Privacy policy

This policy explains which data is processed when you use the NeuroQuest app for iOS and Android (version 1.0 and later), the browser demo and this website.

At a glance

• NeuroQuest works without an account and without an Internet connection.
• Without your consent, the app makes no network requests: no data leaves your device.
• The only, optional exception: if you join the global leaderboard, your nickname, your hero, your points and a random ID are sent to our server (§3). You can leave it and erase everything at any time.
• Your progress is saved only on your device.
• No ads, no trackers, no in-app purchases, no third-party SDK.
• You can export or erase your data at any time from Settings → Data.

1. Who we are

• Publisher and data controller: Upsilon Development (SASU, RCS Saint-Brieuc 922 494 646), 4, Le Cosquer, 22170 Boqueho, France.
• Contact: yeun.lefloch@gmail.com
• No Data Protection Officer (DPO) has been appointed: write to the address above for any question about your data.

2. Game data, stored on your device

To work, NeuroQuest keeps a save file on your device:

• your progress (worlds, levels, stars, chests, daily puzzle, daily streak, achievements);
• your in-game resources (lives, hints, coins, level and experience);
• your hero and the name you give it, if you enter one (a nickname is enough);
• gameplay statistics (play time, puzzles won);
• your preferences (language, sound, accessibility).

On first launch, the game reads the device language to display in French or English. This setting stays local and can be changed in Settings.

The game also keeps a local technical log (error messages, no personal data), used to diagnose a bug if you choose to send it to us yourself.

Where? In the app’s private storage, isolated from other apps by iOS or Android. In the web demo, the save is kept in the browser storage (IndexedDB) of the device you use.

This data is never sent to us, or to anyone else. We have no access to it. The only exception: if you join the global leaderboard, your nickname, your hero and your points (§3).

3. The global leaderboard (optional)

From version 1.3, NeuroQuest may offer a global leaderboard shared by iPhone and Android players (four views: Today, This week, This month and All time). It is off by default: nothing is sent until you pick a nickname and agree to appear on the leaderboard. The web demo does not offer it.

Data sent if you join:

• your nickname, chosen by you and visible to every player on the leaderboard (do not use your real name);
• your points (total, and the points earned today, this week and this month), computed from your progress;
• your equipped hero in the game (its ID, for example "mage"), shown next to your nickname: a game item that says nothing about you, updated when you change heroes;
• a random installation ID and a secret key, created by the game when you join. They are not linked to your identity, your device or any advertising identifier. The server only keeps a fingerprint (hash) of the key; it also assigns a random public ID, used to report or hide a player;
• if you report a nickname: the player concerned, the reported nickname and the reason you picked (optional).

Never collected: real name, email, location, contacts, advertising identifier. No advertising profile, no tracking across apps.

IP address: like any online service, our server sees the IP address of the connection. It is never stored in clear: a salted fingerprint, renewed every day, is only used to limit abuse (number of requests) and is deleted within 2 days. No request log is kept.

Why and on what basis: to display the leaderboard (legal basis: your consent, which you can withdraw at any time); to moderate nicknames and limit cheating (legal basis: our legitimate interest in offering a fair and respectful leaderboard).

Moderation: nicknames are filtered (insults, hateful or sexual content, reserved names). Every player can report a nickname or hide a player (on their own device only). A nickname reported by several players is hidden until it is reviewed; we may remove a nickname or exclude a player who does not follow the terms of use. To report a problem: the "Report" button in the leaderboard, or an email to yeun.lefloch@gmail.com (include the nickname).

Hosting: the leaderboard server is hosted by Cloudflare, Inc. (Cloudflare Workers and D1 database), our processor. Transfers to the United States may occur, under the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses. Exchanges are encrypted (HTTPS).

Retention: as long as you take part. Your data is deleted as soon as you leave the leaderboard or erase your data, and automatically after 12 months without connecting to the leaderboard. Points per period (day, week, month) are only kept for the current and the previous period. Reports are kept for 6 months at most (longer only while a review is in progress).

Leave and erase: Settings → Data → Leave the leaderboard and erase my data (or Erase all my data). The deletion request is sent immediately, or as soon as you are back online. You can also write to us with your nickname.

4. No statistics or automatic reports

The current version of NeuroQuest contains no audience measurement, usage statistics or crash reporting tool. Apart from the optional leaderboard (§3), no module sends data to our servers or to third parties.

If we ever add such a feature, it will be optional, off by default and subject to your consent. We will update the app and this policy before it goes live.

