Privacy policy

This policy describes the Corner Match iPhone and iPad app. Effective date: October 30, 2026.

Local play

Local Play, Watch, the tutorial, saved games and preferences work on your device without an account. Corner Match has no advertising, analytics, cross-app tracking, subscriptions or in-app purchases. Local games and preferences are not sent to the multiplayer service.

Private Table multiplayer

Private Table is optional and requires an internet connection. It sends your chosen display name and the shared match state to the Corner Match game service so invited players can play and reconnect. Match state includes the board, well, scores, moves, turns and each player’s private hand. A player receives only their own hand, public match information, opponent hand counts and the remaining-well count.

The service uses a random participant identifier and stores a one-way verifier for a cryptographic reconnect token. The full reconnect token is stored in the device Keychain and sent over HTTPS to authenticate Private Table requests; the service stores only its one-way verifier. A six-character invite code lets invited players find a room and should be shared only with people you intend to invite.

Security and abuse prevention

The service uses a keyed, one-way network-address hash to limit room creation and repeated incorrect invite-code attempts. Application code does not store the raw network address. Command identifiers, revisions and one-way request fingerprints are retained with a room to make retries safe and reject stale or duplicated actions.

Retention and deletion

When a host closes a room, the service immediately replaces it with a minimal closed-room record that contains no game state, private hands, guest credentials or player-entered display names. The record remains accessible to the service for safe close retries for up to 24 hours. After 24 hours it becomes inaccessible. Inactive lobby rooms expire after 24 hours and inactive games after 7 days. A bounded hourly cleanup physically deletes expired room records and short-lived abuse-prevention records; a backlog or service interruption may delay that deletion.

Corner Match uses Netlify to host the multiplayer service and database. Netlify may retain infrastructure access logs and backups under its own security, retention and legal obligations; these are separate from Corner Match’s in-app room cleanup.

Information not collected by Corner Match

The app does not request or collect email addresses, phone numbers, contacts, photos, audio, payment or financial data, health data, precise location, advertising data, or browsing or search history. It does not sell personal information or use multiplayer information for advertising or tracking.

Your choices and questions

You can play locally without using Private Table. A room host can close a Private Table from the app to remove its active match data. For a privacy question or deletion request, email jeff.glading@gmail.com. Include only the room information needed to locate the request; never email a reconnect token.

Device data

Private Table reconnect credentials are stored separately in the device Keychain and are removed by Corner Match after a successful leave or room close. Ordinary local game data and preferences use the app’s local storage. Device and Keychain backups are managed separately by Apple.