Quirkascade Privacy Notice

Version 2026-10-26.2 · Effective October 26, 2026

Who handles your information

Infinitum Imagery LLC is responsible for Quirkascade, branded as Infinitum Pittsburgh. Contact kdoyle@infinitumimagery.com for privacy questions, requests, account problems or suspected child accounts. This notice explains the current release, not hypothetical future ad or subscription practices. If you email support, we use your message and related correspondence to handle your request; ask us about access or deletion of that correspondence as well.

Guest play and device storage

Guest play is available on web, iOS and Android without an account. Your device stores puzzle progress, personal records, palettes and sound/accessibility settings. Clearing browser/app data can erase these. The web host processes network and security information needed to serve the game. Account features initialize Firebase when you choose them; previously connected accounts may reconnect to resume their requested services. We do not currently use advertising or behavioral-analytics SDKs.

Account and age information

If you create an account, Firebase Authentication processes your email, password and authentication information for sign-in, email verification and password reset. Passwords are handled by Firebase Authentication; they are not stored in the game database or acceptance record. The date you enter into the age screen is evaluated on your device and is not sent to our game service or stored by the game. We record your affirmative adult-eligibility/capacity statement, accepted Terms version, Privacy Notice acknowledgment, document hashes and server time against your account. A failed age screen may leave a device-only restriction marker; it does not create an account. This is self-declared screening, not identity verification.

Gameplay and social data

Signed-in journey and daily clears send a puzzle identifier and launch angle for server replay. We store verified results, unique clears, your assigned player code, connections and requests, invitation attribution, badge eligibility, account/profile creation times and usage limits. Other signed-in players see player codes, ranked scores and earned badges, not your email. Your connection/request list is returned to you; requests disclose your player code to the recipient. We do not upload your contacts or provide public chat or photo uploads.

Cloud saves

If you request a backup or enable automatic backup, we store journey position and shuffle seed, local scores and stars, trial records, achievement counters and daily-clear history. Automatic uploads wait briefly after play while open and online and may retry when you return. Newer cloud revisions pause uploads. Restore is an explicit choice and keeps a recovery copy on the device. Cloud saves do not establish public rankings or paid entitlements.

Safety and administration

Blocking stores the player codes you block, removes connections and hides rankings between those accounts. Reports contain reporting/reported player codes, a selected reason, time and review status, and are accessible to the owner for moderation. Owner-control changes and report review create restricted audit records. Authentication, hosting and backend providers also process operational/security logs, which can include network addresses and request metadata. Do not put sensitive information in a player report or send us passwords.

Purposes and legal grounds

We process information to provide the account, verify results, deliver requested saves/social features, prevent abuse, handle requests and operate securely. Where applicable law requires a legal basis, account/service processing relies on performance of the service agreement where necessary; security, fraud prevention and service administration rely on legitimate interests where appropriate; legal duties rely on legal obligations. We assess those interests against your rights. Optional features are choices, and any processing requiring consent will need a separate valid consent. Acknowledging this notice is not blanket consent to every possible use of information.

Service providers and international processing

Google Firebase supplies authentication, hosting, Cloud Functions and Firestore. Our game database uses a United States multi-region location, and the callable service operates in a United States region; Google support and other service processing may occur in additional countries. Information may be disclosed to providers acting for the service, when required by law, or to protect rights and security. We do not currently sell personal information or share it for cross-context behavioral advertising. Google describes its service safeguards and international-transfer mechanisms at https://firebase.google.com/support/privacy and in its applicable data-processing terms. Contact us for information about safeguards relevant to your information.

Retention

Account/profile data, verified results, cloud saves and account-agreement records are kept while the account is active and are removed through account deletion. Deletion also removes reports involving that player code. Reports are scheduled for expiry 180 days after submission, or 90 days after review; restricted admin audit records are scheduled for expiry after 180 days. Expiry is asynchronous rather than instantaneous. Google-managed operational logs, backups and authentication-service retention follow the provider's applicable service settings and deletion processes. Device-only copies stay until you clear them. Information already copied or shared by another player may remain outside our control. We will explain any legally required retention if it applies to your request.

Your choices and rights

You can play as a guest, decline online account terms, sign out, disable automatic backup, block/unblock players, export your account data, or delete your account. Signing out does not delete device progress. Depending on your location, you may have rights to access, correct, delete or receive a copy of personal information, restrict or object to processing, withdraw consent where used, appeal a request decision, and complain to a privacy regulator. Email kdoyle@infinitumimagery.com; identify your account and request but do not send your password or identity documents unless a secure, proportionate verification method is agreed. We respond within applicable legal deadlines and may verify account ownership. Declining new Terms does not prevent these requests.

Children and younger players

Online accounts are restricted to adults aged 18 or older who can legally agree to the account Terms. We do not offer a parental-consent account system in this release and do not knowingly permit child accounts. Guest availability and a non-mature content rating do not remove children's privacy obligations. If you believe a child's personal information is in an account, contact kdoyle@infinitumimagery.com so we can investigate and take appropriate action. We do not serve ads, targeted advertising or marketing messages in this release.

Future features and changes

Ads, paid purchases, subscriptions and analytics tracking are not active. Before introducing them, we will update the relevant disclosures and implement applicable consent, audience, store and withdrawal controls. Terms acceptance does not opt you into them. We will identify material notice changes and provide notices or choices required by law. The version and effective date below identify this notice.

Public usernames

You choose a public username for leaderboards and friend displays. We store it with your account and reserve its lowercase form to prevent duplicates. Your stable invitation/player code remains available for invitations, blocking and reporting. Username reservations are removed when the account is deleted. Do not put your real name or private contact information in a username. After account setup and email verification, your device progress is backed up automatically unless a different cloud save requires your choice. You can turn automatic backup off in Orbit. Detailed local achievement counters and device settings are not currently included in cloud backups.