Koshi: Shikaku Puzzle

Your puzzle.
Your privacy.

A clear look at the little information Koshi uses
and the choices you have.

Privacy policy · Last updated October 31, 2026

The short version.

This policy covers Koshi: Shikaku Puzzle for iPhone and iPad, for Android phones, tablets and foldables, and messages you send to us. Scriptiqs, s. r. o. is the provider and controller for the personal information described here.

You do not need an account to play. Your games, statistics and settings are saved on your device and sync through your own iCloud or Google Play Games account, which we cannot read. Apple and Google handle purchases.

The only information the app sends to us is for the daily leaderboard: a random player ID created by the app and, for each daily puzzle you solve, its date, your score and your time. The leaderboard shows an automatic name such as “Quiet Crane 27”, never your own.

Koshi has no ads and no analytics, advertising or crash-reporting SDKs. We do not sell your personal information or use it to track you across other companies’ apps or websites.

Your game data.

Puzzles are made on your device. The app saves your games in progress, statistics (solves, best scores and times, streak, experience and rank), settings and chosen ink on your device. Statistics include a random ID for each installation, so that solves on several of your devices add up without counting twice; it stays in your own data and sync and is not sent to us.

Practice puzzles and past days from the archive send nothing. The widget, shortcuts and the daily reminder use information the app keeps on your device; the reminder is a notification scheduled on the device, and the app asks for notification permission only when you turn it on.

Playing does not require your name, email, contacts, location, camera or microphone. When you share a solved board, the text and picture go only where you choose to send them; saving the picture asks for permission to add it to your photos.

Daily leaderboard.

The first time you solve the daily puzzle or open the leaderboard, the app creates a random player ID and secret and registers them with our server. For each daily puzzle you solve, it then sends the puzzle’s date, your score and your time in seconds. The ID and secret stay on this device, in the Keychain on Apple devices, or on Android in a file encrypted with the Android Keystore and excluded from backups and device transfers. Our server stores the player ID, a SHA-256 hash of the secret (never the secret itself), when the player was registered and last used the leaderboard, and your daily results. It is a device identity, not an account, and is not linked to your Apple Account, Google account or email.

The server keeps the first result it receives for each day; later results for the same day do not replace it. Results of practice and archive puzzles are never sent.

Each day’s board ranks the players who solved that day’s puzzle by score, then time. Everyone who opens the board sees the top 100 rows and the number of players; each row shows a name, rank, score and time. Names are made automatically from the player ID, as an adjective, an animal and a number. Nobody chooses or types a name, and it is never your device, Apple Account or Google account name. Each device is a separate player with its own name.

Every request also tells our server the app and system version, such as “Koshi/1.0 (iOS 26.1)”, which it logs with the time, route and outcome of the request to keep the service working and to see which app versions are still in use. Your IP address is used briefly in memory to limit the number of requests and is not stored or written to our application logs.

We use this information only to run the leaderboard and to protect it from abuse. Where the GDPR applies, running the leaderboard is necessary to provide the game you use under our contract with you; security processing serves our legitimate interest in preventing abuse.

Apple services.

iCloud

On Apple devices, Koshi keeps your settings, statistics and games in iCloud key-value storage in your Apple Account, so they appear on your other devices. Apple stores this data; Scriptiqs cannot read it and receives no copy. The daily reminder and the leaderboard player stay on each device. If you use iCloud Backup, your device backup may also include the app’s data.

Purchases

Apple processes the one-time Koshi Plus purchase. StoreKit checks and restores it on your device, and Family Sharing can share it. Koshi has no purchase server, and we do not receive your payment details. Apple may provide us with sales and refund information.

Apple diagnostics

Apple may provide app diagnostics, such as crash reports, and aggregated usage information under its own sharing settings and services. The app itself sends no diagnostics to us.

Apple’s processing, retention and international arrangements are explained in Apple’s Privacy Policy and App Store & Privacy.

Google services.

Google Play Games

On Android, when you are signed in to Google Play Games, Koshi keeps your settings, statistics and games as a Play Games saved game in your Google account, so they appear on your other Android devices. Google handles sign-in and stores this data; Scriptiqs cannot read it and receives no copy.

