Privacy policy

Last updated: October 11, 2026

Alice Amazed is a preview, being tried by a few people before it's launched. This policy says what the preview keeps. It will be reviewed before launch.

Alice Amazed ("Service", "we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains what data we collect, how we use it, and your rights regarding your information.

1. Information We Collect

Without an account

We collect nothing. The mazes are played and graded in your browser, and your stars, your daily results and your settings are kept on your device. Nothing about your play is sent to us.

Account Information

If you join, we keep:

• Email address — used to sign you in. The Service doesn't send email yet. When it can, we'll use your address to verify it and to reset a forgotten password.
• Name — used for display within the application.
• Password — stored as a one-way bcrypt hash (12 rounds). We never store or log plaintext passwords.
• When you joined, when you last signed in, and when your password last changed.

Your Results

With an account, your results are saved to it, so they follow you to another device:

• The mazes of the worlds — for each maze you've finished, your best result: its number of moves and its stars.
• The daily maze — for each day you've solved, the day's result (its moves, its stars, the most telling hint you asked for, how many moves you took back, and whether you solved it after its day) and your best since.

Your day's result joins a count of how everyone did on that day's maze. Anyone can see the counts: how many players took each number of moves. Nobody can see who.

We don't keep the moves themselves, or how long a maze took you.

Notes for a Trial

The "Trying it" page shows what your device has noted about each maze, as counts, with your answers to a few questions. It leaves your device only when you choose to send it, through your own device's share sheet, to whoever you choose. The Service sends it nowhere itself.

2. How We Use Your Information

• Provide the Service — run your account, and show your results on each device you sign in on.
• Authentication — verify your identity and manage your account.

We do not use your data for advertising, sell it to third parties, or use it to train AI models. The Service has no advertising and no analytics or tracking scripts.

3. Third-Party Services

The Service relies on the following third-party providers:

4. Data Retention

• Account data and your results — retained until you delete your account, and deleted with it.
• Server logs — our hosting provider keeps a log of requests (when, to which address of the Service, and from which network address) for a limited time, for debugging and security. They hold no passwords and no results.
• Deleting your account — delete it yourself on the Account page, with your password. Your account and every result saved to it are deleted at once. What your own device has kept stays on your device.

5. Cookies and Local Storage

We use no cookies. We use your browser's storage on your device for:

• Your sign-in — a token that keeps you signed in, with your name and email for display. It expires after 30 days.
• Your results — your stars and your daily results, so the app works without a connection.
• Your ways out — the moves of your way out of each maze you've finished, so you can look back over it. They stay on your device, and aren't sent to us.
• Your settings — the theme, sound, motion and the like.
• Notes for a trial — what happened in each maze, as counts, and your answers on the "Trying it" page.
• A copy of the app — its code and its mazes, kept by your browser so the app works offline. It holds nothing about you.

Signing out removes your sign-in, your results and your ways out from the device. Your results stay in your account.

6. Your Rights

You have the right to:

• Access — see your account's details on the Account page, and your results throughout the application.
• Correction — change your name on the Account page. Your email address can't be changed yet: delete the account and join again with another.
• Deletion — delete your account and all associated data on the Account page.
• Withdrawal of consent — delete your account at any time.

7. Security Measures

• Passwords hashed with bcrypt (12 rounds).
• HTTPS encryption for all data in transit.
• Only the Service's own web address may call its server from a browser.
• Rate limiting to prevent abuse.
• Sign-ins that expire after 30 days, and all end when you change your password.

8. Children's Privacy

The Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us so we can delete it.

9. International Data Transfers

Your data may be processed in the United States where our servers and third-party providers are located. By using the Service, you consent to this transfer.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do:

• We will update the "Last updated" date at the top of this page.
• For material changes, we will say so in the application.
• Continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact

The preview has no address of its own to write to yet. If you have questions about this Privacy Policy, or wish to exercise your data rights, write to the person who invited you to try it.

Back to the mazes