At a glance: our apps need no account and collect no personal data. This website uses anonymous, aggregate analytics only. We run no ads today, never sell data, and never track you across other companies' apps or sites. The rest of this page spells that out properly — what we handle, why, who processes it, and the rights you have over it.
Effective July 3, 2026 · replaces the June 27, 2026 version
This policy covers Animum Rege Studio — the website at studio.animumrege.com and our apps, including the One Tap Arcade games (such as Stack Surge). For data protection laws like the EU and UK GDPR, Animum Rege Studio is the data controller for the little data described here. Reach us any time at hello@animumrege.com.
Our games work with no account, no login, and no personal data collection. High scores and progress are saved in your device's local storage — on your device, not on our servers, and not tied to you. The apps do not read your contacts, location, photos, or advertising identifiers. Delete an app and its local data goes with it.
When you challenge a friend, the link carries only the game and the score to beat — never anything about you. Opening a challenge link reads those two values to show "beat this score," and nothing more. Sharing happens through your device's own share sheet; we never see who you send it to.
studio.animumrege.com records anonymous, aggregate usage events — for example, how often a round starts or finishes, or whether an opened challenge link becomes a play. Events carry a random identifier generated on your device that is not linked to your name, email, or any real-world identity, and an allow-list drops everything except a small set of gameplay values. Where a law treats such a random identifier as personal data, we handle it under this policy. Our web server also keeps short-lived technical logs (such as IP addresses) for security and reliability, as virtually every website does.
We use the data above for exactly three purposes: to run the site and apps (serve pages, resolve challenge links), to understand aggregate play so we can improve the games, and to keep the service secure. Under the GDPR our legal bases are legitimate interests (operating and improving a service that touches almost no personal data) and, where a law requires it for a specific feature, your consent. We make no automated decisions about you and build no profiles.
We do not sell personal data, and we do not share it for cross-context behavioral advertising — as those terms are defined by the California Consumer Privacy Act and similar US state laws. The only third parties that touch data are service providers acting on our instructions: Microsoft Azure hosts the site and processes analytics (Application Insights), and Apple's App Store / Google Play deliver the apps under their own policies. We would disclose data if a law validly required it — though with no accounts, there is very little to disclose.
Our apps and site show no ads and contain no advertising SDKs. If a future release adds advertising, we will update this policy before it ships, name the advertising partners, and ask your permission where the law or platform requires it — including Apple's App Tracking Transparency prompt on iOS and consent banners where GDPR applies. Any future ads in our games would default to contextual (based on the game you're playing), not behavioral (based on you).
Game progress lives on your device for as long as you keep the app. Anonymous analytics events are retained in aggregate form for up to 24 months, then deleted; server logs are kept only briefly. Everything in transit uses HTTPS, and access to our infrastructure is restricted and credentialed. Because analytics are processed on Microsoft Azure, data may be stored in the United States or other countries; transfers from the EU/UK rely on safeguards such as the EU–US Data Privacy Framework and standard contractual clauses.
Depending on where you live (EU/UK GDPR, California CCPA/CPRA and similar state laws, and others), you may have the right to access, correct, delete, or receive a copy of personal data, to object to or restrict processing, to withdraw consent, and to complain to your data protection authority. Email hello@animumrege.com and we'll respond within the time your law requires — honestly, for most requests the answer will be "we hold nothing about you." We honor these rights regardless of where you live, and we never discriminate against you for exercising them. Since we don't sell or share data, there is nothing to opt out of — but we respect Global Privacy Control signals should that ever change.
Our games are suitable for all ages and are not directed at children, and we knowingly collect no personal data from anyone, including children under 13 (COPPA) or the age of consent where you live. There are no accounts, no chat, no user-generated content, and no behavioral advertising. If you believe a child has somehow provided us personal data, contact us and we will delete it.
When this policy changes, we update this page and its effective date, and keep a note of what replaced what. For a material change — like introducing advertising — we'll say so prominently on the site and in the affected app's store listing before the change takes effect.
Questions, requests, or concerns about privacy: hello@animumrege.com. We read everything.