AFTERMOVE privacy notice

Effective 7 September 2026. Oomny B.V. is responsible for this app and its website. Contact privacy@oomny.eu about your data.

Play on your device

Your current puzzle, local winning shapes, ink preference and store entitlement are kept on your device. Local studio play does not upload your drawings. The app has no advertising SDK, cross-app tracking or AI-generated gameplay.

Use the community

When a reuse round requests a player shape, or you open community history or share a shape, the app contacts the service. On the first request it creates a random guest ID and secret credential automatically, without a registration form. The credential is protected with iOS Keychain or Android Keystore and is not shown to other players. We store a hash of the credential, the guest ID and creation time on the server.

When you choose to share, we receive your drawn points, puzzle IDs, the placement that solves a different puzzle, and a timestamp. When you solve a player shape, we receive its ID and your placement; the service verifies and stores the replay. Reports, blocks and moderation decisions are also stored. These records are linked to the guest ID, even though you do not register a name or email.

Why we process it

Guest identity, delivery and replay records are used to provide the community features you request. Public sharing is optional. Safety reports, blocks, proof checks and request limits protect players and the service against abuse. We rely on performance of the service contract for requested gameplay services and legitimate interests for proportionate security and moderation. We do not sell this data or use it for advertising profiles.

Who receives it

Approved shapes can be delivered to other guests. The creator can see verified reuse. Secret credentials, reports and block lists are not public. Cloudflare hosts the API and database and processes network requests, including IP addresses. Our app stores a hashed network address for temporary anti-abuse limits; it does not use it to infer location.

Cloudflare operates globally, so processing can occur outside your country. Its data processing terms describe transfer safeguards. Apple or Google handles purchases under its own privacy policy. We do not receive your payment card details. If you email us, we receive your email address and the content you send.

Retention and deletion

Guest-linked community records remain until you delete the guest, content is removed during moderation, or the service no longer needs them. Use Settings โ†’ Delete everything while connected. This removes your hosted contributions, related replays, reports and blocks, and the app's local solutions and saved puzzle. Uninstalling does not make that request. If deletion fails, the app retains the credential so you can retry.

Temporary anti-abuse buckets expire daily and are cleaned by a scheduled job; allow up to 48 hours. Cloudflare retains recoverable database history for up to seven days on our current free plan. These copies are not used by the live app. We do not return an old copy to service unless completed deletions remain applied. Other players' previously saved local solutions cannot be remotely erased. Purchase records remain with the store.

Your choices and rights

You may request access, correction, deletion, restriction or portability where applicable, and object to processing based on legitimate interests. Email privacy@oomny.eu; we normally respond within one month. We may need to verify that a guest belongs to you, and an email address alone cannot identify an anonymous guest. You can also complain to the Dutch Autoriteit Persoonsgegevens or your local data protection authority.

This website

We use Cloudflare Web Analytics to measure page views and website performance. It uses no cookies, local storage or visitor fingerprinting. The hosting provider receives ordinary connection data to deliver and protect the site. Following a store or email link takes you to that provider.