Privacy Policy

Last updated: 25 April 2026. Version 1.0. Applies to the Shapeless End web app, its iOS app and its Android app.

The short version. Shapeless End does not collect, store, transmit or share any personal data about you. There are no accounts, no analytics, no advertising, no cookies, and no third-party trackers. The game runs entirely on your device. We did not build a way to know you exist.

No consent banner is shown — and that’s correct. Under the EU ePrivacy Directive (Article 5(3)), a consent banner is required when a service stores or accesses information on a user’s device for purposes that are not strictly necessary for the service the user explicitly asked for — principally tracking cookies, analytics, advertising, fingerprinting and similar technologies. Shapeless End uses none of those. The only thing it stores on your device is your settings and your high score, so the game can remember them between sessions; this is “strictly necessary” in the sense of Article 5(3) and the EDPB’s March 2023 guidelines on technical storage. We also process zero personal data within the meaning of Article 4(1) GDPR. Together, these two facts mean no consent banner is required. You remain in control of the on-device data: tap Menu → Reset score & settings in the game to clear it instantly.

1. Who is responsible

Shapeless End is published by Shadow Games and Development (the “publisher”, “we”, “us”), which is the data controller for the very limited processing described below. You can reach us at info@shadowgames-dev.com for general queries, or support@shadowgames-dev.com for support and accessibility feedback. More on our website: shadowgames-dev.com.

[Action required before publication: insert registered postal address.]

2. What data we process

We do not collect, store, transmit or share any personal data through Shapeless End. The game has no login, no profile, no “tell us how you’re doing” survey, no telemetry and no crash reporting. We have no servers that receive data from your device while you play.

The only data the game uses is what you generate while playing — your current grid, your three queued shapes, your score — and that data never leaves your device.

3. Local on-device storage

To remember your high score, sound preference, accessibility settings, difficulty preference, last-used grid size and chosen tray size between sessions, the game saves a small amount of data to your own device using localStorage (in the browser) or the equivalent native storage on iOS / Android. This data:

Under the EU ePrivacy Directive (transposed in Ireland by S.I. 336/2011) and the EDPB’s March 2023 guidelines on technical storage, storage that is strictly necessary for a service explicitly requested by the user does not require consent. Saving your settings and your high score so the game can resume between sessions falls within that strictly-necessary scope. We use no other storage.

4. Cookies and similar technologies

Shapeless End sets no cookies. It does not use tracking pixels, fingerprinting, session-replay tools, or any other identifier that could follow you across sites or sessions.

5. Network activity

After the initial download of the page (or app), the game makes no further network requests. There are no third-party fonts, no third-party scripts, no analytics endpoints, no ad networks, and no remote configuration. You can verify this in your browser’s developer tools (Network tab) or with a network monitor on your phone.

The web version is also installable as a Progressive Web App and is designed to work offline, so it will keep playing on a flight or in a tunnel.

6. App permissions (iOS / Android)

The native apps request no runtime permissions. They do not access your camera, microphone, location, contacts, photos, calendar, motion sensors, Bluetooth, files, or device identifiers.

7. Children

Shapeless End is rated suitable for all ages. Because it does not collect any personal data, it does not knowingly process the data of anyone — including children. The game has no chat, social, purchase, advertising, leaderboard, or user-generated-content features. Article 8 GDPR (children’s consent for information society services) is therefore not engaged, because no consent-based processing takes place.

Because we do not process personal data, no Article 6 lawful basis is relied upon for in-game activity. Should you contact us by email (see §14), the lawful basis for processing that correspondence is Article 6(1)(f) GDPR — our legitimate interest in answering you — and Article 6(1)(c) where we must retain a record to comply with a legal obligation.

9. Your rights under GDPR

Under the EU General Data Protection Regulation (Regulation (EU) 2016/679) and the Irish Data Protection Act 2018, you have the following rights in respect of your personal data:

Because we hold no personal data about you, in practice there is nothing for us to access, rectify, port, restrict or erase. If you email us, we can confirm that in writing.

10. International transfers

We make no international transfers of personal data, because we process no personal data.

11. Retention

We retain no personal data. On-device data (settings, high score) is retained on your device until you clear site data or uninstall the app.

12. Security

The web app is served over HTTPS. The game runs locally and does not open network sockets during play. Source code for the client is delivered as plain JavaScript and can be audited by anyone with a browser’s developer tools.

13. Changes to this policy

If we ever change how Shapeless End handles data — for example if a future feature genuinely needs to process personal data — we will update this page before shipping the change, bump the “last updated” date at the top, and (where the change is material) prompt you in-app. We will not retroactively widen the scope of processing for data already on your device.

14. Contact & complaints

For privacy questions, requests under the rights listed in §9, or any complaint about how we handle data, please contact us at info@shadowgames-dev.com. For accessibility feedback or bug reports, please use support@shadowgames-dev.com. We aim to reply within 30 days, in line with Article 12(3) GDPR.

If you believe your rights under EU data-protection law have been infringed, you have the right to lodge a complaint with a supervisory authority. The relevant Irish authority is:

Data Protection Commission
21 Fitzwilliam Square South,
Dublin 2, D02 RD28, Ireland.
Web: www.dataprotection.ie

You may alternatively complain to the supervisory authority of your EU/EEA Member State of residence or place of work.