PARALLAX

Privacy Policy

Last updated: 2026-10-19

This policy explains what the PARALLAX app, its online service and this website store, why, for how long, and how you can delete it. PARALLAX is developed by Karen Manasyan (“we”, “us”). If you have a question, write to [email protected].

In short

  • Playing against the AI, on one device with a friend and the tutorial never use the network.
  • The app contains no advertising, analytics, crash-reporting or tracking services, and no third-party code that sends data.
  • Online accounts need no e-mail address and no real name: a guest account is a random id and a display name.
  • We do not sell your data or use it for advertising.
  • You can delete your online account in the app at any time.

Data stored only on your device

  • Settings: language, sound, vibration, display options and player names.
  • Up to two unfinished games and your last 40 finished games, for resuming, statistics, replays and analysis.
  • Your tutorial progress.
  • If you play online: your session token, kept in the Android Keystore or the iOS Keychain.

This data stays on your device. Settings → Delete local data removes saved games, game records and lesson progress. App backups are turned off, so this data is not copied to cloud backups, and uninstalling the app removes it.

Data we process when you play online

The app connects to our server only when you open an online feature. We then process:

  • Your account: a random id, whether it is a guest or a registered account, your display name and when it was created. For registered accounts also your username and a hash of your password (we never store the password itself).
  • Sessions: a hash of each sign-in token and its expiry date.
  • Matches: the two players, the time control, every move with its time, the clocks, the result and timestamps.
  • Ratings: your ranked rating and its history.
  • Private rooms: who opened the room, its invitation code, time control and expiry.
  • Fair-play flags: unusual rated results are recorded for review (the two players, the match and counts).
  • Synced preferences (registered accounts): language, sound, vibration, motion and board display options, so they are the same on every device.
  • Server logs: the request method and path, your IP address and port, the response status and time. We use them to run the service and prevent abuse, and keep them for no longer than 30 days. Passwords, tokens and cookies are never logged.

What other players see

Your display name, your rating in ranked matches and your moves in matches you play together. The public leaderboard shows display names, ratings and numbers of games of ranked players. Looking up a private room shows the display name of the player who opened it.

Why we process it

  • To provide the game, your account, matches, ratings and rooms you ask for (performance of our contract with you).
  • To keep the service secure, fair and free of abuse (our legitimate interest).
  • To keep other players’ match histories and ratings correct after an account is deleted, in anonymised form (our legitimate interest).

Who processes it for us

We do not share your data with anyone for their own purposes. Service providers process it on our behalf and only to run the service: Render (application server), Supabase (database) and Cloudflare (this website and e-mail forwarding). The server and database are located in the European Union (Frankfurt, Germany). Where a provider processes data in another country, it relies on legal safeguards such as the EU Standard Contractual Clauses. The app is distributed through Google Play, whose own privacy policy applies to the store.

How long we keep it

  • Account data and synced preferences: until you delete the account. Guest accounts are kept until they are deleted.
  • Sessions: until you sign out, the token expires (30 days) or the account is deleted.
  • Finished matches and rating history: kept, and anonymised when the account is deleted.
  • Server logs: up to 30 days.

Deleting your account

In the app, open Profile → Online account → Delete online account. Deletion ends your sessions, deletes your settings, rating, username and password hash, replaces your display name with “Deleted player” and closes your open rooms. Finished matches stay only in anonymised form so that opponents’ histories and ratings remain correct. If you cannot use the app, see Delete your account.

Your rights

Depending on where you live, you can ask us for access to your data, a copy of it, its correction or deletion, and you can object to its processing. You can change your display name in the app. Write to [email protected]; we answer within 30 days. You also have the right to complain to your data protection authority.

Children

PARALLAX’s online features are not directed at children under 13, and we do not knowingly collect data from them. If you believe a child has created an account, contact us and we will delete it.

Security

Online traffic is encrypted (TLS). Passwords are hashed with scrypt and a per-password salt, sign-in tokens are stored only as hashes and can be revoked, and every request is validated and rate-limited.

This website

This website uses no cookies, no analytics and no third-party scripts or fonts. If you e-mail us, we use your address and message only to answer you.

Changes

If we change this policy, we publish the new version here and update the date at the top.