Build by Nonogram — Privacy Policy

Last updated: 16 August 2026

Who we are

Build by Nonogram is published by OFT Games LLC (Georgia, USA). Privacy questions go to privacy@otfdp.com.

What we collect

There is no sign-up and no login. The first time you open the game it creates an anonymous account — a randomly generated identifier. It is not your name, email address, phone number, Apple ID or Google account, and it is not linked to any of them. It exists so that what you buy and what you earn survive a reinstall, and it is created automatically.

Held against that anonymous account, on our backend:

• Energy — your current balance, its maximum, and when it last refilled
• Progression — the lifetime total of voxels you have solved
• Entitlements — which packs you own, and the store receipt for each

Kept only on your device:

• Puzzles in progress — the marks you have made on unfinished nonograms
• Build progress — how far you are toward your next model, how many you have finished, and which models are in your trophy room
• The daily puzzle’s completion record, and how far through the tutorial you are
• Settings — sound, haptics, auto-pick, voxel size, pinch sensitivity, reduced motion, high-contrast clues, and notification preference

Deleting the app removes everything in that second list permanently.

Advertising. The game is free and shows ads, which is how it is paid for. Our ad partner is Google AdMob, and AdMob may read your device’s advertising identifier (IDFA on iOS, GAID on Android) to deliver and measure ads. On iOS we are required to ask your permission first, via the App Tracking Transparency prompt. You can decline; ads will still be shown, but will not be personalized, and the game plays exactly the same either way.

Ads are not enabled until you have finished the tutorial, so nothing is requested during your first minutes with the game.

Purchases. Packs are sold through the Apple App Store on iOS and Google Play on Android, and the store handles payment entirely. We never see your card details or billing address. We receive confirmation that a purchase succeeded, the identifier of what was bought, and the store receipt — which we keep against your anonymous account, so that what you paid for can be unlocked and restored if you reinstall.

We do not collect names, email addresses, postal addresses, phone numbers, contacts, photos, microphone or camera access, or precise location.

We do not use cookies.

How we use what we collect

Game state is used only to run the game — to show your progress, restore an unfinished puzzle, meter the energy that paces play, and unlock the packs you own. What is kept on your device stays there; what reaches our backend is only what is listed above.

The advertising identifier is used only by our ad partner, to select and measure ads. We do not receive it, and we do not combine it with anything.

We do not sell personal data.

Your choices about ads

• iOS — decline the App Tracking Transparency prompt, or change it later in iOS Settings → Privacy & Security → Tracking. Ads become non-personalized.
• Android — open Settings → Privacy → Ads to opt out of ad personalization or delete your advertising ID entirely.
• EEA, UK and Switzerland — we present Google’s UMP consent form before ads begin. You may withdraw or change consent at any time via Settings → Privacy options inside the game.

Turning off personalization does not remove ads, and does not restrict any part of the game.

Third parties

• Supabase — backend storage for the anonymous account — Privacy Policy
• Google AdMob — advertising — Privacy Policy
• Apple App Store — distribution and purchases on iOS — Privacy Policy
• Google Play — distribution and purchases on Android — Privacy Policy

That is the complete list.

Your rights

You may ask us to access, correct, export or delete what we hold. Email privacy@otfdp.com and we will respond within 30 days.

Because accounts are anonymous, we cannot find your record from your name or email address. Please include the account ID shown in the game under Settings → Account. Without it we may be unable to locate your data, and if you have already deleted the app the identifier is gone with it.

Deleting the app removes everything held on your device. Data held by Google in connection with advertising is subject to Google’s own policy, linked above.

California residents (CCPA/CPRA)

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including:

• The right to know what personal information we collect, use, and disclose
• The right to delete your personal information
• The right to opt out of the sale or sharing of your personal information. We do not sell or share your personal information as those terms are defined under CCPA/CPRA. Personalized advertising is off unless you affirmatively allow it, and you may withdraw that permission at any time as described under “Your choices about ads”.
• The right to non-discrimination for exercising your privacy rights

EEA, UK and Switzerland (GDPR/UK GDPR)

Our legal bases are:

• Performance of a contract — running the game and delivering what you buy
• Consent — for personalized advertising, where required. Consent is collected through Google’s UMP form and can be withdrawn at any time via Settings → Privacy options
• Legitimate interest — serving non-personalized ads to fund a free game

You retain the rights of access, rectification, erasure, restriction, portability and objection under Articles 15–21, and the right to lodge a complaint with your local data protection authority. Requests to privacy@otfdp.com are answered within 30 days.

International data transfers

OFT Games LLC operates from the United States, and our backend is hosted there (Supabase, us-west-1). If you play from outside the United States, the account data described above is transferred to and processed in the United States. Where required, those transfers rely on the European Commission’s Standard Contractual Clauses as implemented by our providers.

Advertising requests are handled by Google, which operates internationally and documents its own transfer safeguards in the policy linked above.

Children

The app is rated for general audiences (4+ on the App Store), but it is not directed at children under the age of 13, and we do not knowingly collect personal information from anyone under 13.

If we learn at any time that we have collected the information of a child under 13, we will immediately destroy that information unless we are legally obligated to retain it.

Security

Traffic between the game and our backend is encrypted in transit using TLS, and server-side records are protected by access rules that let an account read only its own data. On-device data is held in your device’s own protected storage. No method of storage or transmission is completely secure, and we make no absolute guarantee.

Data retention

On-device data lives on your device for as long as the app is installed. Deleting the app deletes it permanently — we hold no copy of it and cannot restore it.

The anonymous account, and the energy, progression and entitlements held against it, are kept while the account exists, so that a reinstall can restore what you bought. They are deleted on request, as described under “Your rights”.

Purchases are also recorded by Apple or Google against your store account, and can be recovered with Store → Restore Purchases even if our record of them is deleted.

Changes to this policy

We will update this page when the app changes what it does, and revise the date above. Material changes will be surfaced in the app.

A planned change that will require an update before it ships: optional accounts for carrying progress between devices.

Governing law and disputes

This policy is governed by the laws of the State of Georgia, USA.

We will attempt in good faith to resolve any dispute informally. Failing that, disputes will be resolved by binding individual arbitration administered by the American Arbitration Association, seated in Savannah, Georgia. Disputes are handled individually and not on a class-wide basis.

Either party may bring a qualifying claim in small claims court in Chatham County, Georgia.

If you live in the EU, EEA, UK, or another jurisdiction with mandatory consumer protections, nothing here waives your statutory rights or your right to bring proceedings in your local courts.

Contact

privacy@otfdp.com