Privacy Policy

This Privacy Policy describes what the Exposed mobile application ("App") collects, why, and who else sees it.

What We Collect

Exposed is a single-player detective game. We do collect anonymous gameplay data, and we want to be exact about what that means.

• Anonymous gameplay events. The App sends us a record of how the game is played: when a session starts and ends, which case was opened, which question was being answered, how many attempts it took, which hints were shown, and which apps on the fictional phone were opened. Each device is identified by a random number the App generates on your device. It is not your name, your email, your phone number or your advertising identifier, and it is not linked to any of them.
• What we do not collect: anything you type. Your answers are graded on your device. The words you enter are never sent to us — we record that a question took four attempts, never what you wrote.
• Progress and settings — which cases you have solved, which locks you have opened, your chosen language — are stored on your device and are not sent anywhere.
• Purchase state. If you subscribe, Adapty holds an anonymous identifier and whether your subscription is active. We never receive your payment details.
• Advertising identifier. Our ad partner may receive your device's advertising identifier (IDFA on iOS, Advertising ID on Android) to serve the optional rewarded ads. On iOS this requires your App Tracking Transparency permission, which the App asks for when it first starts; in the EEA and UK a consent prompt is shown before it. You can decline, and the rewarded ads still work without it.
• Install measurement. Our measurement partner, AppsFlyer, receives install and session events, milestones such as starting or solving a case, the paywall being shown, purchases and their price, ad revenue, and a random identifier the App also uses for purchases. Like any internet service it also sees your IP address (from which it derives your country), device and operating-system details, and — only if you allow tracking on iOS, or on Android unless you have deleted or limited it — your advertising identifier. We use this to learn which advertising campaign, if any, brought the App to you. Nothing you type is ever sent.

Why

To find out which questions are unfair. A detective game lives or dies on whether its puzzles are solvable, and the only way to know that a question is impossible rather than merely hard is to see that nobody has answered it. The data above tells us which cases to repair; it tells us nothing about you.

Third-Party Services

• Supabase (our own database, hosted in the EU): Stores the anonymous gameplay events described above. The App also downloads configuration values and corrections to case text from the same backend; that is a download only, no personal data is sent to receive it, and the App plays fully offline without it. Supabase Privacy Policy.
• AppLovin MAX (advertising): Serves the optional rewarded ads. AppLovin and its mediation partners (which may include Google AdMob and Unity Ads) may collect device identifiers and ad-engagement data, subject to your tracking or consent choice on your platform. AppLovin Privacy Policy, Google Privacy Policy, Unity Privacy Policy.
• Adapty (subscription management): Manages purchase state and entitlements against an anonymous identifier. Adapty Privacy Policy.
• AppsFlyer (install attribution): Measures which advertising campaign, if any, led to an install, and the purchases and ad revenue that followed, as described above. AppsFlyer's Privacy Policy.
• Apple StoreKit / Google Play Billing: Processes purchases, depending on where you obtained the App.

Advertising

There is one kind of advertising in Exposed and you choose whether to see it: a rewarded video that unlocks a hint. There are no interstitials and no banners. Subscribers are never shown one and the ad SDK is not initialised for them.

In-App Purchases

The first case is free in its entirety. A subscription unlocks the rest:

• Weekly — auto-renewing
• Yearly — auto-renewing

Subscriptions renew until cancelled in your Apple ID or Google Play account settings, and can be restored with the same account.

Data Retention and Deletion

Gameplay events are kept for as long as they are useful for improving the cases, and are deleted after 24 months. Because the device identifier is random and held only on your device, uninstalling the App severs the link permanently. Install measurement data is kept by AppsFlyer under its own retention policy. To have the events from your device deleted before then, or the AppsFlyer data about your device, see Data Deletion.

Children's Privacy

Exposed is not directed at children under 13 and does not knowingly collect information from them. Its cases deal with adult subject matter.

Your Privacy Rights by Region

GDPR (European Economic Area & UK)

You have the right to access, rectify or delete your data and to withdraw consent for ad personalization at any time through your device's tracking settings or the consent prompt. Our lawful basis for the anonymous gameplay events is legitimate interest in making the product work.

LGPD (Brazil)

You have rights of access, correction, deletion and consent withdrawal. Contact us to exercise them.

CCPA (California)

We do not sell your personal information.

Changes to This Policy

We may update this policy. Changes are reflected in the "Last Updated" date above.