Privacy Policy — Graph Paper Games

Last updated: August 4, 2026

This app ("Graph Paper Games", "we") respects your privacy. This document describes what data is collected when you use the app and how it is used.

1. What data we collect

1.1. Account data (only if you register/sign in)

Signing in is optional — playing against the computer or over Bluetooth/Wi-Fi nearby works without an account. An account is only needed for online rating and finding opponents over the internet.

• Email and password (if you register by email) — the password is stored as an irreversible hash, never in plain text.
• Name (nickname) you provide when registering — visible to other players when playing online.
• If you sign in with Google — basic Google profile data (email, display name) provided by Google with your consent.

1.2. Game data

• Local rating, win/loss statistics, and daily grades are stored only on your device and are not sent to the server, except for the final result of an online match (see below).
• During an online match over the internet, the server temporarily relays your moves to your opponent (not stored after the match ends).
• The final result of an online match (win/loss/draw) is saved to your profile on the server as part of the online rating for each game.

1.3. Device permissions

• Bluetooth, Wi-Fi, location — used solely to discover and connect to another device nearby for offline online-play mode. Your actual location is never requested or stored — the location permission is required by Android as a technical condition for Bluetooth scanning to work, not to determine where you are.
• Internet — used for signing in, syncing your rating, and playing online over the internet.

2. How we use your data

To authenticate you and store your profile/rating, for matchmaking, and to relay moves between players in real time. We do not use your data for advertising and do not sell it to third parties.

3. Data storage and transfer

• Account data and online ratings are stored on a server hosted on Railway.
• Email verification and password reset messages are sent via Resend.
• Signing in with Google is handled directly by Google in accordance with Google's Privacy Policy.

4. Data deletion

You can delete your account and associated data by contacting the email below. Local data (rating, statistics) on your device is removed when you uninstall the app.

5. Children

This app is not directed at children under 13 and does not knowingly collect data from users of that age.

6. Changes to this policy

We may update this policy from time to time. The date of the last update is shown at the top of this document.

7. Contact

For questions about this policy or your data, contact: support@pipetally.org