slvd Privacy Policy

1. Summary

slvd uses anonymous sign-in and a chosen username so you can play without an email or password. You may optionally add and verify an email address to protect your progress, then use a six-digit one-time code to recover it on another device. slvd does not ask for your real name, password, phone number, contacts, precise location, or full photo library access.

slvd brings together games including SHIFT, BRACKET, Tally and exact. Available games can vary by platform and app version. slvd uses Supabase for accounts, storage and backend validation, and Google Play Billing for SHIFT+ purchases. This version does not include third-party monetization SDKs, advertising identifiers, cross-app measurement or paid third-party placements.

2. Information slvd Collects

slvd collects and stores the information needed to operate the app:

• Your chosen username.
• An internal player ID created through anonymous sign-in.
• An optional recovery email address and its verification status, only if you choose to protect your progress. Supabase sends and verifies the six-digit verification and sign-in codes used for this feature.
• Daily puzzle start records and attempts, Puzzle Vault progress, and Daily Archive progress.
• League membership, league rankings, and league-related activity, scoped to each game.
• Completed Tally daily puzzle dates, crossed-cell choices and retry request IDs, used to validate the daily puzzle and award completion points. Unfinished Tally boards, practice, undo history, hints and timers remain on the device.
• BRACKET daily and practice sessions, submitted guesses, hints and nudges, ranges and game timing used to validate play and calculate results.
• exact. Daily Challenge sessions and submitted change, including authoritative scores and deadlines, used to validate results and calculate daily bests.
• Champion badge and trophy records, including award period, rank, score, moves, time, and whether an award has been seen or shared.
• Gameplay records such as puzzle date, puzzle number, start and last-activity times, submitted path, result status, moves, time, score, submission time, app platform, and app version.
• Fair-play security records for official attempts. When an official attempt is submitted, slvd briefly processes the standard network address supplied with the request and converts it into a protected, date-scoped identifier. slvd does not retain the raw network address in its application database. slvd also records when a completed, failed, or abandoned player account receives that day's best path, so potentially coordinated submissions can be identified for manual review.
• Optional missing-word suggestions, including the suggested word, puzzle context, your anonymous player ID, and your username if available.
• Support or privacy communications you send to Rovira Labs, including your sender email address and message contents.
• Notification choices stored on your device. If remote leaderboard alerts are enabled, slvd also stores a Firebase Cloud Messaging registration token, its environment, registration timestamps, and app version against your player account.
• Account status needed to maintain your profile. SHIFT+ entitlement checks and the cached unlock status stay on your device; slvd does not upload your Google Play purchase token, receipt or purchase history to its app backend.

3. Information slvd Does Not Collect

slvd does not ask for or store your real name, password, phone number, contacts, precise location, health data, financial account details, or full photo library contents. Email is optional and is stored only when you choose progress protection or recovery.

SHIFT+ purchases are handled by Google through Google Play Billing. slvd receives purchase entitlement information, such as whether SHIFT+ is active, but does not receive or store your payment card number or Google account credentials.

The Android app does not request permissions for location, contacts, camera, microphone or photos and videos, and does not access your advertising ID.

4. How slvd Uses Information

slvd uses information to:

• Create and maintain your anonymous player profile.
• Keep your player ID stable across app sessions.
• Send verification and sign-in codes, and restore your player profile on another device when you use optional email recovery.
• Fetch puzzles and restore completed results.
• Validate daily attempts and enforce each game's attempt limits.
• Calculate official scores.
• Show global and league leaderboards.
• Save Puzzle Vault, Daily Archive, league, badge, and trophy progress.
• Deliver optional daily reminder, leaderboard, and champion-badge notifications.
• Process missing-word suggestions.
• Respond to support, privacy, and data-rights requests.
• Produce restricted internal operational reports for service monitoring, support, and word-list review.
• Detect and manually review potentially coordinated attempts that could unfairly affect leaderboards or champion trophies.
• Support account deletion and troubleshooting.
• Determine whether to show Puzzle Packs, Daily Archive, and the SHIFT+ paywall.

5. Information Other Players Can See

Your username, score-related stats, and champion-badge counts may appear on global leaderboards. If you join a league, your username, score stats, league rank, badge counts, and league membership may be visible to other members of that league.

