Tic Tac Tall — Privacy Policy

Last updated: 2026-06-20

Tic Tac Tall is a turn-based puzzle game by AB Dev LLC. This page describes what the app collects, where it lives, what we do with it, and your options.

What we collect

If you sign in

• Google Play Games (Android) — we receive your Play Games player ID, display name, and (if you grant the consent prompt) your Google email address. These come from Google Play Services on your device.
• Email magic link (web, desktop, mobile) — we receive the email address you submit on the sign-in form. We use it to send the one-time sign-in link and to identify your account; we do not send marketing.

Game data

• Campaign progress (which levels you've completed, best turn count per level).
• App settings (music volume, mute, leaderboard opt-in, display name for leaderboards).
• Custom levels you build with the in-app editor.
• Game replays you choose to save.
• Gameplay statistics — wins, losses, draws, marks placed, hazards triggered, and similar counters used for in-app stats display.

Achievement and leaderboard data

If you sign in to Google Play Games (Android) or Steamworks (desktop, when shipped), your achievement unlocks and leaderboard scores are stored on that platform under your account there. These are not stored on our servers; they live with Google or Valve under their respective privacy policies.

What we don't collect

• No advertising IDs.
• No analytics or third-party tracking SDKs.
• No device fingerprinting.
• No location data.
• No microphone or camera access.
• No contacts.
• No background activity tracking.

Where it lives

Game data syncs through a server we operate on Cloudflare Workers and Cloudflare D1 (a SQL database). Your data is partitioned by your user identifier; we don't share it between users.

Email addresses (if you used magic-link sign-in) are stored in the same database, used for account identification and for the magic-link delivery flow.

How we use it

• Sync — your progress, custom levels, replays, and settings are pushed to the server when you change them and pulled when you sign in on another device.
• Leaderboards — if you opt in (Settings → Submit my scores), your per-level best scores are sent to a public leaderboard along with your display name.
• Account identity — the user identifier lets us tie your data together across devices and platforms.

Third-party services

• Google Play Games Services — sign-in and achievements on Android. policies.google.com/privacy
• SMTP2GO — outbound email delivery for the magic-link sign-in. They receive your email address and the message body containing the one-time link. smtp2go.com/privacy-policy
• Cloudflare — hosts our sync server and database. cloudflare.com/privacypolicy
• Steamworks — sign-in, achievements, and stats on Steam. store.steampowered.com/privacy_agreement

Your rights

Deletion

In the app, open Settings → Delete account. The server permanently removes your user row plus every save, replay, leaderboard score, and session token tied to it. The deletion is immediate and irreversible.

If you can't reach the in-app button (for example, if the app is uninstalled), email the address below and we'll delete the account manually.

Sign-out

In the app, Settings → Sign out. This revokes your session token on the server so any other device signed in with the same token also signs out. Your account and saved data stay on the server until you ask for deletion.

Data retention

Active accounts stay until you delete them. Inactive session tokens auto-expire after 90 days of disuse. Magic-link sign-in records (the pending one-time link, its hash, and your email) auto-expire 15 minutes after you request the link unless you complete sign-in.

Children

The app is not directed at children under 13. If you believe a child has signed up, contact us and we'll delete the account.

Changes

We update the "last updated" date at the top of this page when this policy changes. Significant changes will also surface a one-time in-app notice the next time you sign in.

Contact

Privacy questions, account deletion requests, or copies of your data: privacy@abdev.llc