Boneset for iOS — Privacy Policy
Last updated: 29 September 2026
Boneset is a domino puzzle for iPhone and iPad. It has no accounts, no chat, no sign-up form, no advertising and no in-app purchases, so it never learns your name, e-mail or anything you would call an identity. What it does collect is a random player id plus a record of how the puzzles are going — enough to tell a board that is too hard from a board that is broken.
This page covers the App Store version of the game. The Google Play version has its own page.
Who to write to
Questions, access requests, deletion requests — one address: bonesetpuzzle@gmail.com.
What stays on your device
- Your progress through the campaign and the log of boards you have solved.
- Settings: language, sound and vibration.
- An unfinished board, so you can come back to it.
- A random player id (a UUID, generated on your device the first time you play). It is not derived from anything about you or your hardware.
All of it lives in the app's own storage on the device and is included in your device backups like any other app data.
The game also keeps a copy of all of it except the unfinished board in iCloud key-value storage: in your own iCloud account if you are signed in to iCloud, otherwise in the system's storage on this device. That copy is kept by Apple, under Apple's terms, and we can't see or reach it. It is what brings your progress and player id back when you reinstall the game — and, with iCloud, when you install it on another iPhone or iPad signed in to the same Apple Account.
What leaves your device
- Gameplay analytics, to PostHog on EU servers: named in-game events — the app opening and the session ending, a level started, solved or abandoned, the first move, hints and auto-fill, mode switches, pauses, board sharing, language, sound and vibration changes, generator use, and errors. Each event carries the random player id, the game version and platform, your device type and iOS version, and the IP address of the request, from which PostHog derives an approximate country and city.
- Leaderboard entries, to a Supabase database: when you solve a board, its completion time, the player id and the platform. The game can ask only for its own place in the table — it cannot read anyone else's rows.
- The end-of-game survey, if you fill it in: your rating and whatever you type in the comment. It is a free-text field, so please don't put personal details in it.
What the game never does
- No names, e-mail addresses, phone numbers, contacts or payment details.
- Never asks for your location, contacts, photos, camera, microphone or notifications.
- No advertising, no advertising identifier (IDFA) and no tracking across other apps or websites — the App Tracking Transparency prompt never appears because there is nothing to ask for.
- No in-app purchases and no subscriptions.
- Your data is never sold or handed to anyone beyond the services listed below.
Why we collect it
Legitimate interest in making the game work: seeing where players get stuck, which boards go unsolved, and what crashes. The data is pseudonymous — it hangs on a random id, and we have no way to walk back from that id to a person.
How long it is kept
Analytics events are kept while they still say something about how the game plays, and are dropped when they stop being useful. A leaderboard row lives as long as that board's table does. Both go sooner if you ask.
Getting your data out or deleted
Deleting the app removes its own storage, but not that key-value copy: installing the game again picks up where you left off, with the same player id.
For the records already sent, write to bonesetpuzzle@gmail.com. Everything is keyed by the random player id, so include it, or the records cannot be found. Open this page from the game — Menu → Privacy & data — and your id appears right here:
No id on this visit — this page was opened outside the game.
Children
The game is suitable for all ages and collects no personal information from anyone, children included.
Who processes the data
- PostHog — product analytics, EU region.
- Supabase — the leaderboard database.
- Apple — the App Store and TestFlight deliver the app, and your iCloud account keeps the copy of your progress; what Apple records when you download, update or sync it is covered by Apple's own policy, and none of it reaches us.
Changes
If this policy changes, the date at the top changes with it. Nothing here is retroactive: data already collected keeps the terms it was collected under.