Who we are
Stick Math is a puzzle game for iPhone, Android and the web, developed and published by Origin Labs, referred to here as "we" or "us".
This policy covers the Stick Math app, this website, and the versions of Stick Math on other game websites described in Playing on other game websites. It does not cover any other product.
What we collect
What is collected depends on whether you sign in. If you never sign in, you are a guest, and your progress lives only on your device.
If you play as a guest
Nothing leaves your device. Your points balance, completed puzzles, streak, favorites, level progress, and settings are stored locally on your phone using standard on-device storage. We never see this information, because it is never sent anywhere.
If you sign in
You can sign in with Google, Sign in with Apple, or an email address and password. Depending on the method, we receive an account identifier, your email address, and a display name. Apple only shares a name with us the first time you sign in with that Apple ID. We store your account identifier, email, and display name so the app can recognize you across sessions and devices.
Signing in also turns on cloud sync. A private record is created for your account holding the same progress a guest keeps locally: your points balance, completed puzzle ids, streak counts and dates, favorited puzzles and when you favorited them, your level progress in each difficulty tier, and your in-app settings. It also holds a few small bookkeeping fields, such as which one-time bonuses you've already claimed and which difficulty tier you played most recently, so those don't reset or repeat across devices. This record exists so your progress carries over if you play on a second device.
If you use multiplayer
Creating or joining a multiplayer room stores a room name, the invite code for that room, and the list of members, including your account identifier and your player name. While a round is running, we record which puzzles were served to the room, when you started and finished each one, and whether you solved or skipped it. Start and finish times are recorded by our server, not reported by your device, so that timing can't be faked.
The first time you host or join a room, the app asks you to pick a player name. It suggests the first name from your sign-in account if there is one, or a name like Player4821 if you leave it empty. It is never made from your email address. Your player name is kept on your device and written into each room you create or join, so the other members can see it.
Support requests
If you use Contact Us inside the app, the app sends your message to our own contact service on this website, which delivers it to us by email through Resend. Along with your message it includes your app version and your device's platform, such as "iOS 18", so we can tell which release and system you're reporting on. You can add an email address if you'd like a reply, but you don't have to. The app does not send your name or your account with the message.
Reporting or blocking a player
In a multiplayer room you can report another player, or the room itself. A report reaches us the same way as Contact Us. It contains the reason you picked, the room's id, your account identifier, the reported player's account identifier and the name they were shown under (or the room's name), and your device's platform, such as "Android". It never includes anyone's email address. We use it only to review the report and act on abuse. In the browser version, Report opens the contact form on this website instead.
If you block a player, your list of blocked players stays on your device and is never sent to us or anyone else.
Reporting a puzzle
After you solve a puzzle or use Show, you can report it if something looks wrong. A puzzle report reaches us the same way as Contact Us. It contains the reason you picked, the puzzle's id, difficulty tier, level and kind, the puzzle as it was shown, your board, the board before you used Show if you did, the stored answer, your app version, and your device's platform, such as "Android". It never includes your name, email address, or account. We use it only to check and fix the puzzle. In the browser version, Report opens the contact form on this website instead.
Sharing an invite code
The Invite button in a multiplayer room hands your device's own share sheet a short message with your room's invite code and a link to stickmath.com/join followed by that code. The link opens a page on this website that shows the code and how to get the game. That page reads the code from the link in your browser and doesn't store it. We don't see who you share it with. Where you send it is entirely up to your device's share sheet and whatever app you pick.
Crash reports
The app uses Firebase Crashlytics to report crashes and fatal errors, so that a bug affecting real players can be found and fixed. A crash report contains the error and its stack trace, plus technical details about the device and session, such as the device model, operating system version, and app version. It is tied to a Crashlytics installation identifier rather than to your name or email. Crash reporting is disabled in development builds and active only in released builds. We use these reports solely to diagnose and fix faults, never to profile you or to build an advertising audience.
Gameplay analytics
The app counts a few things about how the game is played, so we can see what works and fix what does not. The events are: finishing the tutorial and which first screens were seen, whether reminders were turned on, starting, leaving or solving a puzzle, using a hint or Show, whether a reward video played, finishing a Rush run, finishing Puzzle IQ placement, finishing the day's Workout, a streak growing, ending or being recovered, opening a reminder, completing a sign in (Google, Apple or email), creating or joining a multiplayer room, sharing a card or a daily result, and a once a day "played today" count. Google Analytics also records its standard counts on its own, such as opening the game and how long a session lasts. Each event carries only game details, such as the puzzle's difficulty, its level number, how many sticks it takes, how you reached it (for example the Daily, Workout or Rush), the stars earned, whether a hint was used and roughly how many seconds it took, a Rush score, your Puzzle IQ number and tier, a streak's length, the Workout size, the kind of reminder tapped, the sign in method, or how many days it has been since you first played. They never include your name, email address, account or anything you type, and we don't attach a user id to them.
