Privacy Policy.

1. Who we are

This policy covers the Crux mobile app and crux.quest website, operated by Pizzart Pte. Ltd., Singapore ("Pizzart", "we", "us"). We are responsible for deciding how personal data is used and act as its controller where applicable data protection law uses that term.

For privacy questions or requests, contact support@pizzartgames.com.

2. The short version

• Crux creates a player account without requiring your name or email. Linking Sign in with Apple is optional.
• We use account, gameplay, device and diagnostic data to provide, secure, analyse and improve Crux. Gameplay and diagnostic analytics are part of the service described in our Terms of Service.
• Crux currently shows no in-game ads. We use Singular to measure campaigns that bring players to Crux, subject to regional privacy choices and age restrictions.
• We apply age restrictions to social features, purchases, notifications, ad measurement, play traces and test rounds as described below.
• We retain data while your account is active and for a reasonable period afterwards as needed for the purposes in this policy. Some records have specific retention schedules.

3. What we collect

When you use the app

• Ids. A random player id and device id made by the app and our server, and a sign-in token that proves requests come from your copy of the app. We do not use your phone's name, number or IMEI.
• Device and app details. Device type and model, operating system and version, app version and build, language, and time zone, so puzzles reset at your local midnight.
• Network address and country. Your IP address, and the country our hosting provider, Cloudflare, works out from it. We use the country to decide which privacy choices to show you. We keep the last IP address you played from to help stop fraud and abuse, and shorten it after 90 days (see section 7).
• Gameplay. The puzzles you play, your answers, results and times, streaks, coins, gems, hints, achievements and progress.
• App activity. Screens you open and buttons you tap, sent to our own servers so we can fix bugs and tune puzzles.
• Move recordings. A step-by-step record of moves in some puzzles ("play traces"), used to find bugs and check puzzle difficulty. The server rejects traces from accounts known to be under 18.
• Crash and performance data. When the app crashes or has an error, a report with the error, the app session, your device model and operating system version. See Sentry in section 5.
• Device check. Apple App Attest helps verify genuine app requests. We store its key identifier, player and app identifiers, environment, public key, signature counter, Apple receipt and creation and last-use times. Keys remain while needed to verify the account and are included in account deletion. Verification challenges are valid for five minutes.

Gameplay and diagnostic analytics are part of the service acknowledged when accepting the terms. We use legitimate interests where permitted and consent where required, as described in section 4. Contact support to exercise applicable rights, including objections. Processing for younger players is described in section 8.

What you give us

• Your age. Your birth month and year, asked once at first launch. We keep the birth year and an age group (under 13, 13 to 15, or 16 and over). The age-gate month and day are not stored. If you separately enable a birthday greeting, its month and day are stored locally on your phone.
• Profile. The display name you choose and, if you add one, a profile picture from your photo library or camera. Profile pictures are checked by automated moderation before other players see them.
• Friends and chat. Friend codes and friend lists, Parlor tables you create or join, the chat messages you send, and any reports or blocks you make.
• Sign in with Apple. Linking is optional. We receive the Apple account identifier and any email Apple shares, which may be a private relay address. We also store a token used to revoke the link when you delete the account.
• Purchases. The product, price, date, store transaction id and store receipt, so our server can confirm each purchase and restore it later. Apple and Google handle payment. We never see your card details.
• Notifications. If you allow notifications, a push token for your device and your reminder settings.
• Clips. On iPhone and iPad, you can record a short clip of a solve. If you turn them on, the microphone adds your commentary and the camera adds a small face bubble. The clip stays on your phone unless you share or save it. Camera and microphone use depends on the feature and your device permissions.
• Voice and drawing test rounds. Adult tester rounds let you submit text, drawings, votes and voice clips with the requested capture permissions and consent. We use submissions to review Crux features; other testers assigned to your round may see or hear them. Submissions have a 90-day cleanup schedule and can be deleted earlier using the available controls.
• Support and feedback. Emails you send us, bug reports, feedback and reviews, and any screenshots or details you include.

From other sources

• Apple and Google tell us when a purchase or subscription renews, is refunded or is cancelled.
• Singular, while ad measurement is on, tells us which ad campaign, if any, led to your install.
• Other players may add you as a friend or report something you posted.

