Privacy Policy

Last Updated: October 27, 2026 Version: 1.14

This Privacy Policy explains how Brainstretch handles personal information when you use the public website, guest demos, and account-backed puzzle play.

Delete Your Brainstretch Account

You can request deletion on the website even if you have uninstalled the Android app:

Sign in at Brainstretch Settings.
Open the Privacy section and type your account email to confirm.
Select Delete my account, then confirm Delete your account in the dialog.

If you cannot sign in, email privacy@brainstretch.ing to request deletion of your Brainstretch account. Include the email address associated with the account; do not send your password. We may need to verify your identity before completing the request. We aim to respond within 30 days.

Account deletion ends your sign-in sessions and cannot be undone. The Retention section below explains which account data is deleted or anonymized, which records may be retained, and the applicable retention periods. Uninstalling the app alone does not delete your account.

Who We Are

Eyal Lapid is the data controller responsible for Brainstretch.

Operator: Eyal Lapid
Country: Israel
Privacy contact: privacy@brainstretch.ing
Security contact: security@brainstretch.ing

Information We Process

Public visitors and guest demos

When you browse public pages or play a guest demo, Brainstretch processes basic request and security data needed to deliver the service, protect the site, and troubleshoot reliability. This may include IP address, request timestamps, browser and device information, visited pages, referring URLs, and server logs.

Guest play does not create an account and is not saved as durable account progress. While you play as a guest, the board itself is held only in server memory for at most a few hours, identified by a random token in the page address that is linked to no person and discarded when the board expires.

When you open a game’s play or quest page without signing in, Brainstretch also puts a separate random guest token in your browser’s session cookie. It holds no name, email address, or account ID. Brainstretch uses it only to hold your current visit in server memory, under a hash of the guest token, not the token itself: for each game you finish as a guest during the visit, the game, the puzzle and the settings it was dealt with, how it ended, when it started and finished and on which local day, how long you played, and how many moves and hints you used; for each first-chapter quest level you win, the level and its version, your best number of stars, and when they last changed; and whether you chose Not now on the offer to sign up. The visit is never written to our database. Apart from the ordinary request and security data described above and the visitor analytics described below, nothing that records a guest’s play is stored.

A visit is dropped from server memory 30 minutes after your last play, and never kept more than 4 hours after it began; a restart of our servers also drops it. If you sign up or sign in while the visit is held, on the same browser or through a sign-in link you asked for during the visit, its games and quest stars are added to the profile you are signed in with, as if you had played them signed in (for example, toward that profile’s streak and XP), and are then dropped from the visit. If you do not, nothing from the visit is kept.

When you ask for a sign-in link by email while your visit holds games or quest stars, the link also carries a random code for the visit, so the visit can be added even if you open the link in another browser, such as the one your email app opens. The code is held only in server memory with the visit, works once, and works only for the account the link signs in to. When you sign in through it, your session cookie holds the visit’s key (the hash of its guest token, not the token itself) until you sign out, so the visit can be added to the profile you play as. If the visit is no longer held when you open the link, Brainstretch tells you that its games were not saved, and nothing is added.

If you sign in from a guest board, that board is saved to your account.

Brainstretch also uses first-party, privacy-friendly visitor analytics, such as self-hosted Umami, on public pages, guest demos, and the pages you use while signed in (see Account-backed play below). Visitor analytics may process page URLs, referrers, approximate region or country derived from request data, browser, operating system, device type, visit timestamps, and basic event counts. We do not use visitor analytics for cross-site tracking, third-party advertising, or selling personal information.

Self-hosted Umami is separate from the optional Google Ads feature described below. It is not Google Analytics.

Account-backed play

If you create an account, Brainstretch may store:

