SameGrid Privacy Policy

Last updated: 10 September 2026

SameGrid is a daily block-puzzle game. This policy describes the Android app. samegrid.pages.dev hosts this privacy page and other legal pages; it does not host a playable web game. SameGrid is operated by Rudra Satani.

Account

On first launch the Android app creates an anonymous Supabase account (signInAnonymously). There is no email or password sign-up. Settings shows a shortened guest id. You may optionally sign in with Google from Settings. That attaches Google to the current guest identity when the Google login is new. If that Google login already belongs to another SameGrid profile, the app asks before switching; it does not silently merge scores, friends, or queued submissions.

Signing back into the same Google account restores accepted Daily results, streak, friends, and rewards that can be rebuilt from that history. Unfinished local runs, unsent offline scores, and local practice are not stored in the cloud and are not restored after uninstall or after switching accounts.

What is stored

• Profile — a display name (default Player-XXXX, editable on Friends, at most 40 characters) and a 6-character friend code.
• Scores and replay — official Daily score, piece count, line stats, streak, and the move list used to replay and validate the run. Endless personal-best scores may also be stored.
• Friends — friend codes you add, pending or accepted friendships, and challenge-invite tokens you create. Friends can see your display name and relevant scores. A challenge lookup returns only display name and official score — not your user id, email, or friend code.
• Device preferences — theme, haptics, sound, reduce-motion, tutorial completion, and similar settings stay on the device.
• In-progress play — the current run, submit-retry queue, cached boards, and local results stay on the device so you can continue offline.

The app does not request precise location, contacts, photos, or microphone access. There is no player-entered country field in this version. It does not collect an email address in the app UI. Google sign-in is handled by Google and Supabase; the app does not log email addresses.

Authenticated players can access public Daily and weekly leaderboard data, including display names, scores, completion times, and pseudonymous account identifiers. Private move lists and Google email addresses are not included in those leaderboards.

Analytics and crash reports

Firebase Analytics receives gameplay and product events. Events and parameters are listed in the app’s analytics taxonomy (AnalyticsTaxonomy in the client). They include things such as Daily start/finish, share sheet outcomes, invitation progression (date and booleans only), Endless events, tutorial steps, archive opens, settings toggles, and account deletion. They do not include invitation tokens, friend codes, display names, or emails.

Firebase Crashlytics records crash and device information in release builds so crashes can be fixed. Analytics collection is on by default in this version; there is no Settings toggle to turn it off. Advertising ID collection and advertising personalization signals are disabled in the Android client. Analytics also derives approximate location, such as country or city, from a masked IP address. SameGrid does not request GPS or precise device location.

Push notifications

Notifications are off until you opt in (Settings → Notifications, or “Remind me when tomorrow’s board is out” on a Daily result). Firebase Cloud Messaging may automatically create a registration identifier and send device and app configuration data to Firebase before notification opt-in. Opting in subscribes this device to Daily notifications and stores its token with your Supabase account for friend notifications. The supported notifications are:

• daily_live — the new Daily board is out
• friend_beat — an accepted friend passed your score that day

You can turn notifications off in Settings. When connected, that unsubscribes the device and removes its token from our Supabase account records; it does not erase Firebase’s installation identifiers.

Ads and purchases — currently off

Remote Config flags ads_enabled, rewarded_enabled, interstitial_enabled, remove_ads_iap_enabled, and club_enabled are off at launch. The shipped client does not include the AdMob or RevenueCat SDKs. The Daily board is never monetized.

If those flags are later enabled:

• AdMob may use an advertising id, ad interaction data, and a consent choice (UMP) to show rewarded or interstitial ads on Endless / Archive only — never on Daily play, Daily results, or startup.
• RevenueCat / Google Play would hold purchase and entitlement state for Remove Ads (and Club if that flag is on). Payment card numbers are handled by Google Play, not by SameGrid.

How information is used

To run the game, save and validate official scores, show friends and streaks, send the notification types you opted into, and understand crashes and usage. Official Daily boards and scoring are the same for everyone; ads or purchases cannot change them.

Who processes data

• Supabase — anonymous auth, game and social data, score validation.
• Google Firebase — Analytics, Crashlytics, Cloud Messaging, Remote Config.
• Cloudflare Pages — hosts this site (privacy, terms, support, deletion, and Android App Links files).
• AdMob / RevenueCat — only if the flags above are turned on.

We do not sell personal information.

Retention

Account and game data stay while the anonymous account exists. In-app deletion removes the Supabase user (cascade: profile, scores, friendships, streak, device tokens, challenge invites) and clears local app data. Manual web requests are completed within 30 days. Firebase logs follow Google’s retention for those products and may not disappear at the same instant. Anonymized aggregates (for example a day’s player count) may remain.

Your choices

• Change your display name on the Friends screen.
• Decline or disable notifications in Settings.
• Delete the account in the app (Settings → Delete account) or via the deletion page.

Children

SameGrid is intended for players aged 13 and older. It is not directed at children, and we do not knowingly collect personal information from children under 13.

Security and changes

Traffic between the app and its services uses HTTPS/TLS. This policy may change when the service changes; the date above is the current version.

Contact

Privacy questions and deletion requests: samegrid.support@gmail.com. Operator: Rudra Satani.