We do not request your contacts or precise location. On iPhone, access to your advertising identifier requires tracking permission (see section 9).

4. Why we use it

We use data to operate Crux, deliver and restore purchases, provide social features, answer support requests, analyse performance, improve and develop games, measure our marketing, and protect our business and players against fraud and abuse. Where European or UK data protection law applies, our legal bases include:

Accepting the terms acknowledges these uses. It does not replace any separate consent required by law. You can object to processing based on legitimate interests by contacting support; we consider such requests as applicable law requires.

Automated checks may hold back chat messages or profile pictures or detect suspicious activity. You can contact support about a moderation decision.

5. Who we share it with

We use providers for hosting, storage, diagnostics, attribution, payments, notifications, moderation, puzzle features and support. They receive the data needed for those services. Processing is subject to applicable contracts and law; some providers, such as app stores, also process data under their own policies.

• Cloudflare hosts our servers, databases and file storage and handles network traffic, including IP addresses and information sent to our services.
• Sentry receives crash and error reports, app and device details, and a player id after onboarding when enabled. Sentry is disabled for players identified as under 13. Our Sentry project is configured for its EU region.
• Singular measures advertising campaigns and receives device identifiers, country, player id and events such as solves and purchases when enabled. On iPhone, access to the advertising identifier requires tracking permission. Singular does not start for players under 13; additional restrictions apply to players aged 13 to 15.
• Apple and Google process store transactions and subscriptions and deliver notifications. Apple also provides Sign in with Apple and App Attest.
• Expo relays push notifications to Apple and Google.
• OpenAI checks chat text and profile pictures for harmful content. Moderation requests include the content being checked.
• AI service providers support interactive puzzle features and help process feedback and bug reports. Depending on the feature, these include DeepSeek, Anthropic, OpenRouter and the model providers it routes to. Requests may contain puzzle inputs or report text, including personal information you put in that text.
• Email providers process correspondence when you contact us.

Other players can see profile information, results and messages in social features such as leaderboards, friend lists and Parlor. Test-round submissions, including voice clips, may be shown to testers assigned to the same round.

We may disclose data to comply with law or lawful requests, investigate fraud or abuse, enforce agreements, protect our rights, property or safety and those of others, or establish or defend legal claims. Data may also be transferred in a merger, acquisition, financing, reorganisation or sale of our business or assets, subject to applicable law.

We do not sell personal data for money. Attribution data sharing may be treated as a "sale" or "sharing" under some US privacy laws. The privacy controls described below let you limit Singular data sharing.

6. Where it is processed

We are based in Singapore. Our service and providers operate internationally, so data may be processed in Singapore, the United States, the European Union and other countries with different data protection laws.

International transfers are subject to applicable legal requirements. Where transfer safeguards are required, these may include an adequacy decision, approved standard contractual clauses, the UK addendum or other safeguards permitted by the relevant law. Contact support for information about the arrangements applicable to your data.

7. How long we keep it

We keep personal data while your account is active and for a reasonable period afterwards as needed to provide and improve our services, maintain business records, comply with legal obligations, prevent fraud and abuse, resolve disputes and enforce agreements. The period depends on the type of data, why it is used, legal requirements and operational needs. We may retain data longer where needed for a legal claim, investigation or other lawful purpose.

The current scheduled retention rules for particular records are below. Cleanup runs periodically, so removal may occur at the next cleanup after a period ends.

Information that has been anonymised so it no longer identifies a person may be retained for analytics and other business purposes.

8. Children and age

Crux is a general audience service. If you are below the age of majority where you live, your parent or guardian must review and agree to our terms and supervise your use. Store age ratings do not replace these requirements.

The first-launch age screen asks for birth month and year before gameplay. We retain the birth year and age group rather than the month or day. Current protections include:

• Under 13: restricted gameplay without friends, chat, leaderboards, notifications, purchases or Singular ad measurement. We do not ask for tracking permission, and Sentry is disabled for players identified as under 13.
• 13 to 15: Singular, when enabled, uses limited data sharing and no advertising identifier. We do not ask for tracking permission.
• Accounts known to be under 18: the server rejects play traces, and adult tester rounds are unavailable.