These counts go to Google Analytics for Firebase, and they are set up without cookies: Google's consent mode starts with analytics and advertising storage turned off, on every platform, so Google Analytics does not set a cookie or keep its own analytics identifier on your device, and the data is used only for counts, not to build a profile of you. To connect the events of one session, Firebase keeps a random installation identifier in your browser's or phone's storage. It is not linked to your name, email or account. Clearing the site's data in your browser, or uninstalling the app, removes it. The app also keeps, on your device, the date you first played and the last day it was counted, so each device is counted at most once a day; only the number of days in between is sent. The versions of Stick Math on other game websites send us no gameplay counts at all; see Playing on other game websites.
Notifications
If you turn on daily play or streak reminders in Settings, that reminder is scheduled entirely on your own device, using its native notification system. We are not involved when it fires, and nothing about it, not your reminder time or the fact that a notification was shown, is sent to us or to anyone else. If you tap one, the app counts the tap, with only the kind of reminder, as described under Gameplay analytics. Turning reminders on or off only changes what your device schedules for itself.
This website
The pages of this website do not use cookies, do not run any analytics, and do not set anything on your device. The only thing they load from outside our own hosting is typefaces from Google Fonts (Nunito Sans, and Luckiest Guy on some pages), which means your browser makes a direct request to Google's servers to fetch them, and that request can expose your IP address to Google in the ordinary way any web request does. We don't receive anything from that request ourselves.
The game itself, when you play it in your browser at stickmath.com/play, is the app running on the web, so the sections above about the app apply to it. It keeps your guest progress in your browser's own storage, the same way the app keeps it on your phone, and it sends the gameplay counts described under Gameplay analytics.
What we do not collect
We don't build a profile of you, and we don't track you across other apps or websites. The gameplay counts described above are anonymous game events, not a record of who you are. The app does show ads, and the ad provider collects its own information to do that, which is explained in full in the next section.
Advertising
Stick Math is free, and ads are how it stays free. The ads are provided by Google AdMob. Some are videos you choose to watch in exchange for a hint, a revealed answer, or a missed streak day. Others are a short full-screen ad partway through a set of puzzles, or a banner on the multiplayer screens.
What the ad provider collects
To show ads, Google's advertising software in the app collects information from your device and sends it to Google. This includes your device's advertising identifier (the IDFA on iPhone, or the Android advertising ID), your approximate location worked out from your IP address, information about the ads you see and interact with, and technical details such as device model, operating system, and app version, along with diagnostic data about how the ads perform. We don't send Google your name, email address, account, or game progress.
Google uses this information to choose, show, and measure ads, to limit how often you see the same ad, and to detect fraud. Where you allow it, Google may also use it to show ads based on your interests. Google handles this information under its own privacy policy. You can read how Google uses information from apps that use its services and Google's Privacy Policy.
If you're in the EEA, the UK, or Switzerland
Players in these countries see a consent message from Google the first time the app needs it, before any ads are requested. It explains how your data is used for ads and lets you consent, decline, or choose specific purposes. You can change your answer at any time from Settings, Ad privacy in the app. That row only appears for players in these countries. Players elsewhere don't see this message.
On iPhone
After you finish the first puzzle, iOS asks whether Stick Math may track you across apps and websites owned by other companies. This question comes from Apple and is shown to iPhone players in every country. If you allow it, ads can be personalized using your advertising identifier. If you ask the app not to track, you still see ads, but they aren't based on your activity in other apps, and your advertising identifier isn't shared. You can change this later in your iPhone's Settings, under Privacy and Security, Tracking.
On Android
You can reset or delete your advertising ID, or opt out of personalized ads, in your device's settings, usually under Google, Ads. Ads still appear, but they aren't personalized.
Playing on other game websites
Stick Math is also published on game websites run by other companies: CrazyGames, itch.io and GameDistribution, whose games can also appear on other websites that show them. These versions have no sign-in, no multiplayer, and none of our analytics or crash reporting, so we receive nothing about you from them. The website you play on runs its own page around the game and has its own privacy policy, which covers what that website collects.
