signs in: app version, platform (Android or iOS) and the game's rules version. Your IP address is visible to the server host when the app connects. | To tell old versions to update and to run the service. |
Daily mission progress is counted on your phone and the server accepts it with only light checks.
Public information: your chosen name and your scores can be seen by other players on leaderboards. The other players in your Friend Battle room can see your name and your match results, and their game receives your anonymous player ID.
4. Play data (analytics)
With your agreement where the law asks for it (Google's consent tool decides where that is, at least the EEA and the UK, and asks you when you first start), and by default elsewhere with a switch in the settings, the app sends play events to Unity Analytics: for example that a session started, how far you got in the tutorial, that an Arcade run ended with its score, pieces placed and mode, that an ad was shown, and when a challenge try or a Friend Battle match starts and ends (with the challenge or match, the rule set, the try, the score and the pieces placed). We use it to see where players leave and what to improve. Unity also receives technical data such as device type, operating system and country, as described in Unity's privacy policy. You can change your choice in the app's settings at any time.
5. Ads
The game shows ads through Google AdMob: after finished Arcade or challenge runs, and when you choose to watch an ad to revive a run or to repair a broken play streak. Google and its ad partners may use your device's advertising ID, IP address and similar data to show and measure ads. Where the law asks for it, Google's consent message appears when you first start the game, and you can change your choice later under Settings → Privacy options. Read how Google uses data in ads. The app does not show Apple's tracking prompt on iPhone.
6. Services we use
- Unity Technologies (Unity Gaming Services: sign-in, saved data, server code, leaderboards, rooms, remote settings, analytics). Privacy policy.
- Google (AdMob for ads; Google Play for installing and updating the Android app). Privacy policy.
- Apple (App Store and TestFlight for the iPhone app). Privacy policy.
- Discord, if you join our community server. What you post there is governed by Discord's policy, not this one.
These providers process data on our behalf or under their own responsibility, as described in their policies. Some of them are based outside the EU, for example in the USA. Where that applies, they rely on legal safeguards such as the EU-US Data Privacy Framework or standard contractual clauses.
This website
This website runs on a server that I operate at Hetzner in Germany. The web server does not keep access logs for this site, and we do not run analytics or set cookies on it. Like any internet connection, your request is processed by the network provider that carries it.
7. Legal bases
Running the game and its online features: performance of the service you asked for (Art. 6(1)(b) GDPR). Checking for cheating, keeping the service safe and improving the game: our legitimate interest (Art. 6(1)(f)). Analytics and personalised ads where the law requires it: your consent (Art. 6(1)(a)), which you can withdraw at any time.
8. How long we keep data
- Your anonymous account and its game data: until you delete it in the app (Settings → Delete my data) or ask us to, or until we remove inactive test accounts.
- Move logs of challenge and Friend Battle runs: we plan to delete them after 180 days (see section 3). Leaderboard entries stay until a board is cleared or you ask us to delete yours.
- Analytics: as long as Unity's analytics service keeps it, which is set in its own policy.
9. Your rights
You can ask us for access to your data, for correction, deletion, restriction, a copy, and you can object to processing based on our legitimate interest. Write to uranos.rex@gmail.com and tell us your anonymous player ID if you can. You find it in the app under Settings, where you can copy it. Without it we cannot find your data, because we hold no name or email. Deleting your data: in the app, open Settings on the main menu and tap "Delete my data". That erases from our servers your name, results, tries, streak, missions, badges and leaderboard entries, the move logs of your challenge runs, and your anonymous account, and it clears the game data on your phone. Records of Friend Battle matches you played (which also hold the other players' results) and the move logs of those matches stay until the cleanup in section 3 removes them; write to us if you want them removed sooner. You can also complain to the Austrian data protection authority, the Datenschutzbehörde (dsb.gv.at), or to the authority in your country.
10. Children
GraviTiles is not made for children. We do not knowingly collect data from children under 13 (under 16 where the law of your country sets a higher age without a parent's consent). If you think a child has used the app, write to us and we will delete the data.
11. Security
The server replays challenge, Friend Battle and badge runs itself and does not trust a score sent by the app. Data is sent to the servers over encrypted connections. No system is perfectly secure, and this is an early test version.
12. Changes
We will update this page when the game changes, for example when we add purchases or push notifications, and change the date at the top.