Privacy Policy
Pixel Blend Group
This policy explains how this application handles information and how to contact us about privacy.
Information we process
Pixel Blend Group stores your puzzle placements, campaign completion, hint use, favorites, workshop pictures and their names, language, sound, accessibility and reminder preferences locally on your iPhone. A random installation secret is generated automatically and stored in the device Keychain. The backend receives that secret in authenticated HTTPS requests and uses a SHA-256 hash to associate daily puzzle completion status, puzzle identifier and recording time with this installation. Workshop images and names, campaign boards and notification choices are not uploaded. Daily puzzle requests include the requested date. Our Railway hosting infrastructure also receives connection information such as IP address, request path, time and technical response information. The app has no account, advertising or analytics SDK, and the public website uses no cookies or tracking scripts.
How we use information
Local data lets you resume puzzles, undo moves, keep creations and change game preferences without an internet connection. The installation secret authorizes daily puzzle requests, records daily results and deletes only this installation’s server records. The server provides daily puzzle content and stores your completion status; it does not provide cross-device recovery. Optional notifications are scheduled locally to remind you of the daily puzzle. Technical infrastructure information supports delivery, reliability and protection of the service.
Service providers and sharing
The backend and its persistent storage are hosted by Railway, which processes network requests and infrastructure information to operate the service. Device storage and Keychain are managed by iOS, and local application data may be included in device backups according to your Apple settings. Opening this policy uses your device’s web browser and makes a request to the same hosted service. We do not sell game data or share it with advertisers. No third-party analytics, social sign-in, payment or email-delivery provider is integrated. Information may be disclosed if required by applicable law.
Data retention
Local game data remains until you remove it in Settings, remove the application’s local data, or iOS removes it. Keychain storage follows iOS behavior and can remain after uninstalling the app. Daily completion records remain on the backend until you use the deletion feature for that installation. Shared daily puzzle content is not personal and remains available independently of deletion. We do not configure a fixed expiration for results or a separate application backup schedule. Railway may retain infrastructure logs and storage snapshots under its service practices; we do not assert a specific retention period for those records. Device backups follow your device and backup-provider settings.
Deleting your information
Use Delete my data in the app’s Settings and confirm to remove your local game progress and creations and the server results authorized by this installation secret. A network connection is required: if the server request fails, local data is kept and you can retry. Successful deletion logically removes this installation’s database records; it is not a promise of forensic erasure from storage media, infrastructure logs or pre-existing provider or device backups. Backup copies, if any, follow the provider’s retention and replacement processes. Removing the app alone does not send a server deletion request. There is no account recovery and we cannot reliably identify or recover your records if the installation secret is lost.
Permissions and your choices
Notifications are optional. iOS permission is requested only when you enable the daily reminder in Settings. You can disable the reminder in the app or withdraw notification permission in iOS Settings without losing access to the game. Notifications are scheduled on the device, without a remote push token. The app does not request access to location, contacts, photos, camera or microphone. Internet access is used for daily puzzles, result synchronization, server deletion and the public privacy page; core campaign play and the workshop remain available offline.
Your privacy rights
For privacy questions or to exercise rights that apply in your jurisdiction, contact ff.colclough@icloud.com. This address is a privacy contact only; there is no in-app email delivery or support form. You can access your pictures and progress in the app and delete them using Settings. Depending on local law, you may have rights to access, correct, delete, restrict or object to processing and to complain to a relevant privacy authority. Requests must be evaluated against the information actually held; we do not collect an email or identity profile that links you to an installation. Please do not send the installation secret by email.
Security
The app uses HTTPS for backend communication, a cryptographically random per-installation secret stored in Keychain and server-side authorization based on its hash. Each write and deletion is scoped to the authenticated installation; there are no shared app credentials or publicly readable personal results. Local JSON saves are written atomically, and the backend uses database transactions and input and request limits. Application logging omits secrets and request bodies. No internet service or device storage can be guaranteed completely secure. Protect your device and backups, and do not disclose the installation secret.
Children’s privacy
The game is intended for adults and teenagers aged 12 and older and is not designed to solicit children’s identity or contact details. It contains no accounts, public sharing, chat, advertising or purchases. If you believe a child’s personal information has been provided outside the intended anonymous game processing, contact ff.colclough@icloud.com so we can assess the request.
Changes to this policy
We may update this policy when the game or its processing practices change. The current version and effective date are shown on this page. Material changes will be reflected in the app or this public policy as appropriate. This policy describes the released implementation rather than promising future features.