Cornered has no accounts, no advertising, and no third-party tracking. It does not know who you are and has no way to find out.
The short version. Everything you play is stored on your own device. The app sends one small anonymous record when you finish a board, and a fault report if it breaks. Neither contains anything that identifies you.
If you would rather send nothing at all, there is nothing to switch off, because there is nothing personal in it. You can still reset the anonymous identifier at any time in Settings, which starts the count over from scratch.
Your progress lives on your phone and nowhere else. That includes which puzzles you have played and what you found in them, your settings, your marks, whether you have seen the tutorial, and which awards you have earned.
None of it is sent anywhere, and none of it is readable by us. It rides along in your device's own backup if you use one, because it is ordinary app storage. Deleting the app deletes all of it. There is no copy on a server to ask us for.
Two things, both anonymous. They go to a server we run on Cloudflare, and to nobody else.
When you finish a board:
| Field | What it is |
|---|---|
install | A random identifier the app generates the first time it opens. Not your device id, not an advertising id, not linked to anything. Resettable in Settings. |
event_id | A random identifier for this one record, so a retry does not count twice. |
day, weekday | Which puzzle it was. |
found, total | How many answers you charted, out of how many there were. |
hints | How many hints you used. |
seconds | How long the board took. |
finished | Whether you completed it. |
source | Whether it was today's board or one from the archive. |
build | Which version of the app you are running. |
If the app hits an error:
| Field | What it is |
|---|---|
install, event_id | As above. |
build, platform | Which version, and iOS or Android. |
fatal | Whether it took the screen down. |
message, stack, component | The error's own description of itself and where it happened in the code. |
Our server adds two things of its own:
| Field | What it is |
|---|---|
received | The date the record arrived, according to our server rather than your phone. |
country | A two-letter country code that Cloudflare works out at its edge. |
Your IP address is never stored, and never reaches our code. The country comes from a header Cloudflare fills in before the request gets to us, which is why we can say where players are in aggregate without holding anything about where you are.
Thirteen months, then it is deleted automatically. That is long enough to compare a year against the one before it, which is the longest question we ask of it.
If you buy anything, the payment is handled entirely by Apple or Google. We never see your card, your billing address or your name. To know whether a purchase should be restored on a new phone, we use RevenueCat, which receives the store's receipt and the anonymous identifier above.
Optional, off unless you ask for them, and scheduled by your own phone. There is no push server, so switching them on tells us nothing.
Cornered is suitable for all ages and collects nothing personal from anybody, regardless of age. There is no chat, no user content and no way for players to contact each other.
Because the records we hold are anonymous, we genuinely cannot find yours to delete on request - there is nothing connecting them to you. That is a consequence of collecting so little, and resetting the identifier is the equivalent control.
If this policy changes, the date below changes with it. Material changes will be described in the app's release notes rather than made quietly.
Peach Tree Productions LLC — [email protected]