Skip to content
INK ORDER Back to game

YOUR DATA

Privacy Policy

Last updated

An account is optional, but guest play is not the same as collecting no data. Here is what stays on your device, what our services process, and how to request access or deletion. We do not sell personal information or use advertising trackers.

On this page

This Privacy Policy explains how Ink Order handles information when you use the website, iPhone or iPad app, account services, and progress synchronization. It applies to the Service described in the Terms of Service.

Ink Order uses device-local saves and secure guest sessions to support play without registration. If you choose an account, we also process the information needed to sign you in and synchronize supported progress and purchases across devices.

The iPhone and iPad app lets you play and make in-app purchases without creating an Ink Order account or providing an email address, password, or profile. Gameplay is saved on your device. Optional sign-in enables cloud progress synchronization.

The website also opens directly into guest play without registration. It keeps a browser-local cache and backs up progress to a randomly identified Supabase session when connected. This session also receives web purchases. Its recovery credentials stay in this browser’s site storage; no email, password, or profile is requested to start playing or open checkout. Stripe may request payment and receipt details to process a purchase.

Website Settings offers optional sign-in to connect the browser save and purchases to an Ink Order account. Clearing site data, using private browsing, or losing guest recovery credentials can remove access to that guest save and its purchases even though server records still exist. Connect an optional account for cross-device recovery, or contact Support before clearing site data if you need purchase assistance.

When you open the app’s Print Shop, we create a randomly identified purchase session through Supabase Auth. Its recovery credentials are stored in the iOS Keychain. We use this session and verified Apple transaction records to deliver purchases, maintain paid hint balances, prevent duplicate credit, and process refunds. It is not a registration form and does not request personal profile information. Service providers may still process the technical security records described below.

If you later choose to sign in, we connect this device’s purchases to that account and import compatible local achievements. Pixel Pass can also be restored through the purchasing Apple Account without Ink Order registration. Device-only progress and consumable hint balances are not guaranteed to survive loss of the device or its recovery credentials; contact Support for purchase assistance.

When you choose to create or use an account, we process:

  • Your email address, a generated account identifier, authentication status, and security metadata needed to sign you in.
  • An optional display name if you choose to provide one.
  • Password-verification data handled by Supabase Auth. Ink Order does not store a readable copy of your password.
  • If you choose Sign in with Apple or Google, that provider processes the sign-in request and supplies the limited account details you authorize, such as an account identifier, email address, and profile name where available.

Synced progress can include started and completed level identifiers, unlocked levels, mastery ratings, hint use and balances, hint-recharge timing, tutorial status, sound and haptic preferences, and a server-projected indicator for permanent expansion access. Limited Stripe or StoreKit identifiers are used to verify, fulfill, adjust, restore, and prevent duplicate consumable or non-consumable purchases.

We use this information to restore your Print Shop, calculate game state, synchronize supported progress and expansion access, prevent duplicate purchases or hint spending, handle eligible refunds, revocations, and disputes, troubleshoot sync, and provide features you request.

The website stores separate guest and optional-account Supabase credentials, player-scoped progress caches, tutorial checkpoints, and pending paid-hint retry receipts in browser storage. These support save recovery and prevent duplicate spending after temporary network loss. Signing out of an optional account removes its browser session and returns to a separate guest save. Clearing site data removes browser credentials and caches; it does not by itself delete server records.

On iPhone, session storage is intended to use the iOS Keychain, while account-scoped progress and preferences use local app storage, including UserDefaults. Availability of protected session storage depends on iOS security services and the installed build. Removing the app or clearing its data removes local copies, but does not by itself delete your cloud account.

Supabase provides authentication and the progress and purchase-ledger database. Resend delivers account email such as confirmations and password resets. Cloudflare and the website-hosting provider deliver and protect the web Service. Stripe processes web checkout when enabled. Apple processes iPhone and iPad in-app purchases when enabled. Apple or Google also processes authentication information when you choose its sign-in option. These providers may process standard technical records such as IP address, browser or device type, request time, response status, and security events to operate, protect, and diagnose their systems.