Android backup

If backup is turned on, Android includes the app’s save file in your device backup to your Google account. The leaderboard player and the daily reminder are left out.

Purchases

Google Play processes the one-time Koshi Plus purchase on Android. Google Play Billing checks and restores it on your device; Koshi has no purchase server, and we do not receive your payment details. Google may provide us with order and refund information.

Google diagnostics

If you share usage and diagnostics with Google in your device settings, Google Play may provide us with crash and performance reports about the app (Android vitals). These are Google services, not an analytics SDK in the app.

Google’s processing is explained in the Google Privacy Policy.

Messages to us.

If you email info@scriptiqs.com, we receive your address, your message and any attachments you choose to include, and use them to reply. Our email provider delivers and stores correspondence.

Where the GDPR applies, we process support messages for our legitimate interest in answering enquiries and improving the app, or to perform a contract where needed for purchase-related support. Please avoid sending payment details, passwords or sensitive information that is not needed for support.

Service providers.

Our hosting, database and backup providers process leaderboard data on our behalf; our email provider processes correspondence. Network infrastructure receives connection information needed to serve requests. We do not use third-party analytics, advertising or crash-reporting services, and we do not share leaderboard data with anyone else. Information may also be disclosed when legally required or needed to protect the service and its users.

Where personal information is transferred outside the EEA, applicable transfer safeguards, such as an adequacy decision or standard contractual clauses, are required.

Retention.

Data on your device remains until you delete the app or, on Android, clear its storage. Deleting the app on an Apple device does not necessarily delete the leaderboard player from the Keychain, so reinstalling may use the same player and name again. iCloud, Google Play Games and backups are managed through Apple and Google.

We keep the player record and daily results as long as the leaderboard runs, so that past boards stay complete, unless you ask us to delete them. Email correspondence is kept as needed to address the enquiry, maintain support records or meet legal obligations. Backup copies may remain until the applicable backup rotation replaces them.

Delete your data.

You can ask Scriptiqs to delete the leaderboard data our server holds about you from Koshi: Shikaku Puzzle, on Apple devices or Android. You don’t need an account.

How to ask

  1. Email info@scriptiqs.com with the subject “Privacy request — delete my Koshi data”.
  2. Tell us your leaderboard name (the row marked You on the board, such as “Quiet Crane 27”), your device (Apple or Android), and one or two days you solved with your score, so we can tell your player apart from others with the same name. If you play on more than one device, include each name.
  3. We may ask a question to confirm the records are yours. We confirm when deletion is done, within one month of your request.

What we delete

Your player record (the ID, the hash of its secret and its dates) and all of your daily results, which then disappear from every board. If you open the leaderboard or solve the daily puzzle on that device again, the app registers the same player again, and new results appear under the same name. On Android, deleting the app or clearing its storage removes that player for good; on an Apple device it may remain in the Keychain, as described under Retention.

What we keep

We keep the email exchange about your request as long as needed to show we handled it or to meet legal obligations. Backup copies are replaced by our regular backup rotation.

Data on your device and with Apple or Google

Delete the app, or on Android clear its storage, to remove local game data. Manage iCloud data through Apple, and Google Play Games data and backups through your Google account.

Your choices & rights.

Practice and the archive send nothing to us; the app contacts our server only when you solve a daily puzzle or open the leaderboard. Use your device’s settings to manage iCloud, Google Play Games, backups, notifications and diagnostic sharing with Apple or Google.

Where applicable, you may request access, correction, deletion, restriction or a portable copy of your personal information, and object to processing based on legitimate interests. A parent or guardian can make these requests for a child’s data.

Email us with the subject “Privacy request”. To delete data, follow the steps in Delete your data. We may need your leaderboard name and results to locate and verify the records. Do not send passwords or payment details.

You can complain to your local data-protection authority, including the Office for Personal Data Protection of the Slovak Republic. We do not use this information for automated decisions producing legal or similarly significant effects.

Contact & updates.

Contact Scriptiqs, s. r. o. at info@scriptiqs.com with questions or privacy requests.

We update this policy when the app or our practices change. The date above identifies the latest update; availability of a feature depends on your app version.