Privacy Policy — Wager Tic-Tac-Toe
Last updated: 29 September 2026
The short version
Wager Tic-Tac-Toe does not ask who you are, and does not know. There is no account, no sign-in, no email address, no advertising, and no tracking of you across other apps or sites. Nothing you type into the app — including the player name used for your own stats screen — ever leaves your device.
If you agree to it, the app sends anonymous information about how games were played: the bids made, who won, which difficulty was chosen. That is used to make the computer opponent better. You can turn it off at any time, and you can delete it.
What stays on your device, always
- Your player names, for the stats screen.
- Your win/loss history.
- Your settings.
- The local game log.
None of this is transmitted anywhere. Deleting the app deletes all of it.
What is sent, if you agree
No game data is sent unless you choose "Share anonymous stats". You are asked once, plainly, and can change the answer in Settings → Privacy whenever you like. If you decline, no game records are transmitted and none are stored for later transmission.
One thing still uses the network whether or not you agree, because you have to ask for it. If you beat the hardest level and choose to send us the replay, that replay is sent — that is the whole point of the button. Everything else in the game works with no connection at all: playing the computer, pass-and-play, the daily puzzle, your statistics and the tutorial.
If you do agree, each completed game sends:
| What | Example | Why |
|---|---|---|
| A random install ID | 9f2c… | Counts distinct installs and games per install |
| When you played it | 1787100000 | Your device's clock at the end of the game. Kept only to spot devices whose clock is wrong, which would otherwise scramble every date in the data. The server records its own time separately. |
| A one-time record ID | 4b81… | Random, and different for every game. It exists so that if a record is sent twice — which happens whenever a reply is lost on a bad connection — the second copy is discarded instead of counting your game twice. |
| Data format version | 1 | Which shape this record is in, so old records stay readable after an update. Nothing about you. |
| Difficulty | Casual | Checks each level is as hard as intended |
| Game mode | ai, daily, pvp | Separates playing the computer from the daily puzzle and from two people sharing one device (pvp is an old internal name for pass-and-play) |
| Starting chips | 70 | Game length affects difficulty |
| Result | win / loss / draw | The main balance signal |
| Number of rounds | 6 | How long games run |
| The bid sequence | [[22,20,1],…] | The single most useful signal for tuning the AI |
| Typical time to decide a bid | 2400 (ms) | One number per game — the median. Used to tell a person playing from a script, so the public "games played" count stays honest. It is a fact about the game, not about you. |
| App version | 1.0.0 | Compares behaviour across releases |
| Operating system | iOS | Spotting platform-specific problems |
| Language | en | Which languages to support (language only, never region) |
| Phone or tablet | phone | Finding layout problems |
| Country | US | Rough sense of where the game is played |
You can see the exact data before it is ever sent: Settings → Privacy → "See what would be sent" shows the raw contents.
What is never collected
- Your name, email address, phone number, or any contact details
- Any advertising identifier, and any cross-app or cross-site tracking
- Your precise location — only the country, and see below for how
- Your age or your date of birth
- Your gender
- Photos, contacts, microphone, camera, health, or files outside the app
- Your IP address (explained below)
If you claim a win over the hardest level
Beating Unbeatable? offers a button to send us the game. If you press it — and only if you press it — that record is larger than the one above, because it has to be checkable: every round's board, both bids, the square played, the chips each side held, and how long each bid took. We replay it on the server to confirm the game really happened under the rules.
The button shows you the exact contents before it sends. There is nothing about you in it: it is a description of a game of noughts and crosses.
We do not sell data, share it with data brokers, or use it for advertising. There is no advertising in this app.
About the install ID
The app generates a random value the first time it runs and keeps it on your device. If you agree to share games, our server issues a signed replacement at that moment — and only then; if you never agree, the app never asks for one. The signed version exists so that a claimed win over the hardest level can be checked, and it replaces the local value only if nothing has been sent yet.
Either way it is not your name, your Apple/Google account, your phone's serial number, or any advertising identifier. It cannot be connected to you or to anything you do in any other app.
Deleting and reinstalling the app produces a completely new ID, with no link to the old one. Its only purpose is to answer "how many separate installs are there" and "how many games has this install played".
About the country, and your IP address
Any internet request necessarily reveals an IP address to the network. The hosting provider (Cloudflare) resolves the two-letter country code at its edge, and that country code is the only thing we keep.
Your IP address is never logged, never stored, and has no column in our database. Server request logging is switched off for this reason.
There is one place our code touches an address at all, and it is better described than glossed over. Online play against a friend is rate-limited, so that one machine cannot flood the matchmaking by creating unlimited games. To do that the server reads the address for the length of a single request, combines it with a secret and hashes it, and counts requests against that hash for a sixty-second window. The hash cannot be turned back into an address without the secret.
