Privacy Policy

The TimeLine daily history puzzle game (the “Service”) is operated by Timmie Hemmingsson, a sole trader in Sweden, trading as Vireo, at Vistorp Kullen 1, 521 95 Kättilstorp, Sweden. That person is the data controller under the General Data Protection Regulation (GDPR), and is who “we”, “us” and “our” mean below. This Privacy Policy explains what personal data we collect, how we use it, where it is stored, and the rights you have under the GDPR.

1. Data We Collect

• Email address: Used for account creation, authentication, and transactional emails (password resets, purchase confirmations, and a renewal reminder before an annual plan renews).
• Profile: Your username, and optionally a display name, a short bio (shown only to you) and your country. Your username and the name and score you choose to publish appear on the leaderboard.
• Usage analytics: We use PostHog to collect anonymized and pseudonymized analytics such as feature usage, session duration, and funnel events. PostHog stores it in Frankfurt, Germany, and discards your IP address when it arrives. Only if you say yes when TimeLine asks, on the website or in the app.
• Crash reports: We use Sentry to receive automated crash and error reports, which may include device information and stack traces. No personal data is intentionally included in crash reports, and Sentry is configured not to store IP addresses.
• Purchase history: Records of subscription payments processed by Stripe (web) and Google Play Billing (Android), including transaction IDs and plan type.
• Game data: Puzzle results, scores, days played, badges earned, and multiplayer game history.
• Launch-note email address: If you ask for the launch note on our website, we store the address you enter, the project you asked about, your language, and where the request came from (the campaign parameters in the link you used). We send one confirmation email first; unconfirmed addresses are deleted after three days. Confirmed addresses are kept with our email provider, Resend, until you unsubscribe, which you can do from any email we send.
• Push notification token: If you turn on notifications in the app, the device token Expo’s push service needs to deliver them. Deleted when you delete your account.
• Feedback: What you write in the feedback form, with your account id. It is stored, and also emailed to us through Resend so it gets read.
• Shared results: Share links you create, and the image generated for them. Multiplayer game history includes the usernames of the other players in those games.
• IP address: Used to limit requests and sign-in attempts; see §7.

If you sign in with Google, Google sends us your name, email address and profile picture. We do not store the picture. Our sign-in system (Appwrite) keeps the access token Google issues, and a refresh token if Google issues one, with your sign-in record. This comes from Google, not from you, and is used only to create and run your account (Art. 6(1)(b)).

An email address (and a password, unless you sign in with Google) is required to create an account; without it we cannot provide the Service. Payment details are needed only if you subscribe, and go to Stripe or Google Play. Everything else — profile fields, notifications, analytics, feedback, sharing, the launch note — is optional.

2. Data Storage

Your data is stored and processed by us and the following providers. Where any of them handles data outside the EU, see §8.

• Appwrite: — Primary database and authentication. Self-hosted on our own server in Sweden.
• Cloudflare: — Web hosting and edge content delivery, and storage (R2) of the encrypted nightly database backups. Data is processed at edge locations per GDPR-compliant terms.
• PostHog: — Product analytics, stored in Frankfurt, Germany (PostHog EU).
• Sentry: — Error monitoring and crash reporting. Reports are stored in Frankfurt, Germany.
• Have I Been Pwned: — When you choose a password, we check it against Have I Been Pwned’s list of passwords exposed in data breaches. The check is made from our server, and only the first five characters of a hash of the password are sent, never the password itself.
• Stripe / Google Play: — Payment processors. Payment card details are handled entirely by these providers and never touch our servers. If you use the withdrawal form at /withdraw, the name and receipt email you enter, and when we received it, are recorded on your subscription at Stripe.
• Resend: — Transactional email, feedback notifications and the launch-note list. Mail is sent from Ireland; Resend keeps account data, email metadata and logs in the United States.
• Expo: — App updates, and delivery of push notifications (through Apple and Google).
• Google: — Sign-in with Google, and Google Play billing, both under Google’s own privacy policy.

3. Legal Basis

We process personal data under the following legal bases under GDPR Article 6:

• Performance of a contract (Art. 6(1)(b)): Creating and managing your account, recording game results, and processing payments.
• Legitimate interests (Art. 6(1)(f)): Crash reporting to improve the Service; using IP addresses to limit requests and prevent abuse; reading and acting on feedback you send.
• Consent (Art. 6(1)(a)): Usage analytics (PostHog), push notifications and the launch note — only where you have said yes. You may withdraw consent at any time in Settings; after a no, nothing more is sent. Withdrawing does not affect processing that happened before.
• Legal obligation (Art. 6(1)(c)): Keeping accounting records of payments (bokföringslagen), and recording a withdrawal you send through the withdrawal form, which distansavtalslagen (2005:59) 2 kap. 10 a § requires us to confirm.