CrazyGames
This version uses CrazyGames' software kit. It saves your progress, such as your points, completed puzzles, streak and settings, through CrazyGames' own data service: if you are signed in to CrazyGames, your progress is kept with your CrazyGames account so it follows you to other devices, and if you are not, it stays in your browser. The game also tells CrazyGames when it has finished loading and when play starts and stops, and it follows CrazyGames' mute button. If you don't have enough points for a hint or to see a puzzle's answer, the game can offer a short video instead. It asks CrazyGames for one only when you choose to watch it, never on its own. The video is shown by CrazyGames and its advertising partners, who may collect information from your device and use cookies or similar technology to show and measure ads, under CrazyGames' policy. We may receive a share of the ad revenue, not information about you. We don't receive your CrazyGames account details. See CrazyGames' privacy policy.
itch.io
Your progress is kept only in your browser's storage. itch.io shows us totals such as page views and plays, which it counts under itch.io's privacy policy.
GameDistribution
This version shows ads at some breaks in play, such as starting Rush or moving on to the next level, at most one every two minutes. The ads come from GameDistribution, part of Azerion, and its advertising partners, who may collect information from your device and use cookies or similar technology to choose, show and measure ads, and who ask for your consent where the law requires it. Your progress stays in your browser. We receive a share of the ad revenue, not information about you. See GameDistribution's privacy policy.
How we use it
- To let you sign in and recognize your account across sessions and devices.
- To keep your points, completed puzzles, streak, favorites, and settings in sync between devices.
- To run multiplayer rooms: matching a room to its members, generating the shared puzzle set, timing rounds fairly, and building the room's leaderboard from completed attempts.
- To respond to support requests you send us.
- To review reports about players or rooms and act on abuse.
- To check and fix puzzles that players report as wrong.
- To keep the service secure and working as intended.
- To show ads through Google AdMob, as described in Advertising, which keeps the game free.
- To understand, in aggregate, how the game is played, such as which puzzles players get stuck on, so we can improve it, as described in Gameplay analytics.
Legal bases for processing
Different regions describe the legal basis for processing personal information differently. Rather than picking one region's framework, here is what applies in plain terms, and it should satisfy the common ones (including the EU's GDPR, California's CCPA and CPRA, and India's DPDP Act):
- Performance of a contract. We process account and progress information because it's what makes an account, cloud sync, and multiplayer actually work. Without it, those features can't function.
- Consent. Signing in is your choice. A guest who never signs in is never synced. Creating or joining a multiplayer room, and sharing an invite code, are also things you choose to do. In the EEA, the UK, and Switzerland, ads rely on the choice you make in Google's consent message, and on iPhone, personalized ads rely on your answer to Apple's tracking question.
- Legitimate interests. We rely on this basis for keeping the service secure, preventing abuse of multiplayer timing, responding to support requests, reviewing reports and acting on abuse, and counting, anonymously and without cookies, how the game is played so we can improve it.
Visibility to other players
This is worth calling out on its own. If you sign in and join or create a multiplayer room, the player name you chose becomes visible to every other member of that room, for as long as you're in it. Other members also see your standing on that room's leaderboard, based on the puzzles you solved or skipped and how long each one took you. Nobody outside a room you've joined can see this information. Your player name is never made from your email address, and other members never see your email.
If you change your player name, rooms you are already in keep the old one, and the new name applies to rooms you create or join after that. A room you joined before player names were added keeps the name it showed then, until you leave it or the room is deleted.
Third parties we work with
We use a small number of providers to run the app and show ads. We don't sell your personal information, and we don't give an advertiser your name, email address, account, or game progress.
- Google, Firebase Authentication. Handles Google sign-in and email and password sign-in, and issues the credential that identifies your account to the app.
- Google, Cloud Firestore. Stores your synced account record and multiplayer room data described above. Access is restricted by server-side rules so that only you can read or write your own account record, and only a room's own members can read that room's data.
- Google, Google Analytics for Firebase. Receives the anonymous gameplay counts described in Gameplay analytics, set up without cookies, so we can see how the game is played.
- Google, Firebase Crashlytics. Receives crash and fatal-error reports from released builds, with the technical device and session detail described above, so faults can be diagnosed and fixed.
- Google, Firebase App Check. In the iPhone and Android app, checks that requests to our servers come from the genuine Stick Math app. For this your device produces an integrity token, using Google Play Integrity on Android or Apple's App Attest on iPhone, and Google processes it to confirm the request is genuine.
- Google, AdMob. Provides the ads in the app and collects the device information described in Advertising. Google decides for itself how it uses that information for advertising, under its own privacy policy, rather than only on our instructions.
- Apple, Sign in with Apple. Handles Apple sign-in and provides your name (on first sign-in only) and a private relay email if you choose to hide your real one.
