Alldle

Legal

Privacy

This page says what Alldle keeps, why, and how to make it go away. It covers both the app and this website.

Alldle has not been released yet. This is a preview of the pages that will ship with it, describing the app as it is built today. Both pages will be revised, and will name a contact address, before anyone can install the app.

Who holds it

Alldle is published by Mordepaiser, and whatever the app and this site keep about you is held there. Nobody else runs it and nobody else is sold it.

Everything below can be done from inside the app without asking anyone: see what is stored, take a copy of it, and delete the account and with it the lot. There is no public address to write to yet, and this page will name one before Alldle is released.

This website keeps nothing about you

There are no cookies, no analytics, no tracking pixels and no advertising on this site. Every file it loads — the stylesheet, the typeface, the pictures — is served from this address, so visiting a page does not tell anyone else that you did.

The web server keeps ordinary operational logs: the requesting address, the path, the time and the response status. Query strings are never logged, because links sent by email can carry one-time tokens.

Playing without an account

The app lets you start playing immediately, as a guest. That creates an account with no address and no name attached, identified by a token kept in your device's secure storage. Alldle does not read a device identifier, an advertising identifier, your contacts or your location.

A guest's progress lives on the server, so it survives reinstalling — but the only proof of who you are is that token. Lose the device before you turn the guest into a full account and the progress is not recoverable, by you or by us. A guest cannot publish a profile.

If you make an account

An account is an email address and a password. The password is stored only as a slow one-way hash, never in a form anyone can read back, and two-factor authentication can be turned on.

The address is used for exactly four things:

  • confirming that the address is yours when you register
  • resetting a forgotten password
  • telling you a data export is ready
  • confirming that an account has been deleted

There is no newsletter and no marketing mail, and the messages Alldle sends carry no tracking pixel and no per-recipient link decoration.

What playing records

For each game and each day: whether you started it, the guesses you made, whether you finished, the coins and experience it earned, your current and longest streak, your favourites and the achievements you have unlocked. This is the score screen, kept so it is still there tomorrow.

The answers themselves stay on the server until your round is over, which is also why guesses are checked there rather than in the app.

What other people can see

Nothing, unless you ask for it. Player profiles are private by default — including every account that existed before profiles were built — and a guest cannot make one public at all.

Turn a profile on and it is published under a handle, never under your email address, together with an optional display name and your play statistics. Turn it off and it stops being served; anything already copied while it was public is, of course, out of our hands.

What is kept to keep the account safe

Sign-in sessions, counters that slow down repeated failed sign-in attempts from the same network address, and a record of account-level events such as a sign-in, a password change or a deletion request. This is what makes somebody else getting into your account noticeable, and it is kept only for as long as it does that job.

Who else it is given to

Nobody. Alldle carries no advertising network, no analytics vendor and no third-party software development kit in the app. The one external service involved is the one that delivers email; it sees the address the message goes to and the message itself.

Some of the artwork in the catalogue is served from a rights holder's own network — where that is true, the game's page says so, and opening that game tells them you loaded a picture, the same as any web page would.

Getting a copy, and getting rid of it

You can ask for an export — a machine-readable copy of your account and your play history — and you can ask for the account to be deleted. Both are confirmed by email, and deletion removes the account together with the play history attached to it.

Children

Alldle is meant for people aged 13 and over, and is not directed at children under that age.

Changes, and who to ask

This page was last revised on . It will be revised again before release, by Mordepaiser.

There is no public contact address yet — the app is not released and this site is reachable only inside the project's own network. One will be named here before anyone can install Alldle.