Your information

Privacy & account deletion

Effective 19 October 2026 · Operated by Mark Noecker

Local play

Local games need no account. The app keeps your local game and preferences on your phone. Deleting your online account leaves that independent saved game in place. Uninstalling the app can remove local data.

Private online games

Online play uses your email address and an account identifier to sign you in with an email code. The service stores game membership, invitations, boards, moves, scores, command confirmations and request counters. This information supports private play, reconnection, consistent game state and abuse limits.

You choose a unique player name that is stored with your account and shown to your assigned or invited opponents. Your sign-in email stays private unless you deliberately choose it as your player name. Player names are not public profiles. Online games have no automatic expiry in this release. Waiting invitations expire after 24 hours.

Finding other players

Build 27 adds unranked matching among signed-in beta players. The service stores your two- or four-player search, enrollment and resulting game, plus request receipts that let the app recover uncertain outcomes. A search reserves an ordinary waiting-game seat and continues while the app is closed or you are signed out. You cancel it explicitly; searches do not expire automatically in this release.

Assigned opponents see your chosen player name and game identity. Your authentication email, a queue-wide player roster and search receipts are not exposed to other players. Pending requests are stored separately on your phone for each account. Existing turn-alert permissions apply; matching adds no provider or new permission.

Account deletion stops matching immediately, cancels affected waiting games, and removes enrollment and request receipts when your account is removed. Your independent local save remains intact.

Optional turn alerts

Cornered asks for notification permission after sign-in when setup is needed. You choose whether to allow notifications; a previous denial remains controlled by your phone’s settings. The service stores a device token, platform and account/session association so it can send an alert when a turn becomes yours. Choosing not to allow alerts does not prevent play. Change your choice in your phone’s notification settings.

Google Firebase Cloud Messaging and Apple Push Notification service deliver these alerts. Delivery uses the device token, game identifier, turn revision, alert text and expiry. The text may include your opponent’s chosen player name and may appear on your lock screen. These services are used for app functionality; Cornered does not add Firebase Analytics or advertising tracking.

Queued turn events expire after 24 hours. Delivery records are removed within seven days after expiry when the scheduled cleanup runs. Events that no longer match the current turn are skipped. Signing out makes that session ineligible for new sends; revoked-session registrations are removed by the scheduled worker. Account deletion removes device registrations and recipient turn events. Alerts already delivered to a phone remain subject to that phone’s notification controls.

Services that help run Cornered

• Supabase provides account authentication, the private game database, server functions and live game updates.
• Google Play handles Android beta distribution. Google Firebase Cloud Messaging routes optional turn alerts to your devices.
• Amazon Web Services SES delivers transactional sign-in emails.
• Microsoft 365 through GoDaddy receives support email in the operator’s existing mailbox.
• Apple handles TestFlight distribution and, when you enable turn alerts, Apple Push Notification service delivery.
• OpenAI Sites and Cloudflare host these information pages.

Providers process connection and delivery information needed to operate their services. The current Supabase Free plan has no project database backups or point-in-time recovery enabled. Its dashboard provides one hour of Auth log access and one day of API and database log access. Those access windows do not prove that every provider copy is physically erased at the same time.

The game has no advertising, chat, user file uploads or added third-party analytics. These information pages contain no analytics scripts or forms.

When you delete your account

Start deletion in the app through Home → Account → Delete account. Signing out alone does not delete your account.

Accepted deletion cancels unfinished games and removes identifying account references from terminal games. Completed boards, moves and scores remain privately available to the remaining players. Your player name is omitted from subsequent game responses once deletion is prepared; an already-open game list updates on its next successful refresh. The saved player name, personal account information and account-specific command confirmations and counters are removed when deletion completes. Deleted or pending accounts cannot continue online play.

If deletion is interrupted

The app stores a random deletion identifier and a secret recovery capability on your phone. These let it check the same request after a restart, even when sign-in no longer works. Ordinary sign-up is blocked during recovery. A scheduled server worker also retries accepted deletion after the app is closed or uninstalled.

After completion, the server retains the random deletion identifier, a one-way digest of the recovery capability and the completed state indefinitely. This anonymous confirmation contains no account identifier, email, timestamps or operational metadata. It lets an old or interrupted client confirm deletion without recreating an account.

The app removes its recovery receipt only after confirmed completion and cleanup of its online data. Your independent local game remains separate.

Backups, logs and support messages

Automatic Supabase project backups are not enabled for this beta. The operator retains private application-database snapshots before selected backend updates. These snapshots may contain earlier game and account references. A deletion-safe restore procedure has not yet been accepted, so a snapshot must not be restored to the live service without preventing deleted identities or identifying game history from returning. Service providers may retain operational copies or logs beyond the windows visible to the operator, so this notice does not promise immediate removal from every provider system.

If you email support, your message and reply address are used to answer and investigate the report. Messages are kept only as long as they are useful for support and beta operation, subject to the Microsoft 365 account’s configured retention and backup behavior. You can ask the operator to delete a support conversation.

Questions?

Contact the operator at cornered@queuedforthought.com, or read the support information.