Who we are
Stick Math is a puzzle game for iPhone and Android. This policy is written and published under the trading name Stick Math, referred to here as "we" or "us". There is no separate company or personal name behind that trading name for the purposes of this policy.
This policy covers the Stick Math app and this website. It does not cover any other product.
What we collect
What is collected depends on whether you sign in. If you never sign in, you are a guest, and your progress lives only on your device.
If you play as a guest
Nothing leaves your device. Your points balance, completed puzzles, streak, favorites, level progress, and settings are stored locally on your phone using standard on-device storage. We never see this information, because it is never sent anywhere.
If you sign in
You can sign in with Google, Sign in with Apple, or an email address and password. Depending on the method, we receive an account identifier, your email address, and a display name. Apple only shares a name with us the first time you sign in with that Apple ID. We store your account identifier, email, and display name so the app can recognize you across sessions and devices.
Signing in also turns on cloud sync. A private record is created for your account holding the same progress a guest keeps locally: your points balance, completed puzzle ids, streak counts and dates, favorited puzzles and when you favorited them, your level progress in each difficulty tier, and your in-app settings. It also holds a few small bookkeeping fields, such as which one-time bonuses you've already claimed and which difficulty tier you played most recently, so those don't reset or repeat across devices. This record exists so your progress carries over if you play on a second device.
If you use multiplayer
Creating or joining a multiplayer room stores a room name, the invite code for that room, and the list of members, including your account identifier and the display name you were using when you joined. While a round is running, we record which puzzles were served to the room, when you started and finished each one, and whether you solved or skipped it. Start and finish times are recorded by our server, not reported by your device, so that timing can't be faked.
Support requests
If you contact support from inside the app, the message is composed in your own email app and includes your app version number, so we can tell which release you're reporting on. We only see what you choose to send.
Sharing an invite code
The Invite button in a multiplayer room hands your device's own share sheet a short line of text containing your room's invite code. We don't see who you share it with. Where you send it is entirely up to your device's share sheet and whatever app you pick.
Crash reports
The app uses Firebase Crashlytics to report crashes and fatal errors, so that a bug affecting real players can be found and fixed. A crash report contains the error and its stack trace, plus technical details about the device and session, such as the device model, operating system version, and app version. It is tied to a Crashlytics installation identifier rather than to your name or email. Crash reporting is disabled in development builds and active only in released builds. We use these reports solely to diagnose and fix faults, never to profile you or to build an advertising audience.
Notifications
If you turn on daily play or streak reminders in Settings, that reminder is scheduled entirely on your own device, using its native notification system. We are not involved when it fires, and nothing about it, not your reminder time, your streak count, or the fact that a notification was shown, is ever sent to us or to anyone else. Turning reminders on or off only changes what your device schedules for itself.
This website
This website does not use cookies, does not run any analytics, and does not set anything on your device. The one thing it loads from outside our own hosting is the Nunito Sans typeface from Google Fonts, which means your browser makes a direct request to Google's servers to fetch it, and that request can expose your IP address to Google in the ordinary way any web request does. We don't receive anything from that request ourselves.
What we do not currently collect
As of this writing, Stick Math has no advertising of any kind and no product analytics tracking of how you use the app, meaning no event tracking, no behavioural profiling, and no advertising identifiers. If advertising or analytics are added later, this policy will be updated first.
How we use it
- To let you sign in and recognize your account across sessions and devices.
- To keep your points, completed puzzles, streak, favorites, and settings in sync between devices.
- To run multiplayer rooms: matching a room to its members, generating the shared puzzle set, timing rounds fairly, and building the room's leaderboard from completed attempts.
- To respond to support requests you send us.
- To keep the service secure and working as intended.
Legal bases for processing
Different regions describe the legal basis for processing personal information differently. Rather than picking one region's framework, here is what applies in plain terms, and it should satisfy the common ones (including the EU's GDPR, California's CCPA and CPRA, and India's DPDP Act):
- Performance of a contract. We process account and progress information because it's what makes an account, cloud sync, and multiplayer actually work. Without it, those features can't function.
- Consent. Signing in is your choice. A guest who never signs in is never synced. Creating or joining a multiplayer room, and sharing an invite code, are also things you choose to do.
- Legitimate interests. We rely on this basis for keeping the service secure, preventing abuse of multiplayer timing, and responding to support requests.
