Privacy policy
Last updated: October 24, 2026 · Publisher: Mesa and Moon Studios (Aaron Winchester)
Cipher Vault is a cipher-puzzle game. You can play as a guest with no account. An optional account (email, Google on Android/web, or Apple on iOS) saves progress in the cloud and lets you pick a leaderboard username.
What we collect
- Guest id — a random id on your device/browser so progress can sync before you sign in.
- Account — email (and sign-in provider) via Google Firebase Authentication when you create an account. We do not store your Apple full name.
- Gameplay — progress, points, badges, streaks, optional public username, and (if you use the Android shop) purchase records needed to restore buyables and prevent fraud.
- Promo / welcome grants — hashed device or guest markers so bonuses cannot be farmed by re-registering.
- Server logs — standard HTTPS access logs for security. No ads. We do not sell your data.
What we do not collect
No advertising ID for tracking, no ad analytics SDKs, no contacts, location, photos, or health data. Optional daily streak reminders (iOS today; Android in progress) are scheduled only on your device.
Emails from us
If you have an account, we may occasionally email you Cipher Vault product updates (new games, features, events and important service news) from news@mesaandmoon.com. We never sell or share your email. Every update has an unsubscribe link that works in one click and takes effect right away; you can also email projects@mesaandmoon.com with “unsubscribe”. Unsubscribing does not affect account emails you ask for, like password resets. Pure promotional email is only sent if you separately opt in. Mesa and Moon Studios LLC · mesaandmoon.com · projects@mesaandmoon.com.
Deleting your account
Signed-in players can choose Delete account in the game (next to Sign out) or email us. What happens next depends on whether you ever paid for points or donated (“Support the Vault”).
If you never bought points and never donated
- Day 0 — We mark the account for deletion (soft-delete). Your username leaves the leaderboard right away. Your email is cleared from our active save row. Cloud progress is kept in an inactive archive so we can restore it if you change your mind.
- Days 1–60 (restore window) — If you deleted your account yourself, sign in again with the same account, or email projects@mesaandmoon.com, and we cancel the deletion and restore your cloud save.
- After day 60 — We permanently delete personal data from the cloud (hard delete). This cannot be undone. Hashed promo anti-abuse markers may remain so welcome bonuses cannot be re-farmed.
If you bought points or donated
App Store and Google Play require a way to delete your account and personal data. For paying players and donors we remove personal data right away (email, username, cloud progress tied to you, Firebase sign-in). We may keep a hashed purchase / supporter record with no email or username so we can honor refunds, prevent fraud, and avoid re-granting one-time bonuses. That retention record is not used for marketing.
Third parties
Sign-in uses Google Firebase Authentication. Android purchases (if any) go through Google Play Billing.
Children
General-audience puzzle game. We do not knowingly collect personal information from children under 13 for marketing. Accounts are optional.
Inactive free accounts
Starting December 1, 2026, a free account (one that never bought points, donated, or made any purchase) with no play or cloud save for 30 days or more is removed automatically by us: the username leaves the leaderboard, the email is cleared, and progress is archived. Because we removed it (not you), you get a longer window: sign in or email us within 90 days of removal and the account and progress come right back. After 90 days it is permanently deleted. Paid accounts, donor/supporter accounts, OG accounts and guest play are never removed for inactivity. Questions: projects@mesaandmoon.com.
Contact
Mesa and Moon Studios LLC · mesaandmoon.com · projects@mesaandmoon.com · Support
Política de privacidad (resumen)
Cipher Vault es un juego de acertijos. Puedes jugar como invitado. Una cuenta opcional guarda el progreso y un nombre en la clasificación.
Borrar cuenta (sin compras ni donaciones): al pedirlo, la cuenta pasa a archivo inactivo. Si inicias sesión (o nos escribes) dentro de 60 días, restauramos la cuenta; después de 60 días se elimina de forma permanente. Cuentas gratuitas inactivas: desde el 1 de diciembre de 2026, una cuenta gratuita sin jugar durante 30 días o más se retira automáticamente; como la retiramos nosotros, puedes restaurarla iniciando sesión dentro de 90 días. Las cuentas con compras o donaciones, las OG y el modo invitado nunca se borran por inactividad. Si compraste puntos o donaste: borramos tus datos personales de inmediato y podemos conservar solo registros de compra/antifraude sin nombre ni correo.
Contacto: projects@mesaandmoon.com · /support