Cartographer's Lie · Last updated 17 August 2026
Cartographer's Lie is a daily deduction puzzle game published by Kevin Marsh ("I", "me"). This policy describes exactly what the app collects, why, where it goes, and how to get rid of it. It is written to match what the app's database actually stores — not a generic template.
Kevin Marsh is the data controller for Cartographer's Lie. Contact: info@mieruconsulting.ai.
You sign in with Sign in with Apple. I receive a stable, app-specific user identifier from Apple, which is stored as your account ID. If you choose to share your email address at sign-in, Apple may supply either your real address or a private relay address; if you choose to hide it, I never receive your real address. I do not receive your Apple ID password, your Apple account name, your payment details, or your device's advertising identifier.
A display handle you choose, a randomly generated friend code used to add friends, and your account creation date.
This is the bulk of what is stored, and it is stored because the game's rating and streak systems cannot function without it:
| Data | Why it exists |
|---|---|
| Each guess you submit on a puzzle, which hex you chose, whether it solved, and whether it was your 1st, 2nd or 3rd attempt | Scoring, and preventing more than three attempts |
| When you started a puzzle and when you submitted, and the elapsed solve time in milliseconds | Solve timing, leaderboards, duel outcomes |
| Whether you played in assisted or pure note mode | Separating assisted from unassisted results |
| Optional clue timings — which clue you ticked off and how long into the solve | Post-solve analysis shown back to you; advisory only |
| Replay traces for puzzles where you race a "ghost" | Rendering the ghost replay |
| Skill rating, rating deviation and volatility, plus a dated history of every rating change | Matching you to puzzles of appropriate difficulty |
| Current streak, best streak, last play date, and streak freezes used | The streak feature |
| Season points, total solves and clean solves | Seasonal leaderboards |
If you rate a puzzle, your 1–5 star vote is stored against your account and that puzzle. Votes are aggregated into a puzzle's public score; your individual vote is not displayed to other players.
Friendships you form, setters you follow, and duels you take part in — including who challenged whom, who won, and the reason the duel ended.
If you set puzzles, your setter display name, setter rating, tier and reputation are stored, and your setter name is shown publicly alongside puzzles you publish.
Whether you hold an active Guild membership, which product you bought, and when the current period ends. Payments are processed entirely by Apple. I never see or store your card number, billing address, or any other payment instrument.
What the app does not collect: location data, contacts, photos, microphone or camera access, health data, browsing history, advertising identifiers, or biometric data. The app contains no advertising and no third-party trackers.
For users in the UK, EU and other regions with equivalent law, the lawful bases are: performance of a contract for your account, gameplay history, ratings and membership status, since the game cannot deliver a rated, streak-tracking puzzle without them; and legitimate interests for preventing cheating and abuse. Where consent is the basis, you may withdraw it by deleting your account.
| Recipient | What they get | Why |
|---|---|---|
| Apple | Your purchase and subscription transactions; the sign-in identifier originates with them | Authentication and payment processing |
| RevenueCat, Inc. | Your account identifier and subscription events (purchase, renewal, cancellation, refund, expiry) | Managing subscription entitlements |
| Supabase, Inc. | Hosts the database and server functions holding everything in section 2 | Backend infrastructure |
These are the only three. I do not sell your data, share it with data brokers, or use it for advertising. Data is stored on infrastructure located in the United States; if you are outside the US, your data is transferred there.
Your account and its gameplay history are kept for as long as your account exists. When you delete your account, your profile, submissions, ratings, streaks, social connections and rating history are deleted. Puzzles you published as a setter may remain available to other players, with your setter name removed. Anonymised, aggregate statistics that cannot identify you — such as a puzzle's overall difficulty score — are retained.
You can delete your account and all associated data from within the app; this is immediate and does not require contacting me. You may also request access to your data, correction of it, a portable copy, or restriction of processing, by writing to info@mieruconsulting.ai. I will respond within 30 days.
If you are in the EU or UK you may complain to your local supervisory authority. If you are a California resident, you have the rights described under the CCPA/CPRA, including the right to know and the right to delete; I do not sell or share personal information as those terms are defined there.
Cartographer's Lie is not directed at children under 13, and I do not knowingly collect personal information from them. If you believe a child has created an account, write to me and I will delete it.
All traffic between the app and the server is encrypted in transit. Database access is restricted by row-level security policies so that your data is readable only by your own authenticated session, except where the game deliberately shows information publicly — leaderboard standings, setter names on published puzzles, and handles visible to friends. No system is perfectly secure, and I cannot guarantee absolute security.
If this policy changes materially, the date at the top will be updated and the change will be noted in the app before it takes effect.