Visibility to other players
This is worth calling out on its own. If you sign in and join or create a multiplayer room, the display name on your account becomes visible to every other member of that room, for as long as you're in it. Other members also see your standing on that room's leaderboard, based on the puzzles you solved or skipped and how long each one took you. Nobody outside a room you've joined can see this information, and it is never linked to your email address for other members.
Third parties we work with
We use a small number of infrastructure providers to run the app. We don't sell personal information to anyone, and we don't share it with advertisers, because there are none.
- Google, Firebase Authentication. Handles Google sign-in and email and password sign-in, and issues the credential that identifies your account to the app.
- Google, Cloud Firestore. Stores your synced account record and multiplayer room data described above. Access is restricted by server-side rules so that only you can read or write your own account record, and only a room's own members can read that room's data.
- Google, Firebase Crashlytics. Receives crash and fatal-error reports from released builds, with the technical device and session detail described above, so faults can be diagnosed and fixed.
- Apple, Sign in with Apple. Handles Apple sign-in and provides your name (on first sign-in only) and a private relay email if you choose to hide your real one.
- Resend. Delivers the message you send through our contact form to our mailbox. It handles the sending only, and it never sees anything about your game account.
These providers process data on our behalf, under their own security and privacy commitments, and only for the purposes described in this policy.
International data transfer
Our infrastructure providers operate global systems, which means information may be processed or stored in a country other than the one you're playing in. Where that happens, it relies on the safeguards those providers make available for cross-border transfer, such as standard contractual clauses. We do not have a single fixed list of countries to name, because these providers can change their processing locations.
Data retention
- Guest data stays on your device until you clear the app's storage or uninstall it. We never receive it, so we have nothing to retain or delete on our end.
- A signed-in account's synced record is kept for as long as the account exists, so your progress is there the next time you sign in on any device.
- Multiplayer room data is kept for as long as the room exists, to support its leaderboard and history.
- If you request deletion (see below), we delete your account record and remove you as a factor in rooms you belonged to within a reasonable time.
Security
Your account record is locked to your account by server-side rules, so no other player, signed in or not, can read or write it. Multiplayer round timing is recorded by the server rather than your device, so a player can't fake how fast they solved a puzzle. Data in transit to and from our infrastructure provider is encrypted. No system is perfectly secure, and we can't guarantee absolute security, but we've built access control into the data model itself rather than treating it as an afterthought.
Children
Stick Math is a general audience app and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you're a parent or guardian and believe your child has provided us with personal information, contact us at the address below and we'll delete it.
Your rights
Depending on where you live, you may have rights to access the personal information we hold about you, correct it, delete it, receive a copy of it, restrict or object to how we use it, and, if you're a California resident, to opt out of the sale or sharing of it (we don't sell or share it, so there's nothing to opt out of). We aim to honor these rights for every player, regardless of where you're located, rather than only where a specific law requires it.
How to request access, correction, or deletion
Send us a note through the contact form and tell us what you'd like: a copy of your data, a correction, or deletion. Include the email or sign-in method your account uses so we can find it.
Account deletion is required by both Apple's and Google's app store rules. Our Firestore access rules already permit a signed-in player to delete their own account record entirely, which is the technical foundation deletion is built on.
An in-app "Delete account" screen is planned but not yet available in the current build. Until it ships, email us and we'll delete your account record and remove your access from any multiplayer rooms you belonged to. If you're a parent or guardian requesting deletion on a child's behalf, say so in your email.
The contact form on this website
The website has a contact form. Nothing on this site collects anything about you until you choose to use it. There are no cookies, no analytics, and no tracking pixels on any page here.
When you send the form, we receive the name, email address, and message you typed, and nothing else. We use them to answer you and for nothing else. Your address is not added to any mailing list, because we do not have one, and it is not passed to anyone else.
The form posts to our own endpoint on this site, which sends the message on to us through Resend, an email delivery service. Nothing you type is stored on this site: it is turned into an email and passed straight to Resend for delivery. We keep the resulting email conversation for as long as we need it to deal with what you asked about, and delete it when that is done.
Using the form is entirely optional, so our legal basis is your consent, given by choosing to send it. You are free to reach us another way if you would rather not use it.
Changes to this policy
If we change what we collect or how we use it, most notably by adding advertising, analytics, crash reporting, or subscriptions, we'll update this page and change the effective date above.
Contact us
Questions about this policy, or anything else about how Stick Math handles your information, can go through the contact form.