Privacy policy

The Plank Keeper · last updated 4 November 2026

The short version: we collect as little as possible, we don't ask who you are, and we don't sell anything about you.

What stays on your device

Your progress, stars, settings, colours, hints and streaks are saved on your phone. We never see them unless you send a result to the daily leaderboard, or you allow the optional progress backup (both below).

The daily puzzle and leaderboard

To play the daily puzzle, the game contacts our server. The server stores:

• a random player id and a secret token made for your install (not linked to your name, email, phone or Apple account). Both are also kept in your iPhone's Keychain, so a reinstall of the app keeps the same player;
• a randomly generated display name (for example "Brave Walker 4821"), shown to other players on the leaderboard;
• your daily results: the moves you made, your time, and how many hints you used;
• when you started each daily puzzle, so the clock is fair.

Unfinished daily starts are deleted after the day ends. Results stay on the leaderboard. If you delete the app, the Keychain copy normally stays on your iPhone, so after a reinstall you continue as the same player. Results can no longer be linked to you after you use Delete my online data, which also removes the Keychain copy. To have your results removed, use Settings → Account & Privacy → Delete Online Data (see below), or email support@portalship.io and tell us your display name.

Your choices: gameplay statistics, crash reports and progress backup

Three kinds of optional, anonymous data help us improve the game and help you if something goes wrong. You decide about each one, and you can change your mind at any time in Settings → Account & Privacy → Privacy Choices.

• Gameplay statistics. Simple events: that you opened the app, and for each level you play, that you started it, finished it, left it, restarted it, skipped it or used a hint, with the level number, your move count, the time spent, the par and your star rating. They are tied only to the same random player id used for the leaderboard, not to your name, email or device. Event records are deleted after about 13 months.
• Crash reports. If the app crashes or freezes, it sends a report to our crash-reporting service (Sentry) with technical details such as the device model, the iOS version, the app version, and the last few game events. Reports leave out screenshots and personal data, and we use them only to fix bugs. Turning this on or off takes effect the next time you open the app.
• Progress backup. A copy of your progress is kept on our server so that we can restore it if something breaks: which levels you have finished, your stars, your hints, skips and streak freezes, your daily and play streaks, and your Endless results. It is tied only to the same random player id, not to your name, email or device, and only the latest copy is kept (it is replaced each time). It also gives you a short support code (in Settings → Account & Privacy) that you can send to support@portalship.io; with it we can look up your backup, restore what was lost, or give you hints, skips or streak freezes as a goodwill gift. Gifts and restores are free; we never sell anything outside the App Store.

In the European Union, the European Economic Area, the United Kingdom and Switzerland all three are switched off until you choose: the game shows a “Your privacy” screen the first time you open it, with “Accept all” and “Confirm my choices” as equal options. Elsewhere all three are on by default and you can switch them off in Settings → Account & Privacy. The game keeps working exactly the same either way.

Ads

The game shows ads, supplied by Google AdMob, between some levels and when you choose to watch one to earn a hint or skip. Buying “Remove Ads” turns off the ads between levels. The optional videos you choose to watch for a hint or skip stay available, and still show an ad.

• What Google collects. To show and measure ads, Google's advertising software on your device may collect your device's IP address, device and software details, an advertising identifier (only if you allow tracking, see below), and how you interact with ads. This is handled under Google's privacy policy. We do not receive this data and cannot see which ads you were shown; we only see overall ad earnings.
• Your consent. Where the law requires it (the European Union, the European Economic Area, the United Kingdom and Switzerland, among others), Google's consent form appears when you first open the game, before any ad is requested. If you decline, no ads are loaded. You can change your choice at any time in Settings → Account & Privacy → Ad Privacy Choices.
• Apple's tracking prompt. iOS asks whether the game may track you across other companies' apps and websites. If you say no, ads are not personalised using your advertising identifier. The game works exactly the same either way, and you can change your mind in iOS Settings → Privacy & Security → Tracking.

Purchases

The game sells optional items such as hints, skips, streak freezes and Remove ads. Purchases are handled entirely by Apple. We never see your payment details. Apple tells the game whether you own Remove ads so it can switch the between-level ads off, including after reinstalling (Store → Restore purchases).

What we do not do

• We do not ask for your name, email address, contact list, location or photos.
• We do not sell your data.
• We do not track you across other companies' apps or websites ourselves.

Children

The game is suitable for all ages but is not directed at children, and we do not knowingly collect personal information from children. If you believe a child has sent us personal information, contact us and we will delete it.

Deleting your online data

In the game, open Settings → Account & Privacy and tap Delete Online Data (the button asks you to tap again to confirm). This removes from our server your player id, display name, leaderboard results, gameplay statistics events, progress backup and any waiting gifts, removes the copy of your player id kept in your iPhone's Keychain, and turns progress backup off on your phone. Your progress on the phone itself is kept; delete the app to remove that too. Data is deleted from our live servers immediately, and from our backups within 60 days. To make sure a restored backup never brings your data back, we keep a one-way fingerprint of your deleted id (it cannot be turned back into the id or into anything about you) and use it to delete the data again. Overall daily play counts (numbers with no player id) are kept.

Crash reports sent to Sentry carry your support code only while crash reports and progress backup are both on. Sentry keeps reports for a limited time and we delete them on request; email us with your support code.

Your choices and rights

You can stop sending anything by not playing the daily puzzle, and you can delete the app at any time. Depending on where you live, you may have the right to ask what we hold about you, to correct it, or to have it deleted. You can delete your online data yourself as described above, or email us and we will help.

Changes

If this policy changes, we will update the date at the top and, for important changes, tell you in the app.

Contact

Portalship · support@portalship.io