privacy policy
The short version: boxd works fully offline with no account. If you choose to sign in, we store your name, email, and game progress so leaderboards, live matches, and sync work. We show no ads, we run no third-party analytics or tracking, and we never sell your data.
who we are
boxd is developed and published by mojolabs. Contact:
mojolabs.dev@gmail.com. This policy covers the boxd mobile
app distributed through the Google Play listing and the Apple App Store listing, and the boxd website
(playboxd.com).
data we collect — and when
Without an account (the default): nothing personal. Your puzzle progress, settings, streaks, and stickers stay on your device. The app works completely offline.
If you sign in (optional — Google on Android, Apple on iOS; only needed for online features):
- Account info: your name, email address, and a user ID, as provided by Google or Apple sign-in.
- Game data: your progress, scores, streaks, stars, and sticker book, synced to our servers (Google Firebase) so they follow you across devices and appear on leaderboards ("the ring") and in live matches ("boxd bout"). Leaderboards show your display name to other players.
If you buy boxd Pro: purchases are processed by Google Play or the App Store. Our subscription processor (RevenueCat) receives purchase receipts and an anonymous app user ID to unlock your entitlement — never your card details, which stay with Google or Apple.
what we do NOT collect
- No advertising — the app contains no ads and no ad SDKs.
- No third-party analytics or behavioral tracking.
- No location, contacts, photos, microphone, or camera access.
- No free-text chat between players — bout invites are 6-character codes.
where data lives
Signed-in game data is stored with Google Firebase (Authentication and Cloud Firestore). Purchase entitlements are managed by RevenueCat. Both act as processors for the data above and are bound by their own security and privacy commitments.
children
boxd is a family-friendly puzzle game with no ads, no chat, and no data collection unless a player actively signs in with a Google or Apple account. We do not knowingly collect personal information from children; if you believe a child has created an account, email us and we will delete it.
data retention & deletion
Signed-in data is kept until you delete it. You can:
- sign out at any time — play continues offline on your device;
- delete your account in the app — settings → account → sign out → delete account — which removes your synced data and sign-in identity immediately (see delete your account);
- or request deletion by emailing mojolabs.dev@gmail.com from the signed-in address — we complete deletion within 30 days.
security
Data in transit is encrypted (HTTPS/TLS). Access to synced data is scoped per user by Firebase security rules.
your rights
Depending on where you live (e.g. GDPR, CCPA), you may have rights to access, correct, export, or delete your personal data. Email us and we will honor them.
changes
If this policy changes, the new version appears at this URL with an updated effective date. Material changes will be noted in the app's release notes.
contact
mojolabs · mojolabs.dev@gmail.com