Mindset — Privacy Policy

Last updated: 24 October 2026

Mindset is a two-player word-association game. This policy explains what information the app handles, why, and the choices you have. We keep data collection to the minimum needed to run the game. We do not show ads, and we do not sell your personal information.

Who we are

Mindset ("we", "the app") is operated by Peakdyne Systems Inc., the developer of the Mindset game. For any privacy question or request, contact us at [email protected]

Information we handle

• Anonymous account. When you open the app, we create an anonymous account so your games can be saved and synced. This is a randomly generated identifier — it does not require your name, and by itself does not identify you.
• Playing on Facebook. If you play Mindset inside Facebook, Facebook gives us a player identifier that exists only for Mindset (it is not your Facebook profile ID), signed by Facebook so we can check it is genuine. We use it for one thing: to link you to your Mindset account, so your games follow you between devices. We do not receive your name, profile photo, friends list or anything else from your Facebook profile. Invitations you send to friends go through Facebook's own invite window. Inside Facebook the game does not use Google Analytics or browser notifications.
• Game content. The nickname you choose, the words and guesses you enter, and game status and timestamps. This is needed so you and your game partner can play.
• Optional email (backup & sync). If you choose to add an email address to back up your games or play across devices, we store that email and send you a sign-in (magic) link. This is entirely optional — the game works without it.
• Notifications (only if you turn them on). To tell you when it is your turn, we store a notification address for your device: a browser push subscription on the web, or a Firebase Cloud Messaging token in the Android app. A notification says who played and that it is your turn — it never contains anyone's guess.
• Error reports. If something goes wrong in the app, it sends us a short technical report (the error message, what the app was doing, your anonymous account identifier and your browser or device type) so we can fix it.
• Security & anti-abuse data. To protect the service from bots and abuse, our infrastructure providers process technical data such as IP address transiently (for example during a CAPTCHA check and rate limiting). We do not use this to build advertising profiles.
• Analytics data. We use Google Analytics to understand how the app is used (for example, which screens are visited and general usage trends) so we can improve it. Google Analytics collects standard technical data such as device and browser type, approximate location derived from IP address, and interaction events. This is used in aggregate to measure usage — not to identify you personally, and not for advertising.

How we use information

• To run the game: create and sync your games, deliver moves between players, and show game history.
• To let you back up and restore your games across devices (only if you add an email).
• To keep the service secure and prevent automated abuse.
• To measure usage and trends (via Google Analytics) so we can improve the game.

Service providers

We use a small number of trusted providers to operate the app. Your data is processed by them only to provide these services:

• Supabase — database and anonymous authentication (stores your games and account).
• Cloudflare — hosting of the website, content delivery and bot protection (Turnstile CAPTCHA).
• Push services — Google (Firebase Cloud Messaging and Chrome), Apple, Mozilla and Microsoft deliver notifications to your device if you turn notifications on. They receive the notification text and your device's notification address, nothing else.
• Google Analytics — aggregate usage analytics to help us understand and improve how the game is used (not used in the Facebook version).
• Meta (Facebook) — if you play on Facebook, Meta hosts that version of the game and delivers the invitations you send. What Facebook itself collects is covered by Meta's own privacy policy.

Data sharing

We do not sell your personal information and we do not share it with advertisers. Your nickname and your in-game words/guesses are shared with the other player in your game — that is how the game works. Your email address (if you provide one) is never shown to other players.

Data retention

• Your games stay in your game list until you or your game partner delete them.
• Games nobody joined are removed after 30 days (random-match games after 24 hours), and games a player left are removed 30 days after the last move.
• Anonymous accounts with no games that have not been used for 60 days are removed automatically.
• An account linked to Facebook is kept until you ask us to delete it (see below), so your games are still there when you come back.
• Error reports: only the most recent 5,000 are kept. Notification delivery records: 30 days.
• Daily backups of the database are kept for 7 days, so deleted data disappears from backups within a week.

Delete your data

You can ask us to delete your Mindset account and everything associated with it at any time:

• Email [email protected] with the subject "Delete my Mindset data".
• So we can find your account, include your nickname and the code of one of your games (the five characters shown in the game, e.g. AB3CD), or the email address you added for backup.

Within 30 days we will delete your account, your nickname, your email address (if you added one), your notification addresses, your error reports and your games, and confirm by email. A deleted game also disappears from your game partner's list. Deleted data leaves our daily backups within 7 days after that.

You can also delete any single game yourself, at any time, inside the app.

If you play on Facebook, you can also ask through Facebook's settings for apps and games. Facebook then sends us a deletion request and shows you a confirmation code and a link to a page where you can check what happened. Facebook identifies you in that request with a different identifier from the one the game uses, so we may not be able to match it to your Mindset account; if we can, we delete the account automatically, and if we cannot, nothing is stored under that identifier. To be sure your Facebook games are deleted, email us as described above.

Your choices and rights

• You can delete a game at any time inside the app.
• Adding an email for backup is optional and you can decline it.
• Notifications are off until you turn them on, and you can turn them off again in the app's settings or your device settings.
• You can request deletion of your account and data — see Delete your data.

Children

Mindset is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

Changes to this policy

If we make material changes, we will update the date at the top of this page and, where appropriate, notify users in the app.

Contact

Questions or requests: [email protected].