We do not make decisions about you based solely on automated processing that produce legal effects or similarly significantly affect you (Art. 22). Scores, badges and rankings are part of the game.

4. Your Rights Under GDPR

You have the following rights regarding your personal data:

• Right of access (Art. 15): You can request a copy of all personal data we hold about you.
• Right to erasure (Art. 17): You can request deletion of your account and all associated data. This can be done through the app’s account settings or by contacting us.
• Right to data portability (Art. 20): You can request an export of your data in a structured, machine-readable format (JSON).
• Right to rectification (Art. 16): You can correct inaccurate personal data.
• Right to object (Art. 21): You can object to processing based on legitimate interests.
• Right to restrict processing (Art. 18): You can request that we limit processing of your data in certain circumstances.

You can object at any time, on grounds relating to your particular situation, to processing based on our legitimate interests (crash reports, abuse prevention, feedback handling). We will then stop unless we can show compelling legitimate grounds that override your interests, or need the data for a legal claim.

To exercise any of these rights, email us at support@aver-web.se. We aim to respond within 30 days. The GDPR gives us one month from receiving the request (Art. 12(3)), extendable by two further months for a complex one — 30 days is our own, slightly tighter, target.

5. Cookies

We use the absolute minimum number of cookies necessary for the Service to function:

• Authentication cookies: Set by Appwrite Auth to keep you logged in. These are strictly necessary and cannot be disabled.
• PostHog analytics: Only after you agree, PostHog uses first-party cookies/local storage to identify sessions. We do not use third-party tracking cookies, advertising cookies, or marketing pixels.
• Settings on your device: Your answer to the analytics question, text size, and your leaderboard and reminder choices are kept on your device so they survive a reload. When you ask for a password reset, the address is kept on your device for up to an hour and deleted as soon as the reset screen has used it. Keeping these on your device sends nothing to us; the leaderboard and reminder choices are also saved with your account, because the server acts on them.

We do not sell your data to third parties. We do not use advertising cookies or tracking pixels from advertising networks.

6. Data Retention

We retain your personal data only as long as necessary to provide the Service and comply with legal obligations:

• Account and game data: retained until you delete your account.
• Analytics events: kept for 12 months in PostHog.
• Crash reports: kept for 30 days in Sentry.
• Feedback: kept for 12 months, or until you delete your account if that comes first; the copy emailed to us is deleted from our mailbox after 12 months.
• Push tokens: until you delete your account.
• IP-based rate-limit counters: until their window ends, at most 15 minutes.
• Launch-note addresses: unconfirmed, three days; confirmed, until you unsubscribe.
• Transaction records: kept until the end of the seventh year after the calendar year in which the financial year closed, because bokföringslagen (1999:1078) 7 kap. 2 § requires it.
• Two copies of the database are made every night, each encrypted with a key only the owner holds: one on a second disk in the same machine (kept 14 days) and one with Cloudflare (R2) (kept 30 days). A restore was tested on 13 October 2026.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including encryption in transit (TLS), access controls, and regular security reviews. Your records are written and read through our server rather than directly by the app, and the collections that hold them carry per-user read permissions. The leaderboard is the deliberate exception: it shows the name and score you chose to publish, and nothing else. Every request carries your IP address. We use it only to cap requests and sign-in attempts per address, in short-lived counters (at most 15 minutes), so that accounts cannot be guessed and the Service cannot be flooded.

8. International Transfers

Our database and sign-in system run on our own server in Sweden. Some providers are US companies, and part of what they handle is stored or can be reached in the United States: Cloudflare, Stripe, Sentry, PostHog, Resend, Expo and Google. Each of them is certified under the EU–US Data Privacy Framework, which the European Commission has found to ensure adequate protection (Implementing Decision (EU) 2023/1795, Art. 45 GDPR); we checked the official list on 10 October 2026. Where a transfer is not covered by that certification, it relies on the European Commission’s Standard Contractual Clauses (Art. 46(2)(c)). You can request a copy of these safeguards at support@aver-web.se.

9. Children’s Privacy

The Service is not directed at children under the age of 13. We do not knowingly collect personal data from children under 13. If you believe we have collected data from a child under 13, please contact us and we will delete it immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice in the app or by email. The “Last updated” date at the top of this page indicates when the policy was last revised.

11. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:

You also have the right to lodge a complaint with the Swedish supervisory authority, Integritetsskyddsmyndigheten (IMY), if you believe we have not handled your data in accordance with the GDPR.