The address itself is never written down anywhere. The hash is used as the name of a small counter that holds two numbers — when the window started and how many requests have arrived — and that counter erases itself two minutes later. Nothing about any of it is logged, none of it reaches our database, and none of it is ever returned to anyone. This applies to online play only.
(This paragraph said "nothing stores it", which was loose enough to be worth fixing: the address is not stored, and the hash is briefly a lookup name. Saying which is which is more useful than an absolute, and this page is meant to survive being read by somebody holding the source.)
We store the country only — never a region, city, or coordinates.
Children
This game is suitable for children, and we have designed the data collection so that it stays safe for them. We do not knowingly collect personal information from anyone, of any age.
We deliberately do not ask for age, date of birth, or gender, and we collect no personal identifiers, precisely so that a child using this app is not put at risk. We believe this keeps us consistent with COPPA (US) and the GDPR's protections for children.
If you are a parent or guardian and have any concern about this, contact us at privacy@wagertictactoe.com and we will answer.
Deleting your data
Settings → Privacy → "Delete my shared data" does three things at once: erases everything queued on your device, asks our server to permanently delete everything ever received for your install ID, and issues your device a new random ID so nothing new connects to the old one.
We keep a record of the deleted ID by itself — with no game data attached — only so we can prove the deletion happened and so late-arriving data cannot recreate it.
One exception, and we would rather state it than bury it. If you sent us a win over the hardest level and our replay confirmed it, that one replay is kept — otherwise a claim we have published, or may yet publish, would have no evidence behind it. Everything in it that points at you is erased in the same moment: the install ID becomes forgotten, the country and app version are emptied, and the claim's own ID is replaced with a fresh one we generate, so nothing left in the record is a number you hold. What is left is the game itself: the moves, and how long each bid took. Claims our replay could not confirm are deleted outright along with everything else.
Turning the setting off also stops all collection immediately.
How long it is kept
After 12 months a game record loses everything that could connect it to you or to your device: the install ID, the country, the app version, the device clock, and the exact time, which is rounded to the day. What is left is the gameplay — which level, which chip total, the bids, how long they took and the result — which describes no one in particular, so we keep it: it is what the difficulty levels are tuned from. The record of your device itself is deleted after 12 months without play. A confirmed win over the hardest level is kept in that same stripped form for as long as the claim stands, because it is the evidence for it. Aggregate, non-identifying summaries (for example "how often beginners win") may be kept indefinitely, for the same reason.
Your rights
Depending on where you live (for example under the GDPR or the CCPA) you may have the right to access, correct, delete, or export your personal data, and to object to processing.
We hold no information that identifies you, so in most cases there is nothing to look up. The controls in the app — the on/off toggle, the data preview, and "Delete my shared data" — are provided so that you can act on those rights directly and immediately, without having to ask us or prove who you are. To ask a question, contact privacy@wagertictactoe.com.
Service providers
- Cloudflare — hosts the service that receives anonymous game data, and provides the country code.
- Apple and Google — if you buy the full version, the purchase is handled entirely by the App Store or Google Play.
We never see your payment details, and no purchase information reaches our servers. The app asks the store whether you already own the full version and the store answers on your device; there is no purchase endpoint on our side at all, and nothing about a purchase is sent to us. That is also why Restore Purchase works without any account with us — the record belongs to your store account, not to us.
There are no advertising networks and no social media integrations, and we have added no analytics SDK of our own. On Android, Google Play Billing brings some of Google's own libraries with it; anything they collect is Google's, under Google's policies, and it is not something we can remove while selling through Play.
Security
Data is sent over HTTPS. What we store is anonymous by design: nothing we keep about you has a name, an email address or an IP address in it — there is no column for any of them, so there is no personal data of yours to lose.
Two columns in that database do hold a name, and they hold ours: an audit trail recording which of us reviewed a claim, and which of us started the unbeaten-run counter. They are about the people running this, not the people playing it. We mention them because "no name anywhere in our database" would be easier to write and would not be true, and this page is meant to survive being read by somebody holding the schema.
Changes
The date at the top always reflects the current version, and this page is where a change appears.
The app records your answer as a plain yes or no, with no version attached to it — so a later edit to this page cannot quietly re-ask you, and it cannot quietly widen what you agreed to either. Your answer stands until you change it in Settings → Privacy. If we ever want to collect something this page does not already describe, that needs a new prompt in a new version of the app, not a new paragraph here.
Contact
Jacques S. Industries LLC privacy@wagertictactoe.com
Governing law: State of Oregon, United States