- CrazyGames, itch.io and GameDistribution. Publish the web versions described in Playing on other game websites. Each runs its own website under its own privacy policy, and GameDistribution and its partners provide the ads in that version.
- Resend. Delivers the messages you send through the contact form on this website, or through Contact Us or a player, room or puzzle report in the app, to our mailbox. It handles the sending only. Apart from the account identifiers in a player or room report, it never sees anything about your game account.
Apart from Google AdMob as described above, these providers process data on our behalf, under their own security and privacy commitments, and only for the purposes described in this policy.
International data transfer
Our infrastructure providers operate global systems, which means information may be processed or stored in a country other than the one you're playing in. Where that happens, it relies on the safeguards those providers make available for cross-border transfer, such as standard contractual clauses. We do not have a single fixed list of countries to name, because these providers can change their processing locations.
Data retention
- Guest data stays on your device until you clear the app's storage or uninstall it. We never receive it, so we have nothing to retain or delete on our end.
- A signed-in account's synced record is kept for as long as the account exists, so your progress is there the next time you sign in on any device.
- Multiplayer room data is kept for as long as the room exists, to support its leaderboard and history.
- If you delete your account in the app, your account record, your sign-in account, your place in multiplayer rooms and your results in their rounds, rooms where you were the only member, and the progress, player name and block list on that device are removed straight away. While one of your multiplayer rounds is still running, the app asks you to finish it first, then delete. One small record can stay behind: your account identifier, with no name next to it, in the ready list of rounds that have already been played, and it no longer belongs to any account. To have it removed, ask us through the contact form. If you ask us to delete your account instead (see below), we do the same within a reasonable time.
- Gameplay counts are kept in Google Analytics for no longer than 14 months, then deleted automatically.
- Support messages and reports, from the app or the contact form, are kept as email for as long as we need them to deal with what you asked about or reported, then deleted.
Security
Your account record is locked to your account by server-side rules, so no other player, signed in or not, can read or write it. Multiplayer round timing is recorded by the server rather than your device, so a player can't fake how fast they solved a puzzle. Data in transit to and from our infrastructure provider is encrypted. No system is perfectly secure, and we can't guarantee absolute security, but we've built access control into the data model itself rather than treating it as an afterthought.
Children
Stick Math is a general audience app and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you're a parent or guardian and believe your child has provided us with personal information, contact us at the address below and we'll delete it.
Your rights
Depending on where you live, you may have rights to access the personal information we hold about you, correct it, delete it, receive a copy of it, restrict or object to how we use it, and, if you're a California resident, to opt out of the sale or sharing of it. We don't sell your personal information. Google's ads may use your device's advertising identifier to personalize ads, and you can stop that on any device using the settings described in Advertising. In the GameDistribution version, ad choices are made in GameDistribution's own consent message. We aim to honor these rights for every player, regardless of where you're located, rather than only where a specific law requires it.
How to request access, correction, or deletion
Send us a note through the contact form and tell us what you'd like: a copy of your data, a correction, or deletion. Include the email or sign-in method your account uses so we can find it.
You can delete your account yourself, inside the app. Go to Settings and tap Delete account at the bottom. For your protection, the app first asks you to confirm your sign-in again. If one of your multiplayer rounds is still running, it asks you to finish it first. It then removes you from every multiplayer room you belong to, along with your results in their rounds, deletes your synced account record, and deletes your sign-in account. Progress stored on that device is cleared too, including your player name and block list. Data retention lists the one small room record a deletion can leave behind.
If you can't get into the app, use the contact form instead and we'll delete your account for you. If you're a parent or guardian requesting deletion on a child's behalf, say so in your message.
The contact form on this website
The website has a contact form. Nothing on this site collects anything about you until you choose to use it. There are no cookies, no analytics, and no tracking pixels on any page here.
When you send the form, we receive the name, email address, and message you typed, and nothing else. We use them to answer you and for nothing else. Your address is not added to any mailing list, because we do not have one, and it is not passed to anyone else.
The form posts to our own endpoint on this site, which sends the message on to us through Resend, an email delivery service. Nothing you type is stored on this site: it is turned into an email and passed straight to Resend for delivery. We keep the resulting email conversation for as long as we need it to deal with what you asked about, and delete it when that is done.
Using the form is entirely optional, so our legal basis is your consent, given by choosing to send it. You are free to reach us another way if you would rather not use it.
Changes to this policy
If we change what we collect or how we use it, most notably by adding analytics or subscriptions, or by changing how ads work, we'll update this page and change the effective date above.
Contact us
Questions about this policy, or anything else about how Stick Math handles your information, can go through the contact form.