Tiles Privacy Policy

Effective date: October 27, 2026

Cowbrick Games, Inc. ("Cowbrick Games", "we", "us") makes Tiles, an iPhone app with daily logic puzzles. This policy explains what information Tiles collects, why, and what you can do about it. It applies to the Tiles app and the Tiles website at cowbrickgames.com.

Questions: noah@cowbrickgames.com.

The short version

Tiles needs an account to play. We collect your email address, a password (stored only in hashed form by our sign-in provider), a username and a display name.
We store your puzzle results and play statistics, your friends list, the tiles and badges you earn, your hint-token balance and your Puzzle Pass status. That is what makes the game work.
We do not show ads, do not use advertising or tracking identifiers, do not sell or share your information for advertising, and do not use third-party analytics.
Payments are handled by Apple. We never see your card details.
You can delete your account, and everything linked to it, from inside the app at any time.

Information we collect

Account information. Your email address, your password (we only ever receive it in hashed form from our authentication provider), a username, a display name, and the date you created the account. Your email address is used to sign you in, confirm your account and reset your password.

Profile details. You must give your birthday when you create an account. It is private, never shown to other players, and used only to confirm that you are at least 13 years old. You may also add your full name, which is private and used for one in-app cosmetic feature (a reward tile for players whose last name is "Light").

Gameplay. Which puzzles you start and complete, when, how long they took, whether you used the checker, your move counts (for example how many tiles you placed, trashed, undid or cleared, how many times you paused or opened the rules), unfinished puzzle drafts so you can resume on another device, your points and streaks, and the reward tiles and badges you earn. Some tiles reward how you play, so the app reports these counts to our server. They are used only to grant cosmetic rewards and to show your own statistics.

Screenshots. If you take a screenshot while Tiles is open, the app records that a screenshot was taken, for a reward that counts screenshots. The app never sees or stores the image itself.

Friends and social features. The friend requests you send and receive, the usernames of your friends, and when each friendship began. Your username, display name, chosen profile tile and title, points and completed-puzzle counts are visible to your friends and on leaderboards. Your email, full name and birthday are not.

Purchases. When you buy Puzzle Pass or hint tokens, Apple sends us a transaction record (transaction identifiers, the product, its status, purchase and renewal dates) so we can grant what you bought and keep it in sync with Apple. We also keep your hint-token balance and how tokens were spent. We never receive your payment card or bank details.

Feedback and support. If you send feedback from the app, we store the message, the type (bug or suggestion), your app version and platform, and your account identifier, and we email it to our support address. Email you send us is kept with our support correspondence.

Technical information. Our servers receive your IP address with each request and use it to limit abuse (rate limiting). Those records expire automatically. Our hosting providers keep short-term request logs for security and reliability. The app stores settings, drafts and sign-in tokens on your device so it can work offline briefly and resume where you left off.

What we do not collect. Location, contacts, photos, the content of screenshots, advertising identifiers, or any data from other apps.

How we use information

To run the game: sign you in, serve daily puzzles, record results, keep streaks, grant rewards, show leaderboards and friends.
To deliver purchases and keep Puzzle Pass and hint tokens in sync with Apple.
To send account emails: confirmation, password reset, and replies to your feedback.
To keep the service secure: rate limiting, abuse prevention, and investigating problems.
To improve Tiles, using your feedback and aggregate play statistics.

We do not use your information for advertising, do not build profiles for marketing, and do not sell it.

We share information only with the companies that help us run Tiles, and only what they need:

Supabase (database and sign-in), United States: stores account and gameplay data and handles authentication.
Vercel (application hosting), United States: runs our server and processes every request.
Resend (email delivery): sends account confirmation, password reset and feedback emails.
Apple: processes purchases and subscriptions and distributes the app, including TestFlight. Apple's own privacy policy applies to your Apple account and payments.

We may also disclose information if the law requires it, to protect the rights or safety of players or Cowbrick Games, or as part of a merger, acquisition or sale of assets, in which case this policy will continue to apply to your information.

Your choices and rights

See and export your data. You can view your profile and statistics in the app. Where the export feature is enabled, Settings → Export my data produces a copy of your account records.
Correct your data. Change your username, display name, name and birthday in Settings; change your email or password through the sign-in screens.
Delete your account. Settings → Delete account removes your account and the data linked to it from our systems. Feedback you sent is kept but no longer linked to you, and purchase records may be retained as required for accounting and Apple's records. If you delete your account, you will lose all of your progress, rewards and purchases. This includes your points, streaks, reward tiles, badges, hint tokens and any Puzzle Pass subscription time you have already paid for. Deletion cannot be undone, and purchases cannot be moved to a new account. Cancel any active Puzzle Pass in your Apple settings before deleting, or Apple will keep billing it.
Email. We send only account and support email, no marketing email.

Depending on where you live, you may have additional rights (for example under the California Consumer Privacy Act or the EU/UK GDPR), such as the right to access, correct, delete or port your information, or to object to certain processing. Write to noah@cowbrickgames.com and we will respond within the time the law allows. We will not treat you differently for exercising these rights.

Data retention

We keep your information for as long as your account exists. When you delete your account it is removed promptly, except for records we must keep for legal, accounting or security reasons (such as purchase records and security logs), which we keep only for as long as those reasons require. Rate-limiting records and expired export files are deleted automatically.

Security

Tiles uses encrypted connections (HTTPS) for everything between the app and our servers. Passwords are hashed and never stored in plain text. Access to our systems is limited to people who need it to run Tiles. No system is perfectly secure, so please use a strong, unique password and tell us if you notice anything unusual.

Children

Tiles is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has created an account, contact us at noah@cowbrickgames.com and we will delete it.

International players

Tiles is operated from the United States and your information is stored there. If you use Tiles from outside the United States, you understand that your information is transferred to and processed in the United States.

Changes

We may update this policy as Tiles changes. We will post the new version at this address and update the effective date; for significant changes we will tell you in the app or by email.

Contact

Cowbrick Games, Inc. 1275 N Hayworth Ave, West Hollywood, CA 90046 noah@cowbrickgames.com