Boneset for Android — Privacy Policy

Last updated: 29 September 2026

Boneset is a domino puzzle for Android phones and tablets. It has no accounts, no chat, no sign-up form, no advertising and no in-app purchases, so it never learns your name, e-mail or anything you would call an identity. What it does collect is a random player id plus a record of how the puzzles are going — enough to tell a board that is too hard from a board that is broken.

This page covers the Google Play version of the game. The App Store version has its own page.

Who to write to

Questions, access requests, deletion requests — one address: bonesetpuzzle@gmail.com.

What stays on your device

Your progress through the campaign and the log of boards you have solved.
Settings: language, sound and vibration.
An unfinished board, so you can come back to it.
A random player id (a UUID, generated on your device the first time you play). It is not derived from anything about you or your hardware.

All of it lives in the app's own storage on the device. If Android's app backup is on, that storage — and none of the app's other files — goes into your device backup in your Google account, under Google's terms; the game itself never sends it there. Android makes the backup about once a day and restores it when the game is installed again, so a reinstall brings back your progress and player id as of the last backup.

What leaves your device

Gameplay analytics, to PostHog on EU servers: named in-game events — the app opening and the session ending, a level started, solved or abandoned, the first move, hints and auto-fill, mode switches, pauses, board sharing, language, sound and vibration changes, generator use, and errors. Each event carries the random player id, the game version and platform, your device type and Android version, and the IP address of the request, from which PostHog derives an approximate country and city.
Leaderboard entries, to a Supabase database: when you solve a board, its completion time, the player id and the platform. The game can ask only for its own place in the table — it cannot read anyone else's rows.
The end-of-game survey, if you fill it in: your rating and whatever you type in the comment. It is a free-text field, so please don't put personal details in it.

What the game never does

No names, e-mail addresses, phone numbers, contacts or payment details.
Asks for no permissions beyond internet access and the vibration motor for haptic feedback: no location, contacts, photos, camera, microphone or notifications.
No advertising, no Android advertising ID and no tracking across other apps or websites.
No in-app purchases and no subscriptions.
Your data is never sold or handed to anyone beyond the services listed below.

Why we collect it

Legitimate interest in making the game work: seeing where players get stuck, which boards go unsolved, and what crashes. The data is pseudonymous — it hangs on a random id, and we have no way to walk back from that id to a person.

How long it is kept

Analytics events are kept while they still say something about how the game plays, and are dropped when they stop being useful. A leaderboard row lives as long as that board's table does. Both go within 30 days if you ask — see the next section.

Getting your data out or deleted

Uninstalling the app wipes what it holds on the device, but with app backup on, installing it again restores the last backup, the same id included. To start over with a brand-new id, clear the game's storage instead: Settings → Apps → Boneset → Storage → Clear storage. For the records already sent, there is no account to delete — everything is keyed by the random player id, so the request is one e-mail:

Open this page from the game — Menu → Privacy & data — and your id appears below. Copy it; without the id the records cannot be found.
Write to bonesetpuzzle@gmail.com with the id and the word “delete”. Nothing else is needed — not your name, not the e-mail you write from.
Within 30 days you get a reply confirming the deletion. The same address answers a request for a copy of what is held under your id.

What goes: every analytics event, error report and survey answer tied to the id in PostHog, and every leaderboard row for it in Supabase — all of it, with nothing kept back. What stays: nothing that references the id. Totals already folded into aggregate counts (how many players solved a board, how often a hint is used) carry no id and cannot be traced back to you. The game keeps running on the device with the same id until you clear its storage; play on, and new records start accumulating under that id again.

No id on this visit — this page was opened outside the game.

Children

The game is suitable for all ages and collects no personal information from anyone, children included.

Who processes the data

PostHog — product analytics, EU region.
Supabase — the leaderboard database.
Google — Google Play delivers the app and keeps the device backup; what Google records when you install, update or review it is covered by Google's own policy, and none of it reaches us.

Changes

If this policy changes, the date at the top changes with it. Nothing here is retroactive: data already collected keeps the terms it was collected under.