The app displays your chosen username on leaderboard rows. Leaderboard and league responses also include a player identifier to associate scores and badges with the correct account. Your submitted path is stored for validation and result display, but it is not shown on public leaderboards.

6. Third-Party Monetization

This version of slvd does not show paid third-party placements and does not include third-party monetization SDKs or consent flows for monetized placements.

slvd does not sell your personal information and does not use your data to track you across apps or websites owned by other companies.

7. SHIFT+ Purchases

SHIFT+ is a one-time, non-consumable in-app purchase handled by Google Play Billing. Google processes purchases, payments, refunds and restoration. slvd checks entitlement status locally to unlock Puzzle Packs and Daily Archive for the Google account that purchased SHIFT+; purchase tokens and receipts are not uploaded to slvd's app backend.

slvd does not receive or store payment card numbers, bank details, or Google account passwords.

8. Local Device Storage

slvd stores data on your device, including your anonymous session, username cache, tutorial and one-time prompt state, notification and haptic preferences, SHIFT Vault paths and positions, Tally Daily and Vault boards and progress, exact. Daily cash trays and pending actions, Endless Shift runs and per-player bests, locally scheduled notification identifiers, and pending daily submissions. If you enable remote leaderboard alerts, slvd also stores a Firebase Cloud Messaging device token against your player account so alerts can reach your device while the app is not open.

Pending submissions help recover completed results when your connection drops and are retried when the app reconnects. A first SHIFT or Tally daily submission must reach the server before that puzzle's UTC day closes to enter competitions. A result that was already accepted can be recovered after midnight. A first-time upload received after the cutoff does not earn an official score. Device-local unfinished games and preferences do not automatically transfer through email recovery. Validated daily results, game-specific leagues, trophies and saved Vault progress are stored with your player profile. Deleting an account clears its saved local game data and pending submissions from the device used for deletion.

9. Sharing

When you create a share image, slvd generates it on your device and hands it to the Android Sharesheet. The apps or services you choose in the share sheet are controlled by Google and those third parties. slvd does not track where you share the image.

10. Android Permissions

slvd uses internet and network-state access to communicate with its backend, and may use vibration for haptics and notifications.

On Android 13 and later, slvd asks for notification permission when you enable notifications. You can change it in Android Settings.

slvd does not request permissions for location, contacts, camera, microphone or photos and videos. Result images are generated on your device and handed to the Android Sharesheet.

11. Notifications

Daily puzzle reminders and champion-badge alerts are optional local notifications scheduled on your device. Optional leaderboard alerts use Firebase Cloud Messaging so slvd can show them while the app is open, in the background, or not running. Enabling remote alerts associates an FCM device token and notification preference with your player ID. You can control each category in slvd Settings or disable all notifications in system settings.

12. Service Providers

slvd uses the following service providers:

• Supabase for anonymous authentication, optional email-code recovery, database storage, and secure backend functions.
• Resend for restricted operational emails sent to slvd administrators, including daily puzzle reports and missing-word summaries. Depending on the report, these emails may contain usernames, player IDs, word suggestions, and relevant gameplay details.
• Google Play Billing for SHIFT+ purchases and purchase restoration.
• Firebase Cloud Messaging and Android system services for remote alerts, sharing, local notifications, haptics, and other operating system features you choose to use.

These providers process information under their applicable terms, privacy policies and data-protection obligations. Like other hosted network services, they may receive standard request information such as IP addresses and technical logs. Rovira Labs uses service providers for the app functions described in this policy and remains responsible for its own handling of your information. You can contact support@roviralabs.com about provider processing or protection of your data.

13. Data Retention and Deletion

Your account and gameplay data are kept while your account is active and as needed to provide history, leaderboards, and support. Protected network identifiers and best-path delivery records used for fair-play monitoring are normally deleted after 30 days. Attempts elevated for manual integrity review are normally retained for up to 90 days so Rovira Labs can investigate repeated patterns, resolve a review, or handle a dispute. Restricted operational reports are kept only as long as reasonably needed for those purposes and legal obligations. You can delete your account in Settings. To delete your account, open slvd, open Settings, select Delete Account, and confirm. If you cannot access the app, you can request deletion through the Account Deletion page on this website or by emailing support@roviralabs.com.