Restricted gameplay still uses account identifiers, age information, network information, progress and diagnostics to operate and protect the service. A parent or guardian can contact support to request review or deletion of their child's data. If we learn that data was collected contrary to applicable age or consent requirements, we will take the action required by law.

9. Your choices

All of these are in the app's Settings:

• Personalized hints. Turns off tuning the hint timer to your past solves.
• Privacy Preferences. Shows each service that sees your data, what it gets and for how long. In the EEA, UK and Switzerland, you choose Performance (ad measurement) and Marketing (data sharing) separately, and we first ask on a screen where Accept all and Reject all are equally easy. In the United States this screen is titled "Do Not Sell or Share My Personal Data", and the switch there stops Singular from sharing your data. Players elsewhere get the same switch.
• Tracking (iPhone). Crux asks for tracking permission only if you are 16 or over, and uses your advertising identifier only if you say yes. Change it any time in the iPhone Settings app.
• Notifications. Turn reminders off in Settings, or in your phone's settings.
• Send me a copy of my data. Downloads your data in a machine-readable file.
• Erase my account. See section 11.

10. Your rights

Depending on your location and applicable law, you may have rights to access, correct, delete or obtain a portable copy of personal data; restrict or object to processing; withdraw consent; or opt out of sale, sharing or targeted advertising. Withdrawing consent does not affect processing already carried out. These rights may be subject to legal conditions and exceptions.

Use the available account tools or email support@pizzartgames.com with your player id. You can use this address to object to gameplay or diagnostic analytics based on legitimate interests. We may verify your identity and authority before acting. Where the law allows an authorised agent, we may require proof of authority and identity verification.

We respond within the period required by applicable law and explain any permitted extension. You may complain to your local data protection authority, including the Personal Data Protection Commission in Singapore. Where required by law, you will not receive unlawful discriminatory treatment for exercising privacy rights.

US privacy disclosures. The categories described in this policy include identifiers, device and network information, commercial information, gameplay and app activity, approximate location from IP, age information, and audio or visual content you provide. Sources include you, your device, stores, attribution providers and other players. Uses and recipient categories appear in section 4 and section 5; retention appears in section 7. We do not use sensitive personal information to infer characteristics about you. Where Singular sharing is enabled, identifiers and app activity may be disclosed for attribution; use Privacy Preferences to limit sharing.

11. Deleting your account

Open Settings, go to Account & Privacy, and tap Erase my account, then confirm. You can first use Send me a copy of my data.

Deletion disables your existing account and clears its display name, email, IP address and device id. Friends, requests and notification tokens are removed. Account records covered by the scheduled hard-delete process, including gameplay, analytics, device environment, social activity and referral records, are scheduled for deletion within 30 days. If you linked Sign in with Apple, the process also attempts to revoke the link and retries failed revocations.

Some information may remain where needed for legal obligations, transaction or accounting requirements, fraud prevention, security or disputes, or in records not linked to the deleted account. Any such retention remains subject to section 7 and applicable privacy rights. Anonymous statistics may also remain.

Sentry and Singular maintain data on their own retention schedules; erasing your account does not automatically erase every provider-held event. Contact support if you want to make a broader deletion request, or cannot access the app. We may need to verify that the account is yours.

Deleting your account removes access to its progress and virtual items and does not cancel a store subscription. Cancel through Apple or Google as described on Support.

12. This website

crux.quest does not use website analytics SDKs or cookies. Web games save progress, stats and appearance settings in your browser's local storage.

• If you join the mailing list, we store your email, signup source and browser user agent to send game updates and manage the list. To stop these emails or request removal, contact support.
• When you follow an ad link through crux.quest/go, we record campaign and network details, the referring page, country and browser user agent. The redirect record does not store your IP address.
• Cloudflare processes network information, including IP addresses, to deliver pages and protect the site.

Website records follow the retention purposes in section 7. You can clear locally stored game data using your browser settings.

13. Security

We use technical and organisational measures designed to protect data, including encrypted connections, authentication, access controls and purchase verification. No service can guarantee complete security. Contact support if you suspect misuse of your account.

14. Changes to this policy

We may update this policy as our services, business or legal requirements change. We publish the revised version here with an updated date and provide additional notice or obtain consent where applicable law requires it.

15. Contact us