Privacy
Last updated 13 September 2026
Grid Out has no accounts. You do not sign up, you do not sign in, and there is nothing for us to attach a name to. What follows is a description of what the app and the website actually do with data, written to match the code rather than to cover every eventuality.
The short version. Your puzzle record is stored on your own device. We collect anonymous gameplay events tagged with a random ID that identifies an installation, not a person. We do not collect your name, your email, your location, your IP address or your advertising identifier, and we do not use third-party advertising or tracking SDKs.
What stays on your device
Your streak, your solved puzzles, your personal bests and your challenge-run scores are stored locally — in your browser's storage on the web, and on the device itself in the app. The game reads them from there, which is why it works with no connection at all.
Clearing your browser data clears them on the web. In the app they survive normally, and are backed up so a reinstall can restore them (see below).
The installation ID
On first launch the app generates a random identifier and stores it. On iOS it is kept in the system keychain so that deleting and reinstalling the app does not lose your history.
This identifier is generated by the app. It is not Apple's advertising identifier (IDFA), it is not shared with anyone, and it is not used to track you across other apps or websites. It exists so your own puzzle history can be restored to you, and so we can count how many people play without knowing who they are.
What we collect
- Gameplay events — which screens are opened, which puzzles are started and finished, how many moves a solve took, whether a hint was used. Each event carries the installation ID, the platform (iOS or web) and the app version.
- Puzzle results, synced so they can be restored if you reinstall or move to a new device.
On the website only, we also use Google Analytics via Google Tag Manager, and only if you accept analytics cookies in the banner. The app contains no Google Tag Manager, no analytics SDK and no cookies at all.
What we deliberately do not collect
- Your name, email address or any contact details — we never ask for them.
- Your IP address or user agent. The analytics endpoint is written not to store either.
- Your location, contacts, photos, microphone or camera.
- Apple's advertising identifier, or any cross-app or cross-site identifier.
There are no advertising or tracking SDKs in the app, and no data is sold or shared with data brokers.
Where it goes
Data is stored in a Postgres database hosted by Supabase, and served through Vercel. Both are processors acting on our instructions. Gameplay events are deleted automatically after 180 days.
Removing your data
Deleting the app removes everything held on the device; on the web, clearing site data does the same. Both are immediate and neither needs to go through us.
The anonymous gameplay events described above are a separate copy, and because there is no account the installation ID is the only way to find them. They are deleted automatically after 180 days.
Children
Grid Out is suitable for all ages and is not directed at children under 13 in a way that collects personal information from them. We do not knowingly collect personal information from anyone, of any age, because we do not collect personal information.
Changes
If this policy changes materially, the date at the top changes with it and the new version is posted here.