Legal

Privacy policy

Last updated 12 November 2026 · Covers koonixlabs.com and every Koonixlabs app, including Medusa on iPhone, Android and the web

In short

  • No accounts, ads, analytics or tracking in any of our games.
  • Your progress stays on your own device. We never see it.
  • Payments go through Apple, Google or Stripe. We never see your card.
  • If you email us, we use your email only to reply.

Who we are

Koonixlabs is the name an independent developer uses to publish apps and games. It is not a company. In this policy "we" and "us" mean that developer, who is responsible for your data under data protection law. For anything about privacy, email support@koonixlabs.com.

What our games store on your device

To let you continue a match and keep your settings, a game saves a few things on your device only:

  • your saved match, so you can resume it;
  • your settings, such as sound, haptics, reduced motion and difficulty;
  • your results, statistics, daily challenges and milestones;
  • whether you own the Full Game unlock, and a random purchase ID (see Purchases).

On iPhone and Android this lives in the app's private storage. In the browser version it lives in your browser's local storage for koonixlabs.com. None of it is sent to us. Delete it any time with Settings › Delete local data in the game, by deleting the app, or by clearing this site's data in your browser.

What we never do

  • No accounts or sign-in. Online rooms use a name you pick for that room only.
  • No advertising and no advertising identifiers.
  • No analytics, crash-reporting or tracking services.
  • No cookies on koonixlabs.com.
  • No selling or sharing of personal data.

Notifications

If you turn on reminders in the iPhone app, your phone schedules them itself. They are not sent from a server, and we learn nothing when you turn them on or off.

Purchases

Our games are free to download, with an optional one-time Full Game unlock. You buy it from the Apple App Store, Google Play or, in the browser version, through a secure checkout run by RevenueCat and Stripe. We never see your card details.

We use RevenueCat to confirm a purchase and unlock it. RevenueCat receives a random ID created by the game (not your name, email or an advertising ID), the product you bought and the store's receipt. For browser purchases, Stripe processes the payment and asks for the email address it sends your receipt to. Apple, Google and Stripe handle payments under their own privacy policies.

In the browser version, the purchase code is only loaded when the unlock is available, from RevenueCat and the jsDelivr content network. Like any web request, this shares your IP address with those services. If purchases aren't live yet, nothing is loaded.

This website

koonixlabs.com is hosted on Cloudflare Pages. Like any web host, Cloudflare processes your IP address and basic request details to deliver the pages and protect the site from abuse; see Cloudflare's privacy policy. We don't run analytics or set cookies, and the site's fonts are served from koonixlabs.com rather than a third party.

Emails to us

If you email us, we receive your email address and whatever you write, and use them only to help you. Emails to koonixlabs.com addresses are forwarded by Cloudflare Email Routing to the developer's inbox. We keep support emails only as long as we need them and delete them on request.

Children

Our games suit a general audience and collect no personal information from anyone, including children. If a child has emailed us, contact us and we will delete the message.

Your rights

Depending on where you live (for example under the UK or EU GDPR, or California law), you can ask what personal data we hold about you, have it corrected, or have it deleted. Because our games keep your data on your device, the only personal data we are likely to hold is a support email. Contact support@koonixlabs.com and we will reply within one month. You can also complain to your local data protection authority; in the UK that is the Information Commissioner's Office.

Online rooms with friends

If you create or join an online room to play with friends, our room server (run on Cloudflare) briefly stores what the match needs: the display name you choose for the room, a random seat code that lets your device rejoin your seat, and the moves played. It is deleted when the room closes, at the latest 24 hours after it was created. Online rooms have no accounts, no chat and no analytics. As with the website, Cloudflare processes IP addresses in its standard request logs to deliver the connection and protect it from abuse. If you never play online, nothing is sent. Pass-and-play on one device works fully offline and sends nothing.

Future features

If a later version adds sign-in (for example to carry your unlock between devices), we will update this policy before it ships to say exactly what is collected and why.

Changes to this policy

When we change this policy we update the date at the top. Significant changes will also appear in the app's release notes.