account identifiers such as your email address and, if you sign in with Google, the Google account identifier and the email address Google reported when you linked it;
profile names and profile preferences;
each profile’s time zone, which by default follows the time zone your browser reports when you open a page and which you can instead choose in Settings, whether it follows your device or was chosen, and the date it was last changed (it can change at most once a day);
each profile’s daily streak: the local days it was played, covered by a streak freeze, earned back, or marked away, with the game that made a played or earned-back day count; its current and longest length; the streak freezes it holds; the window for earning back a streak that ended; and any away period you set;
each profile’s XP records: one entry for each amount of XP earned, with its reason (such as a finished game, a quest level’s stars, a daily task, or a streak milestone), the game, puzzle, and settings it was earned on, the local day and week, and, for a race, the other player’s account, used to limit XP from repeated games against one opponent;
each profile’s daily tasks: each local day’s three tasks, their settings, target and progress, when each was drawn, started, and finished, and whether one was swapped; and the awards it earned, such as the monthly daily-tasks award, with when each was earned and the game that earned it;
saved progress, game history, race or challenge state, scores, and gameplay events;
display preferences and game settings;
structured in-product feedback, including the selected reason, an optional comment, and limited technical and game-state details;
support, privacy, security, or account-related communications;
security logs needed to protect accounts and the service, including changes to your linked sign-in accounts and the browser and IP address used when you link a Google account or sign up with one;
if you arrived through one of our advertisements, the campaign details that advertisement carried in the web address — such as the campaign, ad group, advertisement, keyword, match type, network, and device class. These describe the advertisement, not you. We do not store the per-click identifier Google adds to the address, and none of this is sent to Google or any other third party.

When you are signed in, the self-hosted visitor analytics described above also receive gameplay and progress events from the pages you use, including game starts and finishes (the game, the settings it was played with, and how it ended, or that the board was left early), quest levels started and completed, and changes to your streak, XP, daily tasks, and awards (for example, a streak extended, with its length given only as a range such as 7 to 29 days; a streak milestone; an XP limit reached; a daily task done or swapped; an away period set; or an award earned). An event may say whether the player was signed in and whether it came from the website or the Android app, but carries no account or profile identifier, name, email address, profile handle, or play or match ID. Umami may group the events of one visit together, but they are not linked to your account or profile, and we use them only as counts across players.

The screens shown after a solo game ends also send four of these visitor-analytics events, for signed-in players and guests’ finishes alike except where noted: finish_step_shown, each time one of those screens is shown, naming which one (the board, a celebration, your streak, your progress, or the result card), its celebration size, your Celebrations setting, how the game ended, and the game; finish_skipped, when Skip or Escape takes you straight to the result card, naming the screen you skipped from and which of the two you used; and finish_left, sent by your browser when you leave these screens, naming the one you left from, what you did next, and how long you had spent there, given only as a range. celebrations_set is sent only when a signed-in player changes the Celebrations setting in Settings, naming the new setting; guests have no Celebrations setting to change. None of these four events carries an account or profile identifier, name, email address, profile handle, or play or match ID.

Brainstretch also derives internal product analytics from account and gameplay records, such as active-user counts, signup counts, plays by game or state, per-game completion and win rates, race activity, and entitlement summaries. These analytics are used in aggregate for operations and product quality; they are not used for third-party advertising.

Payments

Brainstretch does not currently sell paid subscriptions, premium packs, or in-app purchases. If paid features launch, we may process billing metadata through a payment provider or app store. We do not plan to store full payment card details ourselves.

How We Use Information

We use information to:

operate Brainstretch and deliver public pages, guest demos, and account-backed play;
authenticate accounts and protect sign-in sessions;
save progress, profiles, preferences, races, history, and game state;
work out each profile’s local day from its time zone, so daily progress, such as a daily streak, counts by your own midnight, and so anything we send you can arrive at a reasonable local time;
keep each profile’s streak, XP, daily tasks, and awards under rules that limit abuse: a solo game counts only above a minimum amount of play, a board pays its full XP only once, and XP is reduced or capped after many games of one kind in a day, many games against bots, or repeated races against one opponent;
set each game setting’s expected solve time: each night, Brainstretch takes each account’s own median solve time over the last 90 days and stores only the median across players, with how many solves and accounts it came from, for settings with at least 20 solves from at least 5 accounts. This figure is aggregated across players, names no player, and is used to set XP and the minimum amount of play;
show a profile’s current streak on its home page, its result cards, the profile picker, and its public profile page, unless you turn off Show my streak in Settings; a private profile’s page is shown only to you;
prevent abuse, cheating, automated misuse, and service disruption;
debug errors, monitor reliability, and keep the service secure;
investigate correctness, usability, and reliability reports and improve the service;
measure how public pages, guest demos, and signed-in play are used with privacy-friendly visitor analytics, including counts of gameplay and progress events that carry no account or profile identifier;
understand internal aggregate product analytics and improve game quality;
attribute two consented website milestones to Google Ads campaigns and measure campaign performance;
respond to support, privacy, security, and legal requests.

