Privacy Policy

Last updated: August 2026

This Privacy Policy explains how MemoTilt ("we," "us," or "our") collects, uses, and protects information when you use our game.

Information We Collect

Account information

Email address
Password (this is hashed and managed by our authentication provider - we never see or store your actual password)
Display name
If you sign in with Google, we receive your name and email from your Google account as permitted by your Google account settings

Gameplay information

Daily scores, streaks, best combos, and rounds cleared for each game mode
Which daily puzzles you've completed

Social features

Your friend code and the friend codes you've connected with
Friend requests sent and received
Challenges sent and received between friends, including scores shared as part of a challenge
Win/loss history used to determine "crown" status between friends
Online/offline status, visible only to your accepted friends

Automatically collected information

Basic bot-detection signals collected by Google's App Check / reCAPTCHA Enterprise service, used solely to protect our systems from automated abuse. This does not identify you personally.

How We Use Your Information

We use the information above to:

Create and manage your account
Track your gameplay progress, streaks, and daily results
Enable the friends, challenges, and crown features
Send you account-related emails (email verification, password reset)
Detect and prevent abuse of our systems (e.g., automated bots, spam)

We do not sell your information, and we do not use your data for advertising.

Third-Party Services

We use the following third-party services to operate MemoTilt. Each has its own privacy policy governing how they handle data on our behalf:

Google Firebase (Authentication, Firestore Database, Realtime Database, Cloud Functions, App Check) - provides our account system, data storage, and bot protection. Firebase Privacy Policy
Resend - delivers our transactional emails (email verification and password reset links). Resend Privacy Policy
OpenAI - used to help generate game content (puzzles, word banks). This process does not involve your personal or account data. OpenAI Privacy Policy

Data Retention

We retain your account and gameplay data for as long as your account is active. If you delete your account, we permanently delete your profile, gameplay data, friend connections, and any associated files promptly - this happens automatically as part of the deletion process, not on a delayed schedule.

Some internal records used for abuse prevention (such as rate-limiting counters) are automatically deleted on a short rolling basis and are not tied to your visible account data.

Your Rights and Choices

Change your display name at any time from your account settings.
Delete your account at any time from your account settings. This permanently removes your profile, gameplay history, friend connections, and any stored files, and cannot be undone.
Contact us with any privacy questions or requests at [email protected].

Children's Privacy

MemoTilt is [not directed at children under 13 / intended for a general audience - CHOOSE AND EDIT]. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us at [email protected] and we will delete it.

Security

We use industry-standard practices to protect your information, including encrypted connections, access controls that restrict data to your own account, automated bot and abuse protection, and rate limiting on sensitive actions. No method of transmission or storage is 100% secure, but we work to protect your information using these measures.

Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the app or by updating the "Last updated" date above.

Contact Us

If you have questions about this Privacy Policy or your data, contact us at [email protected].