What Tenfall knows about you.
Tenfall is a puzzle game. It has no accounts, no email sign-up, no advertising and no tracking. The short version: we keep what is needed to run a shared leaderboard for a game everyone plays at once, and nothing else.
What we collect
- Anonymous player idWhen you first open the app it asks our server for a random player id and a secret token. The token is stored in your device's Keychain; the server keeps only a one-way hash of it. It is not linked to your name, Apple ID, email or phone number — we never ask for any of those.
- UsernameOptional. If you claim one it is shown publicly on leaderboards and your profile. Usernames are filtered for offensive content.
- CountryThe two-letter region from your device's locale setting (for example GB), sent once when your id is created. It is shown publicly as a flag or code next to your scores. It is not your location — we never use GPS or IP geolocation.
- Move logs and scoresEvery run you submit is the list of swaps you made (cell numbers) plus the score. The server replays the moves to verify the score; verified scores, ranks and percentiles are public on leaderboards, and other players may watch a replay of your run. Rejected runs are kept for anti-cheat analysis.
- Profile choicesYour chosen profile icon and up to two featured badges, shown publicly.
- Push tokenOnly if you turn on notifications: the APNs device token Apple issues for the app, plus your notification preferences, so the server can tell you the moment a block lands. Turn notifications off in the app or in iOS Settings and the token stops being used.
- Server logsOrdinary web-server logs (IP address, request path, time) kept briefly for security and rate-limiting.
What we do not do
No advertising, no ad SDKs, no analytics SDKs, no cross-app tracking, no fingerprinting, no selling or sharing of data with third parties for their own purposes. No accounts, no email, no chat, no user-to-user messaging. The app's privacy manifest declares no tracking domains.
Boards are generated from public Bitcoin block hashes. The app reads the current block from public APIs (mempool.space, blockstream.info) — those requests contain no information about you beyond what any web request carries. Tenfall involves no cryptocurrency, wallets, stakes or payouts.
Where it lives and how long
Data is stored on a single server operated by Bossy Games. Move logs, scores and badges are kept for as long as the leaderboards exist, because a replayable, verifiable history is the point of the game. Server logs are rotated within weeks. Push tokens are kept until you disable notifications or ask us to remove them.
Delete my data
Because there is no account, we cannot tie a request to you automatically. Email us your username (or, if you have none, a score and the block you posted it on so we can find the record) at hello@bossygames.co.uk from any address. We will delete the player record, its runs, badges and push token, and confirm by reply. Deleting the app from your phone removes the token from your device, which orphans the record on our side; email us if you also want it gone.
Children
Tenfall has no accounts, no chat and collects no contact details. Usernames are filtered. The country shown on boards comes from the device setting, not from the child. We do not knowingly collect personal information from children; if you believe a child's data has reached us, email the address above and we will remove it.
Your rights
If you are in the UK or EU you have the right to access, correct or erase the data above, and to complain to the ICO. Write to the address below; we answer as fast as a one-person studio can.
Contact
Bossy Games, United Kingdom · hello@bossygames.co.uk
Changes to this policy will be posted on this page with a new effective date.