If a Puzzle Vault puzzle is replaced, its earlier completion history is kept in restricted administrative storage for support and recovery. It does not mark a different replacement puzzle as solved. Deleting your account also deletes these player-linked historical records.

Deletion removes your active authentication account, optional recovery email, username, player ID, attempts, scores, leaderboard entries, notification-device registration, badge records, league memberships, owned leagues, Puzzle Vault progress, word suggestions tied to your player ID, and other active slvd database records associated with that player ID.

Deletion may not immediately remove information from encrypted provider backups, security logs, push-provider logs, or restricted operational emails that were generated before deletion. Those records may be retained where reasonably necessary for security, dispute handling, or legal obligations. Images or posts you shared outside slvd are outside slvd’s control. Google Play purchase history and store records are controlled by those providers and may remain available through your store account according to their policies.

View account deletion options →

14. Your Choices and Rights

You can play without adding an email, change your username in Settings, control notification categories in slvd and system settings, and delete your account in slvd Settings. You may also contact support@roviralabs.com to ask about access, correction, or deletion of your information. Additional rights may apply depending on where you live.

Where applicable, slvd processes information to provide the service you request, based on your choices or consent for optional features, for legitimate interests such as security and app operations, and to meet legal obligations.

15. Security

slvd uses Supabase row-level security and backend functions to limit direct database access. Official daily puzzle results are validated server-side before they are saved. Offline or pending submissions are also revalidated by the backend before any score appears on a leaderboard. Fair-play monitoring is restricted to authorized slvd administrators. Network matches, fast results, rankings, or best-path use do not automatically exclude an attempt or remove a trophy; any action requires manual review.

No method of transmission or storage is perfectly secure, but slvd uses reasonable technical and organizational measures to protect app data.

16. Fair Play Rules

Players must not use another account, device, or person to obtain the solution or advance knowledge of the best path before submitting an official attempt. Coordinated attempts may be excluded from leaderboard and trophy eligibility after manual review. No action is taken solely because players share a network.

When reviewing a flag, Rovira Labs considers multiple signals and plausible innocent explanations. An initial action is limited to the affected attempt or trophy unless there is evidence of repeated abuse. Players may contact support@roviralabs.com to request an explanation or appeal a fair-play decision.

17. International Processing

slvd and its service providers may process information in countries other than the country where you live. Where required, these transfers are handled according to the safeguards and terms provided by the relevant service providers.

18. Children

slvd is not directed to children under 13 or the equivalent minimum age in your region. slvd uses anonymous sign-in and a chosen username, and players should avoid using a real name or other personal information as their username.

19. Google Play Data Safety Information

The Android app's Data Safety answers should reflect optional email address; user IDs, including your username and player identifier; app activity such as gameplay, puzzle starts, paths, guesses, hints, crossed-cell choices, submitted change trays, timing, results and saved progress; other user-generated content such as word suggestions; customer support communications; and device or other identifiers such as an FCM registration token and protected security identifiers.

Relevant data is linked to your player account for app functionality, account recovery, support, restricted service analytics, fraud prevention and security. It is not used for advertising or cross-app tracking. Google Play processes store purchases; the app checks and caches entitlement status on-device without uploading purchase tokens, receipts or purchase history to slvd's backend.

Store disclosures should also account for integrated SDKs and remain consistent with actual Android data flows.

20. This Website

The slvd website is hosted by Base44. Base44 may process standard technical request information, such as your IP address, browser and device details, requested pages and request timestamps, to deliver, secure and maintain the website. Hosting logs are handled under the hosting provider's terms and privacy practices.

This website does not offer website accounts or collect form submissions. Rovira Labs does not add marketing analytics or cross-site advertising to this website. App Store and Google Play links take you to services operated by Apple and Google under their own privacy policies.

Support and deletion links open your chosen email application. A request is sent only if you choose to send the email. Rovira Labs then receives your sender address and the message contents to handle your request. Do not send passwords, verification codes or payment card details.

21. Changes to This Policy

slvd may update this Privacy Policy when the app, service providers, legal requirements, or data practices change. The “Last updated” date will be revised when the policy changes.

22. Contact

Questions about privacy, data deletion, or this policy can be sent to support@roviralabs.com.