← The Puzzle Museum
Privacy

Privacy Policy

Last updated 28 August 2026. Applies to Puzzle Museum apps made by Millstone Studios — including Sudoku at the Museum, and future apps such as Painting at the Museum and The Puzzle Museum — on the platforms we release them on. Studio overview: millstonestudios.uk.

The short version

We don't create Millstone accounts, we don't show ads, and we don't use advertising or ad-tracking SDKs. Puzzle progress stays on your device and can sync across your Apple devices via your private iCloud account. Purchases stay with the App Store. We use Firebase for product analytics and crash reports, and our servers for catalog updates, downloads, and optional redeem codes. We don't sell your data.

What we don't collect

We do not ask for your name, email address, or location, and we do not require a Millstone Studios account or sign-in to play. We do not run advertising networks or ad-tracking SDKs.

What stays on your device and in iCloud

Puzzle progress, related preferences such as default difficulty, and hint balance are stored on your device. On Apple platforms they can sync across your devices through Apple's iCloud Key-Value Store when you are signed into iCloud with the same Apple ID. That sync is between your devices and Apple — Millstone Studios cannot read the contents of your iCloud account.

Purchase and entitlement status is not synced via iCloud. In-app purchases are tied to your App Store account. Use Restore Purchases in Settings (signed in with the same Apple ID used for the original purchase) to recover them on another device. Family Sharing, where enabled for a product, follows Apple's Family Sharing rules.

Firebase (analytics and crashes)

Our iOS apps use Google Firebase:

  • Analytics — product usage events (for example which screens are opened, puzzle starts and completes, and purchase funnel steps). Events may include content identifiers such as pack or exhibit ids. Firebase assigns a pseudonymous app-instance identifier so installs can be distinguished in aggregate reports; this is not your name or email.
  • Crashlytics — crash and diagnostic reports to help us fix bugs. These can include device and app technical details related to the failure.

We use this information to understand what is working and to improve the apps. We do not use it to show you third-party ads. Firebase is operated by Google; see Google's privacy documentation for Firebase and Analytics for how Google processes this data.

App stores

We may receive anonymous or aggregated technical and sales data from the stores that distribute our apps — for example sales figures and anonymised crash statistics. We never see or store your payment card details. Purchases are processed entirely by the store (Apple App Store today; other stores if and when we expand). See that store's privacy policy for how it handles purchase data.

Our servers (catalog, downloads, redeem)

The apps contact Millstone Studios servers to check for content updates, fetch catalog and bundle metadata, and download pack content you are entitled to. Those requests identify the app and the content being requested; they are not a personal profile.

Optional redeem codes and operator grants use a random install identifier generated on your device (not your Apple ID). That identifier is stored with your progress (and can therefore sync via iCloud with progress) and is sent to our servers only when redeeming a code or checking server-side entitlements. We do not use it as a marketing identity.

In-app purchases

Some apps offer optional in-app purchases — such as additional content bundles or unlimited hints. Where enabled, these support Family Sharing under Apple's rules. Purchases are tied to your app store account for delivery and restore purposes only.

Optional Game Center

Some apps may report achievements through Apple Game Center if you are already signed into Game Center. Game Center is optional and is not required to play. Apple's Game Center privacy terms apply to that service.

What we don't do

  • We don't sell your data.
  • We don't share data with advertisers or data brokers.
  • We don't show third-party ads or use ad-tracking SDKs.
  • We don't require a Millstone account or sign-in to play.

Children's privacy

We do not knowingly collect names, emails, or other contact details from children. Our apps are not designed to solicit personal information from anyone. If you believe a child has provided contact information to us directly (for example by emailing support), contact us and we will delete it.

If this ever changes

If a future version of an app needs to collect additional personal information, we will update this policy first, explain clearly what is collected and why, and — regardless of what the law requires — we will never sell or share that information with third parties for advertising or marketing purposes.

Contact

Questions about this policy can be sent to privacy@thepuzzlemuseum.app.