Privacy Policy
Quiet Objects: Time Experiment
This policy explains how this application handles information and how to contact us about privacy.
Information we process
Quiet Objects stores scene progress, best rewind counts, unfinished rounds, recorded solutions, language and sound or motion preferences locally on your device. A randomly generated installation secret is stored in the iOS Keychain. When connected, the app sends this secret over HTTPS to authorize progress synchronization. The server stores its SHA-256 hash, completed-scene scores and last scene, not the raw secret. If you choose Publish score, the server also stores your pseudonym, scene, rewind count and submission timestamp. Public top-ten lists show pseudonyms and rewind counts. Network requests to the API and this website necessarily expose connection information such as IP address and request metadata to Cloudflare and the Railway hosting infrastructure. Cloudflare terminates public HTTPS and forwards API and website requests to the Railway origin. There is no account, email registration, location collection, advertising or analytics SDK.
How we use information
Local records support offline play, pause and resume, progression and playback of your own solutions. The installation secret restricts access to your private server progress and lets the app synchronize while that secret remains available. It is not a login and does not enable transfer between devices. Voluntarily published scores provide community comparison. Temporary in-memory request counters help limit abuse and protect availability; the app server does not intentionally log request bodies, secrets or IP addresses.
Service providers and sharing
Cloudflare provides the public HTTPS proxy for the API and policy website, terminating TLS and forwarding requests to the Railway origin. It processes connection information, request metadata and forwarded traffic to deliver and protect these endpoints. Railway hosts the API, public policy website and persistent database volume and processes network traffic and infrastructure logs needed to operate the service. Public leaderboard visitors can read the pseudonym and score you elect to publish. We do not include advertising networks, analytics services or outbound email providers. Information may be disclosed when legally required. Cloudflare and Railway may retain operational records under their own practices; fixed provider log retention periods have not been established for this application.
Data retention
Local progress, replays and preferences remain until you reset them or remove the application data. A Keychain secret can survive app removal, but survival and subsequent restoration are not guaranteed. Server progress remains until you request deletion; there is no automatic inactivity-expiry schedule. Each scene retains up to one hundred best submitted scores, with only the top ten displayed. Lower-ranked entries may be removed as new scores arrive. The application does not create its own server backups. Cloudflare operational records, Railway volume snapshots or other infrastructure copies, if present, are subject to provider handling rather than a deletion timetable we can promise.
Deleting your information
Delete all progress in Settings removes local progress and recordings and requests deletion of the installation’s server progress and public scores. If offline, deletion remains pending on the device and is retried when a connection is available; old server progress is not restored while pending. Settings such as language and sound remain. The installation secret remains so pending deletion can be authorized. Deletion removes active database records, but residual SQLite pages, provider snapshots or infrastructure logs may remain until overwritten or removed under provider processes. Removing the app alone does not send a server deletion request. If the installation secret is lost, we cannot identify or restore its private progress through a name or email address.
Permissions and your choices
The app requests no camera, microphone, photo, contacts, location or notification permission. Audio follows the device audio environment and can be turned off in Settings. You can change language and Reduce Motion locally. Score publication is optional and requires an explicit action; do not use personal information as a pseudonym. To stop future synchronization, play without a network connection or remove the app. Use Delete all progress while connected before removal if you also want server deletion.
Your privacy rights
Depending on applicable law, you may request access, correction or deletion of information associated with you, or object to processing. The app’s Settings provide deletion for records authorized by the installation secret. Contact eu.darlington@icloud.com with privacy questions or rights requests. Do not send your installation secret by email. We may need enough non-secret information to understand a request and may be unable to associate a request with private records when the secret is unavailable. You may also contact your local data protection authority where applicable.
Security
Public requests use HTTPS to the Cloudflare proxy, which forwards requests to the HTTPS Railway origin. Private progress access requires a unique random installation secret kept in the device Keychain; the server indexes records by a one-way hash of that secret. The service validates request bodies, uses database transactions, limits request rates and does not expose private progress through public leaderboard responses. Database files have restricted filesystem access on the hosted volume. No security system is infallible, and we do not claim an independent security certification or application-managed encryption of the database at rest.
Children’s privacy
Quiet Objects is intended for a general puzzle audience, primarily players aged sixteen and older, and is not designed to collect information from children. We do not ask for age, real names or contact details. Public score sharing is optional. If you believe a child has submitted personal information in a pseudonym, contact eu.darlington@icloud.com so the concern can be investigated; the in-app deletion option can remove the installation’s own public entries.
Changes to this policy
This policy may be updated when the application’s features, processing or hosting practices change. The current version is available at this public page and its effective date appears above. Material changes will be described in the updated policy and, where appropriate, in the application or release information. Please review the policy periodically and contact eu.darlington@icloud.com with questions.