Tetrifold Privacy Policy

Scope and controller

This policy applies to Tetrifold 1.0 for iPhone, the localized Support and Privacy pages, and optional support correspondence sent to the address below.

The app and local data

The native Tetrifold app does not collect, transmit, sell, or share personal data. Its core gameplay works offline. Tetrifold has no developer-owned network client and makes no developer-owned network request. It has no account, advertising, analytics, tracking, crash-reporting SDK, third-party SDK, cloud sync, or purchase. Apple’s system-owned StoreKit may communicate with the App Store under Apple’s control when Tetrifold requests the rating or review interface described below.

The current FLOW session and personal best are stored in the app’s local Application Support directory. Two preferences are stored in UserDefaults: whether the first-use control legend has been shown and the marketing version in which Tetrifold last requested Apple’s system-owned App Store rating or review interface. These values remain on the iPhone and are not sent to Rica Harz.

After a major gameplay achievement, Tetrifold may ask StoreKit to present Apple’s system-owned App Store rating or review interface. Apple decides whether the interface appears. The request includes no gameplay data. Tetrifold does not learn whether the interface appeared or whether you submitted a rating or review.

To remove them, choose Delete App—not Offload App—in iPhone Settings. Offload App keeps the app’s documents and data. Delete App removes the local FLOW session, personal best, control-legend preference, and review-request preference from that iPhone. An Apple device backup may later restore an earlier copy. Rica Harz cannot access or remotely delete data stored on your device or in your Apple backup.

Optional support email and Microsoft Outlook.com

Tetrifold sends nothing automatically when you choose to contact support. Your mail app and email provider send the message. Rica Harz receives your sender address, any name you provide, the subject and message, attachments you choose, timestamps, and ordinary mail-routing metadata. Please send only the information needed to explain the issue. The app does not attach diagnostics or game data automatically.

The support mailbox is a consumer Outlook.com account. For this German account, the contracting entity is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Microsoft’s Privacy Statement identifies Microsoft Corporation and, for people in the EEA, the United Kingdom, and Switzerland, Microsoft Ireland Operations Limited as data controllers for Microsoft-determined processing. Microsoft is not described as Tetrifold’s processor.

• Microsoft Privacy Statement
• Microsoft Services Agreement
• Microsoft privacy support and requests

Static website and Vercel hosting

This static Support and Privacy site uses the verified Vercel Hobby team. Vercel’s Terms limit Hobby to personal or non-commercial use. The owner has expressly classified the present use of this static site as personal and non-commercial. Plan eligibility, provider roles, and this notice will be checked again if that use changes.

Vercel’s Data Processing Addendum applies only to Pro and Enterprise and does not apply to this Hobby plan. Tetrifold does not rely on that addendum and does not describe Vercel as its processor. Vercel Inc., 440 N Barranca Avenue #4133, Covina, California 91723, United States, independently determines the processing covered by its Privacy Notice, including System Data and other service-generated or account data.

To deliver and secure these pages, Vercel can process the IP address and IP-derived city, country, or network information; User-Agent, browser, device, language, and system configuration; requested host, path, query parameters, and referrer; timestamp, method, status, and request identifiers; edge or CDN region, cache, firewall, security, and deployment metadata; and operational diagnostics. Basic Edge Request and Observability events can exist even without visitor analytics.

Rica Harz does not enable Web Analytics, Speed Insights, cookies, advertising, profiling, forms, log drains, integrations, remote fonts, or third-party client scripts, and does not use Vercel data for advertising, profiling, or product analytics. These choices do not limit Vercel’s independent uses under its own documents.

• Vercel Privacy Notice
• Vercel Terms of Service
• Vercel Hobby plan
• Vercel Runtime Logs
• Vercel Hobby deployment-retention changelog
• Vercel Trust Center
• Vercel Privacy Request Center

Purposes and legal bases

Support correspondence is used only to answer, resolve, secure, and minimally document your request. The legal basis is the legitimate interest under Article 6(1)(f) GDPR in providing support and keeping a limited record of its resolution.

