Trestle Privacy Policy
The short version
Trestle has no ads and no in-app purchases. You can play without an account. Each finished game is saved with a random id for that phone, with no name or email. If you sign in with Apple or Google, those games are added to your account. The app sends anonymous usage signals so the developer can see how the game is played, and you can turn that off in the menu.
Stored on your device
Your current run, your profile (username, join date, and stats), every finished game, tutorial progress, and settings are saved on your device. Deleting the app, or Menu > Clear all data, removes them from the phone.
If you sign in
Signing in is optional. Trestle uses Sign in with Apple or Google, and accounts are hosted by Supabase. Trestle never sees or stores your password.
When you sign in, your account stores: the email address Apple or Google shares (Apple can give a private relay address instead), the name and profile photo link Google shares if you use Google, an account ID, your username, a random ID for each phone you play on, your profile stats and join date, and each finished game: score, tokens, cards placed, when it was played, the app version, and the seed that identifies the deal. The same game details are saved if you never sign in, attached only to that phone's random id. Signing in adds them to your account.
This data is stored by Supabase on servers in Canada (Montreal). It is used only to run your account and the game. It is not sold, shared with advertisers, or used for advertising.
Deleting your account
Profile > Delete account removes your account and everything stored with it from the server right away. If you signed in with Apple, Trestle also revokes its access to your Apple ID. The games on your phone stay there. Signing out keeps your account. Games you play while signed out stay saved under this phone's id until you sign in again.
Anonymous usage data
Trestle uses TelemetryDeck, a privacy-focused analytics service based in the EU, to count things like app launches, tutorials finished, runs started and ended (with the score and how many cards were played), merchant visits and purchases made with in-game tokens, sign-ins, and the type of an error if the app hits one.
Each signal carries the app version, system version, device model, and language and region settings, plus a random identifier that is hashed on your device before it is sent. That identifier lets TelemetryDeck count unique players; it cannot be used to find out who you are. Signals never include your account ID, email, or username, so they are not linked to your account.
What Trestle never does
No tracking across other apps or websites. No advertising identifiers. No selling or sharing data with advertisers or data brokers. No location, contacts, photos, microphone, or camera.
How long it is kept
Account data is kept until you delete your account. A finished game stays with that account, or with the phone's id if it was never added to one. Supabase keeps short-lived technical logs, such as the IP address of a request, for security and troubleshooting.
TelemetryDeck stores signals in anonymized form only and may keep them for up to 10 years for long-term statistics. They are held on servers in the EU. TelemetryDeck processes them only for Trestle and does not share or sell them.
Turn it off
Menu > Share anonymous usage data. When it is off, the app sends no usage signals, and you can turn it back on the same way.
Children
Trestle is suitable for all ages, and signing in is optional. Trestle does not ask for a name or email unless you sign in. A finished game is still saved with the phone's random id. If you believe a child has signed in, contact us and we will delete the account.
Your rights
You can delete your account and everything stored with it at any time from Profile > Delete account. To get a copy of your account data, or with any other request about it, contact us through Support. Anonymous usage data cannot be tied back to you, so there is nothing personal to look up there. Your on-device data is yours to delete at any time.
Changes and contact
If this policy changes, the new version will be posted here with a new effective date. Questions: see Support.