Privacy Policy

Fak Alserr · last updated 28 August 2026

Fak Alserr opens and plays with no sign-in, and we never ask you to type an email or a phone number. If you want your progress saved and played alongside your friends, you may optionally create an account with Sign in with Apple and choose a handle, which is shown to your friends. This page explains what data passes through the game, where it is kept, and who can see it.

What we never collect

We do not ask for your real name, phone number, or location, and we do not touch your photos or contacts. We send no notifications from our servers and store no push token. We never see your card details. We do not sell your data to anyone.

The advertising identifier (IDFA) is read only if you permit it yourself. See "Advertising and the tracking prompt" below.

Your identity in the game

• An account identifier: Firebase creates a random id for this installation on first launch, with no action from you, and it is the key everything below hangs on. It stays the same if you later link Game Center or Apple.
• Your email, if you sign in with Apple: we request only your email, never your name. Apple hands us the address once, at first authorization — or Apple's private relay address if you choose Hide My Email — and it is stored on your account record in Google's Firebase Authentication. The game itself never reads it, there is no email field anywhere in the game database, it appears on no screen, no friend can see it, and it goes to no advertiser or analytics service. It is tied to your account, which is why our App Store privacy label declares it as Linked to You.
• Your Game Center name, if you sign in there: Firebase's servers write the alias you chose with Apple onto your account record when the credential links. The app neither asks for it nor reads it.
• Your handle: the name you choose yourself. It is not your real name, it is unique across the studio's games, and it is public — your friends see it and it is stored on your account row. The whole game is playable without one.

What the game stores

• Your progress: the puzzles you have solved — each with its text, its author, your time, your mistakes and your reveals — your coin and attempt balances, your streaks, achievements and level. Kept on your device, with a copy on Firebase so it survives a reinstall. No other player can read that copy.
• Usage data: events such as "puzzle solved" or "shop opened", with device model and OS version. Linked to your account identifier, not anonymous, and read to find where the game is too hard or too dull.
• Crash reports: if the game crashes, Crashlytics sends a technical report. Not linked to you — we write no identifier on it.
• Per-puzzle counters: how often a puzzle was attempted, how often solved, and in what time. They carry no player identifier at all and no client can read them. We tune puzzle difficulty with them.
• Purchases: we store the effect — that ads were removed, or coins added — not a record of the transaction. Payment is handled entirely by Apple.
• Reports you file: if you report a player we store your identifier, theirs, and the reason you picked. There is no free text field, and no player can read the reports.

What other people can see

This is the most important section on the page, and we state it as it is rather than as we would like it to be.

• Your friends see your handle, your mark, your level, your streak and when you were last seen. Opening your profile also shows them how many puzzles you have solved, how many without a mistake, your best time, your average time, your longest streak, and how long you have been a member. These are totals computed on the server; your individual solve records are never handed to them — not which puzzle, not which quote, not when.
• Any signed-in player who knows your account identifier can read your account row: your handle, your mark, your level, your streak, your last-seen time, your invite counters, and who invited you. That row is not restricted to your friends. Your invite code is not on it — it is kept where only you can read it.
• And anyone you give your invite code to becomes your friend immediately, with no accept step from you: the code alone is the gate, and it is what opens the profile card above. So give it to the people you want to be seen by.
• None of this is open to the internet. Signing in to the game is required first, nobody can list or download the player base, and your own friends list is readable only by you.

Game Center

If you sign in, the game submits your level and streak to a leaderboard and your achievements to your account there, under your Apple alias. Who can see them is governed by Apple's settings, not ours. If you allow friends access, we read your friends list to see which of them play so we can credit your invites, and we store the identifiers of those already credited so a reward is never paid twice. We share the list with nobody. Declining Game Center blocks nothing, and you can withdraw the permission at any time in iOS Settings.

Advertising and the tracking prompt

The game shows Google AdMob ads.

We also buy advertising for the game itself, and to know which ad an install came from, iOS shows you a prompt asking permission to track. If you allow it, the advertising identifier (IDFA) is read and sent to Tenjin so the install can be credited to its campaign. If you decline, the identifier is neither read nor sent, and measurement stays aggregate through Apple's own system (SKAdNetwork). Nothing in the game itself changes either way, and you can switch the permission at any time in iOS Settings.

Whether an ad is personalised within AdMob follows your consent: in the EEA and the UK a Google consent screen (UMP) is shown before advertising starts, and your choice there decides. Google receives technical device data to serve, cap and fraud-check ads, governed by Google's privacy policy.

Interstitials begin at level 5, and rewarded ads are shown only when you ask for one. Buying "Remove Ads" or the starter bundle stops all of them permanently.

Processors

• Google — Firebase: authentication (which holds your email), progress sync, the functions that run accounts and friends, usage data, and crash reports.
• Google — AdMob and the User Messaging Platform: advertising and the consent screen.
• Apple: sign-in and the Hide My Email relay, Game Center, and payment.
• Tenjin: ad measurement: which campaign an install came from, when we buy advertising for the game. It receives the advertising identifier (IDFA) if you allow tracking, and receives progression and purchase events to measure whether a campaign paid. It stops measuring when you withdraw consent.

We use no others. This page previously listed "RevenueCat"; that was removed on 27 August 2026 because it was not true — its SDK is not in the app and it receives no player data.

Where it is processed

The database and functions run in the United States (us-central1), and ad measurement is processed there too. Using the game from outside it means your data is transferred there.

Notifications

If permitted, notifications are scheduled and delivered on your device. We send nothing from a server and store no push token.

Children

The game is not directed at children under 13 and we do not knowingly collect their data. If we learn otherwise, we delete what we hold. Note that the game shows third-party ads, and that a handle a player chooses is visible to others.

Your rights

• Delete your account: inside the game, Settings → Account → Delete Account. It erases your account row, your cloud save, your handle, and every friendship link on both sides. Deleting the app alone erases nothing on the server.
• Reset your progress: zeroes the game and keeps your account, handle and friends. Afterwards your friends see your level as zero.
• Withdraw consent: stops your figures being published, so they vanish from your friends' lists and your profile card refuses to answer; stops usage analytics, ad personalisation and campaign measurement at Tenjin, so nothing further is sent about you. To erase what was already sent, write to us and we will request it on your behalf. It does not remove your name from their lists, does not stop Game Center, and reaches our servers the next time you leave the app.

For anything else write to support@nakhell.com and we will respond.

What remains after deletion

We list it because "delete" should mean what it says:

• Your invite code is kept retired and ownerless, so it is never issued to anybody after you.
• Someone you invited may still have a record naming you as their inviter.
• An invite reward not yet collected may still carry your handle until its owner collects it.
• A report you filed, or one filed about you, stays with us.
• What Game Center and Google received before the deletion is governed by their policies.

Changes to this page

If it changes, the date at the top changes with it.