Effective 11 January 2027 · last updated 2 November 2026.
Shuinlar — Keeper's Dial is made and published by Zyetopia LLC ("we", "us"). This page says what the app and shuinlar.com keep about you, why, for how long, who else handles it, and how to remove it. It is written to be read, not skimmed past; it is the whole policy.
Without an account. Your settings, your board look, your puzzle progress, your local rating and your game history against the bots stay on your device. They never reach us.
With an account, the server keeps:
| What | Why | Who sees it |
|---|---|---|
| Email address | To send you a six-digit sign-in code and to find your account the next time. | Only us. Never shown to other players, never passed on. |
| An opaque user id | An internal number that ties your account to its games and ratings, so your email does not have to. | Only us. |
| Handle | Your name in the game. | Public. |
| Avatar, country, bio (optional) | Your profile. The avatar is one of the drawn ones or a photo you choose, cropped and shrunk on your device before it is sent. | Public. |
| Game records | Every online game: the moves, the result, when it was played, and whom against. | Public, as the record of play. |
| Ratings and badges | Glicko-2 ratings per pool and the badges you have earned. | Public. |
| In-game chat | Messages between the two players of a game (1 to 500 characters each), kept with the game. | The two players of that game, and us if a message is reported. |
| Sign-in sessions | A token on your device so you stay signed in; the server keeps only a hash of it. | Only us. |
| Push token (if you turn notifications on) | The token Apple or Google gives the app, so we can tell you when it is your move. | Only us. |
From every device, with or without an account:
What we do not collect: your location, your contacts, your photos (beyond an avatar you choose), health or financial information, an advertising identifier, your browsing history, or anything from other apps.
We run the game on services that act on our instructions and may not use your data for their own ends:
| Service | What it does | Where |
|---|---|---|
| Cloudflare | Serves shuinlar.com and the web app. | Worldwide edge |
| Render | Runs the game server. | United States |
| Neon | The Postgres database that holds accounts and games. | United States |
| Resend | Sends the sign-in emails. | United States |
| Sentry | Receives crash reports. | United States |
| PostHog | Counts usage. No advertising use. | United States |
If you install the app from the App Store or Google Play, Apple or Google handle the download and any purchase under their own privacy policies, and deliver push notifications if you turn them on.
We do not sell personal information, we do not share it with advertisers or data brokers, and we do not track you across other companies' apps or websites. We disclose data only to the services above, to comply with a law or a court order, or to protect players and the game from abuse.
The server and the database are in the United States. If you play from elsewhere, your data is sent there. For players in the European Economic Area, the United Kingdom and Switzerland, we rely on the standard contractual clauses our providers offer; write to us for a copy.
Our legal grounds under those laws: keeping an account and running your games is performance of our agreement with you; crash reports, usage counts and abuse prevention are our legitimate interest in keeping the game working and fair; push notifications are sent with your consent and stop when you withdraw it.
Shuinlar is for players aged 13 and over. We do not knowingly keep an account for anyone younger. If you believe a child under 13 has an account, write to [email protected] and we will delete it.
In the app: Settings → Account → Remove my account. On the web, if you have already uninstalled: shuinlar.com/delete-account, which checks that it is you with a code sent to your email.
Deletion removes your email address, your profile, your avatar, your push token and every sign-in, immediately and for good. Your handle becomes an anonymous name. Your game records and ratings stay under that anonymous name, because every game has two players and the record belongs to both; nothing about the anonymous name can be traced back to you. Backups that still hold the deleted data are overwritten within 30 days.
Everything travels over HTTPS. There are no passwords to leak: sign-in is by a one-time code, and the server keeps only hashes of codes and session tokens. No system is perfect; if a breach affects your data we will tell you and, where required, the authorities.
When we change this page we change the "last updated" date at the top. If the change matters to you, such as a new kind of data or a new use for it, we say so in the app or by email before it takes effect. Earlier versions are kept in the project's history.
Zyetopia LLC, California, USA. Write to [email protected]; a person reads it.