Operator: ZEC.IO
Application: Cogchime — Android package / iOS & macOS bundle ID: io.zec.cogchime
Effective date: shown at the top of this page
Contact: [email protected]
This policy explains how Cogchime ("the app") handles your information. Please read it before use.
01 Information we collect
Cogchime is a single-player puzzle game. It has no account system and requires no
registration or sign-in. Its 158 levels across 14 chapters, the Daily Challenge, the Movement
Codex and the 14 Craftsman's Notes all play offline once they are unlocked; only buying and
restoring purchases need a connection.
Apart from the one case described below — feedback you choose to send — the app transmits
nothing to any server of ours. Your progress, settings, codex blueprints and purchase state
are stored only on your own device. A purchase is carried out by the App Store or Google Play
itself, and nothing about it reaches us (section 02).
1.1 Feedback you choose to submit
Only when you open "Settings → Feedback" and tap Send do we receive:
- The message body (the text you write; required);
- A contact email (optional. Leave it blank and we cannot reply, but we still receive
the report); - Screenshots (optional. You pick them yourself in the system photo picker; 5 MB per
image. The app requests no photo-library permission and cannot read any image you did not
select); - A run log (optional, controlled by the "Attach run log" switch, which is off by
default. It contains the app's own debug records, used to locate crashes and faults; it
holds no content from your personal files); - Screenshots and the run log together are limited to 3 attachments.
A snapshot of the environment is sent along with the report, consisting of exactly three
items: app version, platform name (android / ios / macos / web) and operating system
version. These tell us which build on which system produced the problem.
1.2 Anonymous device identifier
The first time you use the feedback feature, the app generates a 16-byte high-entropy
random string (Random.secure()) locally on your device and sends it with the report. Its
only purpose is to let you look up the reports you have previously submitted, and our
replies to them.
- It is generated on your device. It is not an advertising identifier (Android
Advertising ID), and it is not an IMEI, OAID, MAC address or Android ID; - It is not linked to your name, phone number, email address or any real-world identity;
- It is never used for advertising or cross-app tracking;
- Uninstalling the app invalidates it; reinstalling generates a fresh one with no link to
the old.
02 Information we do not collect
The app does not collect, request or transmit any of the following:
- Location (no location permission is requested);
- Contacts, call logs, SMS or calendar;
- Any photo you did not pick yourself, and no video, audio or files;
- Microphone or camera input;
- Notification content, clipboard content, or the list of installed apps;
- The advertising identifier (Android Advertising ID);
- Phone number, IMEI, OAID, MAC address, Android ID or other hardware identifiers;
- Your name, identity documents or biometric data;
- Payment information, card details or billing address (see 2.1 below).
The app contains no advertising and integrates no advertising SDK; it contains no
third-party analytics or telemetry SDK and reports no gameplay events; it has no
leaderboards and uploads no scores. Your Daily Challenge streak and totals exist only on
your device.
2.1 In-app purchases
The app offers two optional one-time purchases: one unlocks the remaining chapters, the other
adds a third theme. There is no subscription, no consumable item, no random reward and no
advertising.
Payment is processed entirely by the App Store or Google Play. We do not receive, see or
store any payment information, card details or billing address, and no third-party billing
or analytics service stands between you and the store. All the app learns from the store is
whether a purchase exists.
That purchase state is kept on your device alongside the rest of your progress and is never
sent to our servers. Because the app has no account, nothing on our side links a purchase to
a person.
03 How we use this information
| Information | Purpose | Basis |
|---|---|---|
| Message body, screenshots, run log | Locating and fixing the problem you reported | Fulfilling a request you initiated |
| Contact email | Replying to that report | Fulfilling a request you initiated |
| App version / platform / OS version | Reproducing the environment the problem occurred in | As above |
| Anonymous device identifier | Letting you look up your own reports and replies in the app | As above |
We do not use this information for profiling, automated decision-making, targeted
advertising or promotion of any kind.
04 Permissions
On Android the app declares exactly two permissions:
| Permission | Purpose | If denied |
|---|---|---|
INTERNET |
Submitting and retrieving feedback; completing and restoring purchases | Feedback, buying and restoring stop working; everything you have already unlocked plays as normal |
ACCESS_NETWORK_STATE |
Checking connectivity before sending, so the app can report accurately | As above |
Picking a screenshot goes through the Android system photo picker, so no photo-library
permission is requested — the system hands the app only the images you selected.
05 Third parties and disclosure
We do not sell, rent or share your information with any third party.
The app integrates no third-party advertising, analytics, push-notification or social SDK.
Feedback data is sent only to our own server (https://zec.io/ms), which we operate
ourselves.
One exception applies by law: we will comply with a properly formed request from a judicial
or administrative authority.
06 Storage and security
- All network traffic uses HTTPS.
- Local data (level progress, codex blueprints, settings, local feedback history and the
anonymous device identifier) is stored on your device in a SQLCipher-encrypted
database; on startup the app verifies that SQLCipher is actually linked and refuses to
open the database in plaintext if it is not.
In fairness we should say plainly: the encryption key is embedded in the app and can be
recovered by reverse engineering. It protects against someone reading a database file they
have obtained, not against extraction while the app runs on your device. - Server-side data is held on access-controlled servers reachable only by authorised staff.
07 Retention and deletion
If you have never used the feedback feature, we hold no data about you at all — there is
nothing to delete.
Submitted reports (including attachments) are kept for 24 months after the issue is closed,
so that recurrences can be traced.
How to request deletion
Email [email protected] with the subject "Delete my data" and include your anonymous
device identifier. To find it: open "Settings → Feedback" in the app; the identifier is
shown at the bottom of that page and can be copied with one tap.
We will delete all reports and attachments held under that identifier within 15 working
days of receiving the request, and confirm by reply.
Uninstalling the app clears all local data on your device (progress, codex, settings,
feedback history and the anonymous identifier).
08 Children's privacy
The app's content is mechanical-transmission puzzles, with no violence, horror, gambling or
otherwise unsuitable material; it is suitable for all ages.
The app is not designed for or directed at children under 13 and does not knowingly
collect personal information from children. Because the app collects nothing at all apart
from feedback a user chooses to send, normal play produces no outbound data whatsoever.
If you are a parent or guardian and discover that your child has submitted personal
information (such as an email address) through the feedback feature, please contact us at
the address above and we will delete it promptly.
09 Your rights
You may:
- Access — view all the reports you have submitted, and their replies, inside the app;
- Delete — request deletion as described in section 07;
- Withdraw — simply stop using the feedback feature; nothing further leaves your device;
- Complain — email us if you disagree with how we have handled something.
10 Changes to this policy
If this policy changes materially (new categories of collection, new third-party sharing, a
change of purpose), we will update the version number and effective date on this page.
Continuing to use the app after a change constitutes acceptance of the updated policy.
11 Contact us
Questions about this policy: [email protected]