Privacy policy
Guest play
Guest gameplay, settings and local game statistics stay on this device. Native reminders are scheduled locally.
Usage analytics
On production versions of Tessera for web, iOS and Android, we use limited first-party, cookieless analytics to support and improve the app. Umami records pageviews for allowlisted paths only. We do not use analytics for advertising, sell analytics data, or track people across apps or websites. Before Tessera sends a pageview, it removes account identity, app and device identifiers, query strings, page fragments, referrers, page titles, custom events, game data and text. Umami uses the IP address and user-agent information during collection to create a pseudonymous rotating session hash and may derive browser, operating system, device type and country; it does not store the raw IP address. We process these limited statistics for our legitimate interests in keeping the service reliable and understanding aggregate use. Active analytics data is automatically deleted after 90 days. Encrypted disaster-recovery backups follow a separate restricted lifecycle and may retain older copies until those backups expire; restored analytics is purged before the service reopens. Web analytics honors browser Do Not Track. Native analytics creates no identifier and uses no local analytics storage.
Cloud accounts
If you choose Apple or Google sign-in, Supabase processes your account identifier, provider identity and optional email. We store puzzle attempts, difficulty, completion time, errors, hints, score and streak data so progress can sync across devices.
Web and notifications
The web app contacts Supabase to provide online gameplay and account features. If you enable web reminders, we store the push endpoint, public encryption keys, timezone and reminder time. We do not sell personal data.
Error diagnostics
If the production app fails, Tessera may send Sentry a privacy-filtered error report with the error type and stack trace, app version and build, platform, and environment. Reports exclude account identity, email, tokens, request bodies, full URLs, puzzle boards and solutions, and text you enter. Sentry discards IP addresses for this project. We use these reports only to investigate app failures.
Your choices
You can play without an account, sign out while keeping local progress, clear local progress, or delete your live Tessera account and linked application data from Settings. Account deletion removes the account and linked application data. Analytics pageviews are not linked to an account, so they cannot be identified for individual deletion and instead expire through the 90-day retention policy.
Contact: marcel@tuinstra.dev