Legal bases

Where GDPR-style legal bases apply, we process personal information based on:

Contract: to provide account-backed play, saved progress, profiles, and requested features;
Legitimate interests: to secure the service, prevent abuse, improve reliability, measure privacy-friendly visitor analytics on public pages, guest demos, and signed-in play (whose gameplay and progress events carry no account or profile identifier), understand internal aggregate product analytics, and hold a guest’s finished games and first-chapter quest stars for the visit, so a guest who signs up or signs in during it can have them added to their profile;
Consent: for optional Google Ads website campaign measurement and where consent is otherwise required for optional features or storage; you may withdraw that consent for future measurement in Privacy settings;
Legal obligations: to comply with applicable law, enforce rights, and respond to valid legal requests.

Providing account information is optional, but if you do not provide account information we cannot create an account, save durable progress, or provide account-backed features. Guest demo play remains available only where Brainstretch makes a demo available without an account.

Optional Google Ads Campaign Measurement

On the website only, Brainstretch offers optional Google Ads campaign conversion measurement after you affirmatively choose Allow campaign measurement. Brainstretch does not initiate a Google tag, request, storage operation, or conversion event before that choice, after a denial, or in the Capacitor native app.

The two measured milestones are Confirmed registration and the account’s First engaged game completion. Brainstretch explicitly sends a conversion action and an opaque, milestone-specific transaction token. Brainstretch does not send Google your email, name, hashed contact data, account, profile, play, or match IDs, free text, scores, or board state.

The Google tag also makes network requests that can disclose IP address and network data, date and time, full page URL and referrer including ad-click parameters where present, browser, device, operating system and screen information, consent and tag configuration, Google or ad-click identifiers, cookie identifiers, and the conversion milestone. We do not describe this information as anonymous or promise that Google cannot associate it with other information.

Google receives this information to attribute the two consented milestones to Google Ads campaigns and report or optimize campaign performance. For ordinary Google Ads website conversion measurement, Google acts as a recipient and independent controller under its terms. See Google’s explanation of information received from sites and apps and Google’s Privacy Policy.

You can withdraw your choice in Privacy settings. Withdrawal stops future Brainstretch-initiated tag loads and events and clears readable first-party Google measurement storage. It cannot retract requests already sent, guarantee deletion from Google’s systems, or clear storage unavailable to Brainstretch; you can also clear browser data and use Google’s privacy controls.

This rollout does not use Google Analytics or GA4, a Google Tag Manager container, enhanced conversions, customer-data uploads, remarketing audiences, ad personalization, or native tracking.

Information Sharing

We do not sell your personal information.

We may share limited information with service providers that help us operate Brainstretch:

hosting and infrastructure providers;
transactional email providers for sign-in and account messages;
observability, error monitoring, and security tools;
payment processors or app stores if paid features launch;
professional advisers or authorities when required by law or necessary to protect rights and safety.

With your website campaign-measurement permission, Google Ads is a recipient and independent controller for the limited website campaign conversion measurement described above. Google is not Brainstretch’s provider for self-hosted visitor analytics.

See the Sub-processors page for current provider details.

Service providers may process information in countries outside your own. We use contractual and technical safeguards appropriate to the provider and processing activity.

International transfers

Brainstretch is operated from Israel and may use infrastructure or service providers in the European Union, United States, Israel, or other locations. When personal information is transferred internationally, we rely on appropriate safeguards such as data processing agreements, standard contractual clauses, provider security commitments, or other lawful transfer mechanisms.

Google Ads information may be processed globally. Depending on the transfer, Google states that it may rely on applicable Data Privacy Framework programs, adequacy decisions, and/or standard contractual clauses. See Google’s Ads international-transfer information.

