Shaplet Privacy Policy

Who operates Shaplet

Shaplet is operated by Parker Phillips, doing business as Th3RedStudio ("we", "us"). This policy explains how we handle information when you use Shaplet on mobile or the web. Contact support@th3redstudio.com with privacy questions or requests.

Information we handle

Account information: if you register, we process your email address, authentication information, and a player identifier. Our authentication provider handles password authentication. Do not send your password to support.

Guest information: guest play creates an anonymous authentication identity and player identifier. Guest play is not data-free: your progress and other player records can be stored online even without an email address.

Game information: puzzle assignments and names, saved connections, completion results, elapsed game time, restarts, achievements, and Daily streak information. We also process generation-credit balances and transaction history, including verified ad reward identifiers, and records of the versions of our Terms and Privacy Policy you acknowledged.

Purchase information: subscription products, store transaction identifiers, purchase and expiration times, subscription status, and a player identifier used to associate access with your account. Apple or Google handles your store payment details; Shaplet does not receive your full payment card number.

Technical information: our hosting, authentication, purchase, and advertising providers may process IP addresses, device and app information, approximate location derived from IP, network requests, diagnostic logs, and fraud-prevention signals. Advertising providers may also process advertising identifiers, ad interactions, and consent choices as described below.

Support information: information you choose to include in an email to us. Please avoid including sensitive information that is not needed for your request.

Why we use information

We use information to operate the game, authenticate players, save and synchronize progress, generate and manage puzzles, maintain achievements, provide subscriptions, verify and grant ad credits, prevent fraud and abuse, troubleshoot problems, respond to support requests, and meet applicable legal obligations.

Where applicable data-protection law requires a legal basis, these purposes may rely on performing our agreement with you, legitimate interests in operating and securing the service, compliance with law, or your consent where required. Acknowledging this policy is not consent to optional advertising tracking.

Providers and disclosures

Supabase provides hosting, database, authentication, and server functions. RevenueCat processes subscription status and verified rewarded-ad transactions. Google AdMob and its advertising partners deliver and measure ads. Apple App Store and Google Play process purchases. These providers receive information needed for their services and may also process information under their own policies.

Provider information is available at https://supabase.com/privacy, https://www.revenuecat.com/privacy, https://policies.google.com/privacy, and https://policies.google.com/technologies/partner-sites. The store you use also provides its own privacy information.

We may disclose information when reasonably necessary to comply with law, protect rights and safety, investigate abuse, or support a business transfer subject to applicable safeguards. If you choose to copy or share a puzzle result, the destination you select receives the content you share. We do not currently publish a player leaderboard.

Ads and your choices

Rewarded ads are optional. Completing an eligible ad may earn a generation credit after server verification. Google and its partners may use device identifiers, IP addresses, ad interactions, and related information for ad delivery, measurement, security, and fraud prevention. Requesting a non-personalized ad does not mean that no information is processed.

Use Ad privacy settings beside the rewarded-ad action to review or change choices where Google makes them available. Device advertising controls and, on iOS, tracking settings provide additional choices. During development testing, Shaplet may request iOS tracking permission to recognize a registered test device. That development-only request is separate from accepting our Terms.

We do not sell player account records for money. Some advertising disclosures may be considered a sale, sharing, or targeted advertising under local law. Where applicable, use the available ad controls or contact us to exercise your rights. Refusing optional permissions does not require you to accept tracking to play; ad availability may differ.

Storage, retention, and deletion

We retain information for as long as reasonably needed to provide the service, maintain your account, address disputes and fraud, and meet legal obligations. Retention depends on the type of information and purpose; we do not promise that every record disappears immediately after a deletion request. Providers may retain their own records under their policies and legal obligations.

Deleting an Endless puzzle removes your assignment, associated saved progress and result, and the full board when no other player still needs a shared legacy board. We keep a small deletion record, credit history, and earned achievement records while your player identity exists. Deleting a board does not refund a generation credit.

To delete your account, open Account options and choose Delete account (or Delete guest data). Confirm the permanent deletion in the app; registered players must verify their current password. This deletes your Shaplet Auth identity and associated profile, progress, results, achievements, Endless assignments, generation credits, and legal acceptance records. Unshared generated boards are deleted; shared legacy boards remain for other players. We also request deletion of your RevenueCat customer record, which may be processed asynchronously. For help or other data access, correction, or deletion requests, email support@th3redstudio.com. Use the email linked to your registered account where possible. For guest support requests, include your player ID from Account options. We may need to verify control of the account before acting. Store billing records and records required for law, security, or disputes may be retained. Deleting the app or signing out does not itself delete online data or cancel a subscription.

The app stores session credentials, selected settings, legal acknowledgments, and pending reward receipts on your device. Existing older versions may also have stored puzzle progress locally. Removing local data may make a guest identity inaccessible, so register an account if you want recoverable access across devices.

Your rights and international processing

Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of personal information; restrict or object to processing; opt out of certain advertising disclosures; or withdraw consent. Contact support@th3redstudio.com. We will handle requests under applicable law and will not discriminate against you for exercising protected rights. You may also have the right to complain to a relevant data-protection authority or appeal a request decision by contacting us.

Our providers may process information in countries other than where you live, including the United States. Where legally required, appropriate safeguards must apply to international transfers. We use access controls and other reasonable safeguards, but no online service can guarantee absolute security.

Age requirement and changes

Shaplet is intended for people age 13 and older, and is not directed to children under 13. If you are below the age at which you can legally agree to these Terms or authorize relevant data processing where you live, involve a parent or guardian. Contact us if you believe a child under 13 has provided personal information so we can investigate and take appropriate action.

The effective date and version of this policy are October 14, 2026 (2026-10-14.2). We will make updated policies available in the app and provide additional notice or request a new acknowledgment when appropriate. New optional data uses requiring consent will require that consent separately.