5. What NeuroQuest does not do

• No account or password, no social network login (the optional leaderboard only uses a nickname and a random ID).
• No advertising, no advertising identifier (IDFA / Android advertising ID), no tracking across apps or websites.
• No in-app purchases: in-game coins are earned by playing only and cannot be bought.
• No access to your location, contacts, photos, camera or microphone.
• No server-sent notifications. If the game ever offers reminders, they will be scheduled locally on your device, with your permission.

6. Actions you trigger yourself

• Send feedback / report a bug: the game prepares an email in your mail app. Nothing is sent unless you send it yourself. If you write to us, we receive your email address and the content of your message (see §8).
• Share: the text to share is copied to the clipboard; you choose where to paste it.
• Export my data: a copy of your save is placed in the clipboard, without any upload.
• Rate the game: opens the App Store or Google Play rating page or window, handled by Apple or Google under their own rules.
• Links (privacy, terms): open in your browser.

7. Apple and Google

NeuroQuest is distributed through the App Store (Apple) and Google Play (Google). Downloads and updates are governed by their own privacy policies. Depending on your system settings, these platforms may provide us with aggregated, anonymous statistics (number of downloads, crash rates); they do not allow us to identify you.

8. If you contact us

When you write to us (support, bug report, exercising your rights), we use your email address and message only to reply to you. Legal basis: our legitimate interest in handling your request (or compliance with a legal obligation when you exercise your rights). These exchanges are kept as long as needed to follow up on your request, then at most 3 years after the last exchange. They are never used for marketing or shared with third parties. They are hosted by our email provider (Google, Gmail service).

9. The website and web demo

This website and the playable demo are hosted by GitLab Pages (GitLab Inc.). Like any host, GitLab may record technical connection data (IP address, browser, date and time) in its logs for the security of the service; we do not use these logs.

The website sets no cookies and uses no audience measurement tool or tracker. To display its typefaces (Fredoka and Nunito), it loads them from Google Fonts: your browser then contacts Google’s servers, which receive your IP address.

The web demo saves your progress in your browser storage; clearing this site’s data in your browser deletes that progress.

These providers may process data in the United States, under the safeguards provided by the GDPR (EU–US Data Privacy Framework or the European Commission’s standard contractual clauses).

10. Purposes and legal bases

Your data is never sold, rented or used for advertising.

11. Retention periods

• Game data: on your device, until you erase it or uninstall the app.
• Global leaderboard: as long as you take part; deleted when you leave it or erase your data, and after 12 months without connecting to the leaderboard. Reports: 6 months at most. Anti-abuse IP fingerprints: 2 days at most (see §3).
• Emails: see §8.

12. Your rights

Under the GDPR and the French Data Protection Act, you have the rights of access, rectification, erasure, restriction, objection and portability, and the right to give instructions about your data after your death.

Because your game data stays on your device, you exercise most of these rights directly in the app:

• Access and portability: Settings → Data → Export my data (JSON) copies your entire save to the clipboard, including your leaderboard data (nickname, points sent, IDs, without the secret key).
• Erasure: Settings → Data → Erase all my data (double confirmation). This action is final. The local technical log, which contains no personal data, is kept; uninstalling the app deletes everything. If you take part in the leaderboard, this action also requests the deletion of your data on our server.
• Withdrawing consent (leaderboard): Settings → Data → Leave the leaderboard and erase my data. Rectification: change your nickname from the leaderboard or the hero screen.

For any other request, write to yeun.lefloch@gmail.com. We reply within one month. You may also lodge a complaint with the French data protection authority, the CNIL (https://www.cnil.fr, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France), or with the authority of your country.

California residents (CCPA/CPRA): we do not sell or share your personal information as defined by that law.

13. Children

NeuroQuest is a puzzle game for a general audience; it is not specifically designed for children. Without the optional leaderboard, it collects no personal data, whatever the player’s age; it contains no ads and no in-app purchases and never asks for personal information. The leaderboard only asks for a nickname: we recommend never using one’s real name. If you believe a child has sent us data (for example by email), contact us and we will delete it.

14. Security

Your game data is protected by the app isolation of iOS and Android; the save file includes an integrity check. The website and the leaderboard server are served over HTTPS only; the leaderboard secret key is only stored on the server as a fingerprint.

15. Changes

We may update this policy, in particular before adding a feature that would process new data. The date at the top shows the version in force; in case of a significant change, we will let you know in the app or on this website.