Privacy, plainly.

This website and email updates

You can browse this website without an account. The animated city runs on your device. It does not request your location or submit gameplay data. Optional Google Analytics is described below. It stays off until you accept analytics cookies. We do not use advertising or cross-app tracking on this website.

If you choose to sign up, we store your email address, the date and time of your consent, the consent wording and its version, and that you joined through this website. We use this information, with your consent, to send occasional setthesignal launch news and beta opportunities. Your address is not automatically added to Shopsplit marketing, and signing up is not a TestFlight invitation.

We do not send an automatic confirmation email. Addresses are unverified at collection. We retain your sign-up while operating the launch and beta updates list, until you withdraw consent or we retire the list. We will delete the list when it is no longer needed for that purpose. To withdraw consent or request deletion, email Support from the address you registered. Future update emails will include a way to opt out.

The website is hosted through Google Firebase/Google Cloud. These providers process network and technical request information to deliver and secure it. Our sign-up service also stores a daily-changing hash derived from a network address and short-lived request counts to limit spam; it does not store the raw network address in the sign-up database. The abuse-control records expire after one to two days and are automatically removed by the database’s expiry policy, subject to its processing delay. Infrastructure logs and backups follow provider retention.

Email records are private and accessible only through authorised administration tools and the website’s server service. They are not publicly readable. The Shopsplit link takes you to a separate website with its own privacy information.

Optional website analytics and your choice

If you select Accept analytics, Google Analytics measures visits, pages viewed, general traffic sources, device/browser information, interactions with our website previews, and successful email signup responses. This helps us understand and improve the website. We do not send your email address, email hash, form contents or precise location to Google Analytics. New and duplicate successful signup responses may both be counted.

Analytics is off until you accept. Selecting Reject analytics, or leaving the banner unanswered, prevents the Google Analytics tag from loading. You can browse, use the previews and sign up for emails either way. We do not send cookieless analytics pings to Google when analytics is off. Analytics consent is separate from your consent to receive email updates.

You can also use Cookie choices in the footer at any time. Changing from Accept to Reject stops future collection, removes our Google Analytics cookies and reloads the page. It does not automatically erase information already sent to Google. Contact Support if you want to request deletion.

A first-party preference cookie, sts_analytics, remembers your Accept or Reject choice and the choice version for 180 days. It contains no unique visitor identifier. When accepted, Google Analytics uses first-party _ga cookies to distinguish visitors and sessions; we configure these to expire after 30 days without extending them on each visit. Browser restrictions can shorten their lifetime. Google Analytics user and event data retention is set to two months, with deletion during Google's monthly processing. Standard aggregated reports may be retained longer. Advertising storage, advertising user data, advertising personalisation and Google signals are disabled in our website tag.

Separately, when you press Accept or Reject, we send only the choice and whether it is an initial choice or a later change to our own Firebase service. We store daily totals, using the UK reporting day, rather than a record of each visitor's choice. These totals contain no email address, visitor identifier or browsing history. They help us understand use of the consent controls and may be retained while operating the website. People who leave the banner unanswered are not counted. Delivery failures, repeat choices and abuse can affect these totals; they are counts of choices, not unique people.

The choice-counting endpoint uses short-lived abuse controls in the same expiry-managed collection as signup security records: a daily-changing hash derived from a network address and request counts, with expiry after one day and deletion subject to the database's processing delay. It does not store the raw network address or associate that security record with a stored individual choice. Firebase/Google Cloud may process normal request information in infrastructure logs under their own retention rules.

Google processes Analytics data for us. The existing Analytics account also enables sharing with Google products and services and aggregate modelling contributions; Google describes its additional purposes and roles in its data sharing information. Google and Firebase/Google Cloud may process information outside the UK under their applicable transfer safeguards. See Google's privacy policy and Analytics cookie information. Withdrawing analytics consent does not affect prior processing. We use your consent for optional website analytics and our legitimate interests in administering the consent controls and securing the service.

The setthesignal invited beta

You can play Solo without location permission. Progress and earned powers are saved on this device. Guest progress belongs to this phone until you protect it with an email. After email confirmation and a complete backup, you can restore your progress on another phone. You need access to that inbox to recover it; no separate recovery code is available. Sign-in emails do not subscribe you to marketing.

Online features use an anonymous Firebase account. We store submitted attempts, board/version identity, traffic seeds, signal and power actions, scores and progression needed to check power eligibility. Public standings show your nickname, selected emblem, player tag and score, not your email or authentication identifier. We also store your profile, completion events, badges, streak calendar timezone and qualifying play dates. Detailed play history stays private. Protected backups include Solo completion and compatible best times, powers, preferences, City history, badges, seen rewards, and streak evidence. Finished results awaiting upload may also be stored privately for recovery until account deletion. Detailed City input recordings held with accepted scores expire after 30 days; scores and personal bests remain until deleted or the testing competition is retired.

City map imagery is supplied by Mapbox and online services by Google Firebase/Google Cloud. These services process network and technical request information to provide maps, authentication and the game service. Near me is optional and uses your location to move the map; no location permission is needed to browse or play. Live Scan is not part of this invited beta.

Map requests reveal the area you are viewing to the map provider. Mapbox also collects SDK usage and diagnostic information and may collect location telemetry when location access is enabled. Use the map's information/attribution control to manage Mapbox telemetry. You can revoke location permission in iPhone Settings. setthesignal does not use advertising or cross-app tracking, and does not include Firebase Analytics or Crashlytics.

Report a problem shows its contents before you copy or share. We do not silently send reports, screenshots, contacts or device location. Anything you add yourself will be included when you choose to share it.

Delete guest data, or Delete account and progress for a protected player, removes local progress, equipped powers, pending uploads, linked online attempts and standings, then removes the guest account. The app blocks uploads while deletion is pending. A minimal one-way security marker remains to prevent old requests recreating deleted data. Infrastructure logs and backups follow provider retention and are not erased instantly by this action.

Questions or deletion assistance: support@shopsplit.uk We use game data to provide the service you request and technical/security data for our legitimate interests in operating and protecting it. Optional location access is controlled by your permission. Service providers may process data outside the UK under their applicable transfer safeguards. You may request access, correction, deletion, restriction or portability, or object to processing, by contacting us. You may also complain to the UK Information Commissioner's Office (ico.org.uk).

Your choices and requests

To request access, correction, deletion, restriction or portability, object to processing, or withdraw your email consent, contact support@shopsplit.uk. Withdrawing consent does not affect earlier lawful processing. You may also complain to the UK Information Commissioner’s Office.

Provider information: Firebase privacy · Mapbox privacy.