§ Clockwork: Gridlock · Privacy Policy
No name. No email. One random number per install.
Effective August 26, 2026
1. Summary
Clockwork: Gridlock has no sign-up, no login, no profile, and no way for you to tell it your name. It never asks for an email address, a phone number, a photo, a contact list, or your location.
What it does do is give each install a random number and record how the puzzles are going — which boards people bounce off, which lessons fail to teach, whether players come back. Those records carry no identity, but they are tied to that per-install number, which is why the App Store label says the data is linked to you rather than fully anonymised.
• No name, email, phone number, address, or any other contact detail — ever
• No advertising, no ad SDKs, no analytics brokers, no social-network SDKs
• No tracking across other apps or websites, so no App Tracking Transparency prompt appears
• Your purchase is handled entirely by Apple; the game never sees your payment details
The sections below spell out exactly what is stored, what is sent, and who touches it.
2. What is stored on your device
All of this lives in local storage on your device only:
• A random per-install identifier, created the first time you open the game. It is not Apple's IDFA, not the IDFV, and not derived from any hardware identifier. It exists so a stream of gameplay events can be recognised as coming from one install rather than a thousand unrelated ones.
• A session identifier — a second random value, minted fresh every time the game starts and never written to disk. It groups events into one play session.
• Your progress — solved puzzles, best rounds, best scores, your streak ("The Winding"), the Doctrine lessons you have finished, your chosen language, and your settings.
• A buffer of up to 1,000 gameplay events waiting to be sent. If sending fails, they simply wait on your device.
• A single true/false flag mirroring whether "The Long Wind" campaign is unlocked on this device. It is refreshed from the App Store on every launch; the App Store, not this flag, is the source of truth.
• The session token for the anonymous account described in section 4.
Deleting the app — or clearing site data in your browser — erases all of it, including your streak and your progress. There is no cloud backup of progress.
3. What the game sends
Gameplay events are batched on your device and sent to our database at Supabase. Every event carries the random install identifier, the session identifier, a timestamp, an event name, and a small set of properties. The complete list:
• Session — one event per launch.
• Puzzles — stage start, stage end, and stage retry: which puzzle, whether it was a daily, a Doctrine lesson, an authored watch or a campaign board, its par, the round you finished on, the result, your score, and how many undos and tips you used.
• Help — that a tip was used, and that the Doctrine tutorial was started.
• Sharing — that a result card was copied or shared, with the puzzle and score. The card itself is spoiler-free and is composed on your device; we do not receive anything you then paste elsewhere.
• Preferences — language changes and settings changes.
• Store — whether the campaign purchase screen was seen or tapped, and whether a purchase completed, was cancelled, or is pending, along with any error text the App Store returned. No payment information of any kind is included: the game never receives a card number, an Apple Account, or a receipt.
That is the whole list. There is no keystroke logging, no screen recording, no free-text field anywhere in the game to capture.
4. The device snapshot
The session-start event alone carries a coarse snapshot of the device, so we can tell a layout bug on a small phone from a layout bug on a tablet:
• Platform name (for example "iOS" or "macOS"), and whether the device reports itself as a phone or has a touch screen
• Screen size in pixels and the device pixel ratio
• The system language and the time-zone name (for example "Asia/Manila")
• The user-agent string, truncated to 160 characters
• Which build version and runtime is being played — web, iOS, or Android — and whether it is the native app or the browser version
That is a device description, not a person. It contains no serial number, no advertising identifier, and no precise location — a time-zone name is not a location fix.
5. The anonymous account and the daily leaderboard
To submit a daily result, the game creates an anonymous account on Supabase the first time it runs. This account has no email address, no password, and no name — it is a random identifier and nothing else. Its only purpose is to let the server accept a daily submission from one install and rank it.
A daily submission contains three things: the identifier of the day's puzzle, which difficulty tier you played, and your replay — a short string of the moves you made. The server re-runs that replay through the same puzzle engine to verify the result. This is how scores are validated without trusting the client; it is proof, not personal data.
Because no identity is attached to that account, we cannot look you up, and neither can anyone else.
6. Who else touches the data
• Supabase — our processor. Provides the database, the anonymous authentication, and the server functions. Receives the gameplay events, the anonymous account, and the daily replays described above.
• Cloudflare Pages — hosting for the web version of the game. Keeps standard web-server request logs, as any web host does.
• Apple — app distribution and all in-app purchases, under Apple's own privacy policy. Apple handles everything to do with your purchase; we receive only a yes/no entitlement.
That is the complete list. There are no advertising networks, no attribution or install-tracking SDKs, no data brokers, and no social-media SDKs in this game. Nothing is sold. Nothing is shared for advertising. No identifier is joined with third-party data.
7. Why any of it is collected
Two reasons, and no others:
• To make the puzzles better. Every board is machine-proven solvable at its stated par, but "solvable" and "fun" are different questions. The event stream shows which days people bounce off and which lessons fail to teach.
• To make the daily work. Streaks, the calendar, and the leaderboard need to know that today's solve came from the same install as yesterday's.
It is never used to build a profile of you, to target advertising, or to make any decision about you as a person.
8. No tracking, and therefore no ATT prompt
The game does not track you across other companies' apps or websites, does not share any identifier with a data broker, and contains no advertising. Because none of that happens, no App Tracking Transparency prompt appears — there is nothing to ask permission for.
If that ever changes, this page will change first and the prompt will appear before any tracking does.
9. How long it is kept
Local data stays on your device until you delete the app or clear site data.
Gameplay events and daily submissions are retained on Supabase for as long as they remain useful for tuning puzzles and running leaderboards. Because the records carry no identity, they are effectively anonymous statistics once they arrive.
10. Your choices
• Erase everything on your device — delete the app (iOS), or clear site data for the domain (web). That removes the install identifier, your progress, and your streak. A fresh install mints a brand-new random identifier with no link to the old one.
• Send nothing to the server — play offline, or play anything other than the daily. Neither submits a result.
• Deleting the account — there is no account to delete in any ordinary sense: it has no email, no password, and no name, so no one can sign into it and it identifies no person. If you want the anonymous records for a specific install removed anyway, write to games@arkynate.com from that device and we will tell you how to read your install identifier out of the app so we can delete the matching rows.
• Restoring a purchase — the campaign unlock is tied to your Apple Account, not to anything we store. "Restore Purchases" on the main menu asks Apple, not us.
11. Children
The game is not directed at children under 13 and is not distributed in Apple's Kids Category. It contains no user-generated content, no chat, no messaging, no in-app web browsing, and no links out to social networks.
If you believe a child has provided personal information through the game — which the game gives no means to do — contact us and we will investigate.
12. Changes to this policy
If what the game collects changes, this page is updated and the effective date at the top changes with it. Material changes are noted in the app's release notes, and the App Store privacy declaration is updated to match before the new version ships.
Updates are always posted at this URL — https://arkynate.com/gridlock/privacy
13. Contact
Questions about this policy, or about the data a particular install has sent: games@arkynate.com.
Clockwork: Gridlock is made by Arkynate, a one-person studio. Expect a best-effort reply within a few days.