We use reasonable administrative and technical safeguards, including encrypted connections, intended device-protected session storage on iPhone, access controls, and account-scoped database rules. No internet or storage system can be guaranteed completely secure.

Ink Order does not currently include a third-party advertising SDK or a separate behavioral analytics SDK. We do not sell personal information or use gameplay progress for targeted advertising.

Operational logs from authentication, database, hosting, and app-distribution providers may still be available for security, reliability, and debugging. If analytics or advertising practices materially change, this policy will be updated before those practices are introduced.

Paid hint packs and the optional Pixel Pass are processed only when the Print Shop displays an active checkout option. Stripe Checkout processes enabled web payments, while Apple StoreKit processes enabled iPhone and iPad payments. Ink Order does not receive or store your full payment-card number.

To deliver and protect a purchase, Ink Order receives and stores limited records such as the guest purchase-session or optional account identifier, provider, entitlement, product or price identifier, pack and hint count where applicable, transaction or original-transaction identifier, Checkout Session or PaymentIntent identifier, amount and currency for Stripe, StoreKit environment and app-account token for Apple, signed-record hashes, timestamps, and fulfillment status. Verified webhook or App Store events may also record refund, reversal, revocation, or dispute metadata and the hints or entitlement state adjusted. These records support delivery, duplicate prevention, purchase restoration, accounting, fraud prevention, refunds, tax and legal obligations, and support. Supported cross-device access is available when you choose to connect an account.

Stripe and Apple process payment details and retain their own purchase history under their respective privacy terms. Prices and applicable taxes are displayed by the payment provider before authorization. If checkout is not fully configured, the shop remains disabled rather than sending payment information.

We share information only as needed with providers that operate authentication, database, hosting, distribution, and payment functions; when you direct us to; to protect players and the Service; or when required by law.

Providers process information under their own security and privacy obligations and may operate in countries other than yours. We do not disclose your synced progress publicly to other players.

Guest-session, account, and synced-progress information is kept as reasonably needed to provide, secure, and maintain the Service. Clearing browser data or uninstalling the app does not automatically delete server-side guest sessions or purchase records. Contact Support to request guest-data deletion; we may need to verify ownership. Limited payment-provider transaction evidence may be retained longer when required for fraud prevention, legal compliance, dispute resolution, provider backup cycles, or secure non-consumable restoration.

Use Delete Account in Ink Order Settings to request permanent deletion of your account and synced progress. Active purchase ownership mappings are removed with the account. Minimal immutable provider evidence may remain with the original account link removed where feasible, so duplicate or disputed transactions can be handled and a cryptographically verified current Apple StoreKit non-consumable may be securely reattached to a replacement account. Stripe web entitlement ownership is not automatically reattached after account deletion. The device where you initiate deletion also clears its account-scoped session and cache. An offline device may keep a local copy until it reconnects, signs out, or its site or app data is cleared. If you cannot access Settings, use Ink Order Support.

You may update available profile fields, sign out a device, reset your password, clear local storage, or delete your account through the available account controls. Depending on where you live, you may also have rights to access, correct, delete, restrict, or obtain a copy of personal information.

To exercise a privacy right that is not available in the product, send a privacy request through Ink Order Support. We may need to verify that the request belongs to you before acting on it.

Ink Order is not directed to children under 13, or under the minimum age for online consent where they live. We do not knowingly collect personal information from a child who cannot legally consent without required parental permission. If you believe a child provided information improperly, contact Ink Order Support so it can be reviewed and deleted where appropriate.

We may update this policy as the Service changes. The date at the top identifies the current version, and material changes will be communicated in the Service when reasonably possible.

Direct privacy questions and requests to Ink Order Support or email support@playinkorder.com.