Paper Ink for iPhone, iPad and Android
Updated: 18 October 2026
The original offline store release has no game analytics, advertising, purchases or online player accounts. Newer versions that include Friends and gameplay analytics work as described below. Features available to you depend on the installed version. There is currently no advertising or chat. Versions with optional world-access purchases use the stores and RevenueCat as described below.
Campaign progress, scores, stars and preferences remain stored on your device. We do not upload your campaign save to Firebase. Uninstalling the app may remove local progress. Operating-system backups are controlled by your device and account settings.
Online Friends is optional and requires an internet connection. Same-device Friends works offline and creates no server room. It uses Google Firebase to maintain a private two-player room, validate turns and deliver the shared game state. The service processes temporary game positions, ink marks, turn/results, a room invitation code and randomly generated session identifiers. You do not need to create a Firebase or other player account. Session authorization secrets stay private; share only the invitation code/link with your intended friend.
When a series ends, the main board is removed. Each private final-board copy is removed after that player receives the result; disconnected copies are eligible for background cleanup after one minute. Small session/result metadata is retained briefly to support a rematch, normally expiring after five minutes. Unjoined invitations expire after ten minutes and inactive joined rooms after one hour. Expired data is removed by bounded periodic cleanup; cleanup delays and service failures can extend storage beyond these eligibility times. Leaving on both devices removes the room. Cloud providers may retain separate technical logs or backups under their policies.
Firebase App Check uses Apple App Attest or Google Play Integrity to help verify legitimate apps. Our server also processes technical request information such as IP addresses for abuse prevention and uses hashed IP-based rate-limit keys. Firebase/Google Cloud and Apple or Google verification services may process device/app integrity and network information. These security operations are separate from gameplay analytics.
Current normal Release versions automatically report gameplay statistics through Google Analytics for Firebase. There is no in-game Analytics switch or permission popup. Earlier development versions had an optional Settings preference; that preference is not used in current versions. Debug, automated QA and store-capture builds do not upload Analytics events.
Google Analytics receives app/device and engagement information, a pseudonymous app-instance identifier, screen names and gameplay summaries such as selected world/level, mode, difficulty, attempts, wins/losses, stars, score, fold totals, tutorial use, connection issues, rematch choices and bounded purchase-offer/checkout/restore outcomes. We use these statistics to improve clarity, enjoyment, balance and reliability and guide product decisions. SDK batching and connectivity affect delivery.
We do not send drawings, board positions, ink polygons, room codes, invitation links, session secrets, names or email addresses in Analytics events. Advertising-ID and Apple IDFV collection are disabled; advertising storage and personalization remain disabled. We do not add a player user ID or connect events to a player login. Google applies the property's configured retention rules and its service policies. Contact us at the address below with a privacy request.
Supported versions offer a one-time purchase opening the first ten campaign worlds, which remain earnable through play. Apple or Google processes payment; RevenueCat verifies transactions and supplies purchased-access status. The purchase SDK creates a pseudonymous customer identifier and processes purchase history, product and transaction identifiers, app/device metadata and network information needed to deliver, restore and maintain access. Automatic device-identifier collection and purchase-SDK diagnostics are disabled. We do not receive payment-card details and do not put receipts or RevenueCat customer identifiers in gameplay Analytics. Purchase verification is separate from gameplay analytics and does not require a Firebase player account. Restore purchases uses the same store account and platform; it does not restore local gameplay progress. Store refunds and revocations may remove paid access without deleting earned progress.
The game does not request contacts, precise location, photos, camera or microphone access. Sharing an invitation opens your operating system's share sheet. You select the app/recipient and decide whether to send it. Links prefill a room code; they do not automatically join a game. The invitation website has no developer-added advertising or Analytics scripts.
Google provides Firebase, Google Analytics and Google Cloud under its privacy policy. RevenueCat provides purchase verification and entitlement services under its privacy policy. Apple and Google independently provide their stores, integrity services and device backups under their policies. We do not sell personal information or use the current Analytics integration for advertising personalization.
If you email support, we receive your email address and what you choose to send, to respond and troubleshoot. Please do not send sensitive information. This support website is hosted by GitHub Pages, which may process technical requests under GitHub's privacy statement. It uses no developer-added tracking scripts.
Paper Ink does not request a player's name, age, contact information or account registration. If you have a privacy request or believe a child has provided personal information through support, contact us. The game is not enrolled in Apple's Made for Kids program.
We will update this policy when practices change. Contact: apptuneslabs@gmail.com.
Developer: Malkiel Shaul