Retention

We keep information only as long as reasonably necessary:

account data is retained while your account is active;
a profile’s time zone, whether it follows your device, and the date it was last changed are kept while the profile exists, are included in Export my data, and are deleted when you delete that profile or your account;
a profile’s streak, XP records, daily tasks, and awards are kept while the profile exists, are included in Export my data (as streaks, streak_days, xp_entries, daily_tasks, and awards), and are deleted when you delete that profile or your account; a day’s unfinished daily tasks are deleted when that day closes after your local midnight, while finished ones are kept;
the nightly expected solve times are replaced by the next night’s figures; they are aggregated across players and name no player;
when another player deletes their account, the XP records of races against them keep their XP but no longer name that player’s account;
a guest’s visit (its finished games and first-chapter quest stars) is held only in server memory and dropped 30 minutes after the last play, at most 4 hours after the visit began, or once it is added to a profile;
saved progress, preferences, profiles, and game history are deleted or anonymized within 30 days after account deletion is completed, except where retention is needed for security, integrity, dispute resolution, or legal reasons;
when you delete your account, public profile handles are replaced and previous handles are reserved without profile links for up to 30 days to prevent impersonation, then removed by scheduled cleanup;
when you delete your account, reporter linkage and optional comment are removed from feedback reports, while structured anonymous feedback categories may remain for aggregate product-quality statistics;
raw comments and technical or game-state details are removed 90 days after Brainstretch’s review marks the report as linked to an issue or dismissed, while structured classification may remain;
application and request logs are kept on a 90-day rolling retention period for reliability and troubleshooting;
security and abuse-prevention logs may be retained for up to 24 months when needed to investigate incidents, protect accounts, prevent cheating, or defend legal rights;
when you delete your account, the security log and staff action records we keep about it in our database are kept without your email address, your linked Google account’s identifier, or the browser and IP address you used; copies of those entries in the application logs end with the 90-day rolling period above;
the advertising campaign details described above are retained after account deletion, because they describe the advertisement rather than you and are used only for aggregate campaign statistics;
aggregate or anonymized statistics may be retained because they no longer identify you;
backup copies may persist for up to 90 days before rotation.

Your Rights

Depending on your location, you may have rights to access, correct, delete, export, restrict, or object to processing of your personal information. You may also have the right to withdraw consent where processing is based on consent.

You can delete your account from settings, and you can email yourself a copy of the data we store about your account with Export my data in the My data section of settings. For other requests, contact privacy@brainstretch.ing. We aim to respond within 30 days.

A guest’s visit is linked only to a token in your browser, not to an account or email address, and is held only in server memory for the short time described in the Retention section, so it is not part of Export my data, and we cannot find it by your name or email. Clearing this browser’s cookies ends its link to it.

We may need to verify your identity before fulfilling a rights request.

You may also contact your local data protection authority.

Cookies, Browser Storage, and Visitor Analytics

Brainstretch uses essential first-party cookies for secure sessions, sign-in, and form protection. The session cookie also holds the random guest token given to a signed-out visitor on a game’s play or quest page, which a guest’s visit is held under, as described above. Brainstretch may use localStorage for display preferences such as theme and for analytics privacy choices, such as disabling visitor analytics in the current browser.

If you have signed in on a browser, Brainstretch also keeps an essential returning-player cookie on it that holds only your profile’s display name (or nothing, if your profile has no name), so the site can greet you and offer sign-in after your sign-in expires. It stays after you sign out, for up to 400 days, until you remove it from the Welcome back page or clear your browser’s cookies. See the Cookie Policy for details.

Optional campaign measurement uses the identifier-free brainstretch_campaign_measurement choice cookie. After permission, Google may create _gcl_* measurement cookies and _gcl_ls localStorage where applicable. See the Cookie Policy for names, purposes, durations, and withdrawal steps.

AI

Brainstretch does not currently use AI for game generation, gameplay decisions, generated puzzles, scoring, ranking, personalization, recommendations, opponent behavior, ads, content moderation decisions, user support decisions, or other automated user decisions. See the AI Disclosure for current and future AI transparency.

Security

We use technical and organizational measures intended to protect personal information, including HTTPS, access controls, secure authentication flows, monitoring, and regular updates. No service can guarantee perfect security. If you believe you found a vulnerability, contact security@brainstretch.ing.

If a personal data breach occurs, we will investigate, take appropriate remedial steps, and notify affected users or regulators when legally required.

Children

Brainstretch is for users 18 and older. We do not knowingly collect personal information from anyone under 18.

Changes

We may update this Privacy Policy as Brainstretch evolves. Material changes will be posted on this page and, where appropriate, communicated through the service or by email.

Contact

For privacy questions or rights requests, contact privacy@brainstretch.ing.