Privacy & Data
Last updated · 1 October 2026
Antiqua is built privacy-first. The short version: the app has no account; the only data it sends us to keep are the roadmap votes and ideas you choose to send, with a random token it makes on your iPhone, described below. The website no longer takes sign-ups, and neither the app nor the website runs analytics or third-party trackers. If you vote or send an idea on the website, we keep only what the roadmap section describes. We never sell your data. This page explains the longer version, written to be read.
The app
Antiqua keeps to itself. There is no account to create and nothing to sign in to. The app uses no analytics, no advertising identifiers and no third-party trackers. Your progress, your gallery and your settings stay on your iPhone; the app does not sync them to us or to anyone else.
Apart from the App Store, the app uses the network to download new paintings and their wall text from our content server, which Cloudflare hosts. Those requests carry no account, no name and no identifier.
From version 1.8 the app also reads the roadmap from antiqua.gallery. If you vote on it or send an idea from the app, the app sends the vote or the text with a random token it makes on your iPhone, so that a second vote on the same card replaces the first. The token is not taken from your device or your Apple Account, and the server keeps only a one-way hash of it. Each time the app reads the board it sends the same token and its version number, so it can show your own votes; the server stores nothing from a read. The app never sends a name or an email. Version 1.8 also uses Apple’s Game Center when you are signed in to it, for solve-time boards and achievements; Apple’s privacy policy covers that part.
Memberships are bought and managed through the App Store with your Apple Account. Apple handles the payment, and we never see your card or payment details. Apple’s own privacy policy covers that part.
The website
antiqua.gallery is a plain website hosted by Cloudflare. It has no sign-up form, no analytics and no trackers. It sets one cookie of its own, and only if you vote or send an idea on the roadmap, as described below. Like any web host, Cloudflare handles the technical details of each visit, such as your IP address, to deliver the pages and keep the site secure. The site also loads a few typefaces from Google Fonts, so your browser asks Google for those files.
Links to the App Store, Instagram and Buy Me a Coffee take you to those services, which have their own privacy policies.
The roadmap
The roadmap lets you vote on what comes next and send an idea. There is no account. The first time you vote or send an idea on the website, the page loads Cloudflare Turnstile, a check that you are a person, which runs under Cloudflare’s own privacy policy. Passing it sets one cookie, antiqua_voter: a random voter number, signed so it cannot be forged, sent only with the roadmap’s own requests, unreadable by scripts on the page, and kept for one year. It lets a second vote on the same card replace the first.
A vote is stored as the card, up or down, the time, and a one-way hash of the voter number (or of the app’s token). An idea is stored as the text you send, the time, and a name or an email only if you add one. To limit abuse, every vote and idea also counts against a daily limit kept under a salted one-way hash of your IP address that changes every day; ideas keep that day’s hash beside them. Your IP address itself is not stored. Ideas are read by the maker and are not published or sent anywhere else.
Votes are kept while the roadmap runs; taking a vote back deletes it. Ideas are kept until we have read them and no longer need them; write to us and we delete an idea within 30 days. While a card is open to votes, tap the same arrow again to take your vote back, on the website or in the app. Once a card ships or closes, its votes stay in its count, tied to nothing but a hash. Deleting the app deletes its token; the votes it already sent stay in the counts, and nothing ties them back to you. To have an idea deleted, write to us with its text.
The register
Before launch, the website had a sign-up register. It is closed, and we no longer collect sign-ups. If you signed it, we keep the name, the email address and, if you gave one, the phone number you signed with, along with the date and the options you ticked on the form. They are stored with Supabase, which hosts that small database, and we use them only to keep your place in the register. We no longer send email from the register. We do not sell, rent or trade your details, and we do not send marketing from anyone else. You can ask us to delete your record at any time; write to us and it’s done. We delete it within 30 days and confirm by reply.
What we don’t do
- No selling or sharing of personal data with advertisers.
- No behavioral tracking across other apps or websites.
- No hidden data collection. If it isn’t described here, we’re not doing it.
Children
Antiqua is a general-audience product and is not directed at children under 13. We do not knowingly collect personal information from children.
Changes
If this policy changes in a way that affects you, we’ll update this page and the date at the top.
Contact
Questions, corrections, or a deletion request: antiqua.puzzles@gmail.com or hello@antiqua.gallery. Antiqua is a solo build under Rooted Heart LLC.
← Back to Antiqua