The rules every app follows
- No ads, no sale, no third-party analytics. We do not sell or share your data. No app has an advertising or analytics library.
- Usage data, on by default, with a switch. Each app sends counts and timings: what was used, for how long, and what went wrong. You can turn it off in the app's settings. Off, nothing more is sent, except feedback you choose to send, in an app that has a Feedback box.
- One random code, kept one year. Usage data carries a random code made on your device, so we can tell one player or device from another in totals. It is not your name and is not linked to an account, phone number or advertising id. We remove the code from everything we keep one year after the event it came with.
- No IP address kept. Our server sees your IP address to answer, as every server does. We never store it. We keep at most your country, which Cloudflare reads from it.
- Used only to make the apps work better. We look at totals across all players: which boards are too hard, what crashes, what is slow. We never use it to profile, advertise to or contact anyone.
- Our servers. Data goes to our own Cloudflare account (Cloudflare stores it for us as a service provider) and to our own computer for analysis. No one else gets it.
How long we keep it (our written retention policy)
- The files our apps upload, as sent: 30 days, while we check and convert them. Then only the converted events are kept.
- Usage events, without the random code: kept for good, to compare versions over the years. With no code, an event cannot be tied to anyone.
- The random code on those events: one year after the event, then removed from every copy. It lets us count players and devices within a year. Our tools remove it automatically, and fail if they find one older.
- Feedback you send (Isopix and Noodle Pads): 90 days, then deleted from every copy.
- Your IP address: never stored.
Children
Our apps are for children too. We collect usage data from children only to make the apps work and work better. It holds no name, no contact details and no location finer than the country, and its code is removed after one year. We never ask a child for contact details. Feedback, where an app has it, sits behind a grown-up check and asks for no names or contact details. A parent can turn usage data off in each app, and can write to us at any time.
What Noodle Pads sends, and what it keeps
- Cloud profiles. Nobody goes to the cloud by themselves: a grown-up puts someone there, in their profile (☁️ In the cloud), with a sum and then a PIN for them. A profile holds a fun name the app makes up (nobody types a name), a picture, a colour, a PIN (stored only as a scrambled hash), its settings, and what it makes (sounds, beats, songs and recorded voices), so it syncs between devices. Everyone else stays on their device only. Anyone who opens noodlepads.com sees the list of profiles: each one's fun name, picture and colour, when its look last changed, and whether it has a PIN. A PIN only stops someone opening a profile in the app; it is not security.
- Recordings and shares. Recordings (including recorded voices), beats and songs in a cloud profile are stored on our server. Anyone with a sound's link can play it: the links are long and random, but not secret. Anyone with a share code can see and play what was shared until the sharer taps 🚫 Unshare or their profile is deleted.
- Usage data, while Share play data is on (⚙️ Settings, 📊 Data sharing; on to start with), from every device, in the cloud or not: which screens, buttons and parts of the app are used, in order and when; how long each visit lasts; load time and sound delay; the kind of error and where in the app, never its message; the device type, browser and system; the app version; the country; and the device's random code.
- Profile counts, while Share play data is on, for people in the cloud: when and how often each profile is opened and synced, with the country, the browser, system and device type, and a scrambled code for each device that opens it (made from the profile's key, not the device's random code). Never an address or city. Kept 14 days on our server, a device's row 90 days, and our own copy up to a year.
- Limits on new profiles. To stop one visitor using up the cloud's new profiles, each network address may add 3 a day. The cloud counts them with a scrambled code made from the address and the date, never the address itself, and forgets the code the next day. The address is never stored, logged or shown.
- Problem reports are on to start with, per device, and can be switched off (⚙️ Settings, 📊 Data sharing, 📮 Send problem reports; a device switched off stays off). Nothing is sent while Share play data is off. A device nobody has chosen for sends only after an error or a tap that made no sound; one where someone ticked 📮 sends after every visit. A tap that made no sound adds the screen, what was tapped, how far the tap got, what lay on top of it, an open dialog, the audio's state and how long the page had run. A report holds the app's cleaned event log (no sounds, no names), its settings, how many sounds, beats and songs it has, the browser, system and device type, screen size, time zone, sound timing, and random codes for this device and this visit. Kept 14 days on our server; our copy of each report is deleted a year after it was sent.
- Cloudflare, our host, also counts page views, without cookies.
- Not sent to anyone else. The app loads nothing from other sites but Cloudflare's page counter: its fonts come from noodlepads.com. Profile names and pictures never leave our server's database.
Feedback you send us
- Only when you press Send. Settings, About, Feedback, after a grown-up check, sends exactly what was typed in the box, with the app's version and the date. Nothing is sent while you type, and nothing else goes with it: no random code, no name, no email address.
- Please leave out names and contact details. We don't ask for them, and we can't write back. If a message holds them anyway, we delete that message when we read it.
- No IP address kept, as for everything else.
- Who reads it: only us. It waits in our own Cloudflare account until our daily copy (within a day), then lives on our own computer. It is never shared, never counted in usage totals and never used to contact anyone.
- Kept 90 days, then deleted from every copy automatically.
Deleting your data
- A cloud profile: 👥 People, tap the person, tap Delete twice, then ☁️ Delete their cloud copy too twice. That deletes the profile from our server at once (asking for its PIN), with its recordings, usage data and every share code it made. To keep this device's own copy, use Remove PIN, or switch ☁️ In the cloud off, instead (tap it twice): that deletes the cloud copy too, and links they shared stop working.
- In your browser: clear noodlepads.com's site data to remove your device's own copy.
- Problem reports: switch 📮 Send problem reports off, or 📊 Share play data off, to stop sending more. A report is kept 14 days on our server. This device's code (📋 in ⚙️ Settings) lets us find one: write to privacy at pdxfixit dot com with it.
- Usage data: turn Share play data off to stop sending more. We can't tell which records are yours: the code is never shown and is linked to nothing else. It is removed after one year anyway.
- Feedback: we can't tell which message is yours either. Write to privacy at pdxfixit dot com with roughly what it said and when, and we'll delete it; it is deleted after 90 days anyway.
- Questions or requests: write to privacy at pdxfixit dot com.
Changes
If this policy changes, we update this page and the date at the top.
Contact
privacy at pdxfixit dot com