Website request data is processed on the basis of the legitimate interest under Article 6(1)(f) GDPR in reliably delivering and securing the static pages. If a specific legal obligation requires retention, Article 6(1)(c) GDPR may also apply. Microsoft and Vercel determine their own purposes and legal bases for their independent processing under their notices.

Retention and deletion

A support request is resolved 30 days after the final substantive reply if no follow-up arrives. Resolved correspondence is reviewed and deleted monthly, and no later than 12 months after that resolution date. A valid earlier deletion request is honored unless a documented legal hold or legal obligation requires retention.

Deletion removes the copies accessible in the support Inbox, Sent, Archive, Deleted Items, and recoverable-items area. Microsoft states that, after Deleted Items is emptied, items may remain recoverable or otherwise present in its systems for up to 30 days. Microsoft-controlled backups, security or legal copies, and other provider records may persist longer under Microsoft’s policies. Rica Harz cannot delete a copy held by your email provider or in your own mailbox.

Vercel’s dedicated Runtime Logs documentation currently lists one hour of dashboard runtime-log retention for Hobby. This static site has no Vercel Functions, and that one-hour figure is not a promise that all Edge Request, security, System Data, legal, or backup records are deleted within one hour. Vercel announced that, from 29 April 2026, Hobby deployment artifacts are generally capped at 30 days, excluding the 10 most recent production deployments and aliased deployments. These artifacts contain only the public static site files and no visitor submissions. This deployment-artifact rule is not a visitor- or request-log deletion schedule. Vercel retains its broader provider-controlled records under its Privacy Notice and Terms.

Recipients and international transfers

Support correspondence can be accessed only by Rica Harz or a documented authorized operator, your email provider, Microsoft and the affiliates or vendors it uses for Outlook.com, and public authorities where disclosure is legally required. Website request data can be processed by Vercel Inc. and the affiliates and service providers identified through its Privacy Notice and Trust Center. Rica Harz does not sell these data or disclose them for advertising.

Microsoft and Vercel operate internationally, including in the United States. Microsoft describes Standard Contractual Clauses, adequacy decisions, and the EU–U.S. Data Privacy Framework in its Privacy Statement. Vercel describes Standard Contractual Clauses, other lawful mechanisms, and its EU–U.S. Data Privacy Framework certification in its Privacy Notice. Because the Hobby deployment is not covered by Vercel’s DPA, this policy does not claim a controller-to-Vercel DPA or contractual safeguards under that DPA. Your own email provider’s terms govern its processing and transfers.

Your rights

Subject to the applicable legal conditions, you may request access, correction, deletion, restriction, or object to processing by emailing oneboardhq@outlook.com. Use the subject “Privacy request” and describe the request. A reply from the same address will normally be enough to verify you; only the minimum additional information will be requested if there are reasonable doubts. If you object to processing based on Article 6(1)(f) GDPR, that processing will stop unless compelling legitimate grounds override your interests, rights, and freedoms or the processing is needed for legal claims.

Requests are answered within one month. If a request is complex or several requests are made, this may be extended by up to two further months; the extension and reasons will be explained within the first month. If provider-held or immutable security data cannot be changed directly, Rica Harz will explain the legal or technical limit and, where possible, forward a valid request through Microsoft’s or Vercel’s supported privacy-request path.

Complaint to a supervisory authority

You may complain to any competent data-protection supervisory authority. The controller’s local authority is the Landesbeauftragte für Datenschutz und Informationsfreiheit Mecklenburg-Vorpommern, Werderstraße 74a, 19055 Schwerin, Germany.

Automated decisions

Tetrifold does not use personal data for automated decision-making or profiling. A major gameplay achievement may cause the app to request the system-owned App Store interface described above; this local gameplay rule has no legal or similarly significant effect. Microsoft and Vercel may perform independent automated security or service processing described in their own notices.

Contact and changes

For privacy questions or requests, email oneboardhq@outlook.com or write to the controller at the address above. This policy is effective from 12 August 2026. It will be reviewed if Tetrifold, support handling, site hosting, or applicable law changes. Material changes will be published on this page with a revised effective date.

Go to Tetrifold Support