Privacy policy

Last updated 26 September 2026, when the game was renamed from Acrostic to Crostica

Crostica is a small word-puzzle game run by one person. It collects only what it needs to sign you in and keep your games, and it doesn't sell, share or advertise with any of it.

What the game stores

• Your email address. It's how you sign in, and it's what your games and coins are saved under.
• Your name, only if you sign in with Apple and Apple shares it. If you choose Apple's Hide My Email, the game gets a relay address from Apple instead of your real one.
• Your Apple user ID, if you sign in with Apple, so the game can recognise you next time, and a token from Apple, used only to tell Apple when you delete your account.
• Your games: the puzzles you've played, your progress and times, your coins and what you earned and spent them on, and when you first and last opened the game.
• Puzzles you build: a record of each build, with its time and cost, so the game can hold everyone to 5 builds a day.
• Sign-in records: a scrambled copy (a hash) of each sign-in code and each session, never the code or session itself.

The game doesn't store your IP address, and it has no ads, analytics or tracking.

Cookies and your browser

One cookie keeps you signed in for up to 60 days. A second one lasts 10 minutes while you sign in with Apple, to make sure the reply really came from the sign-in you started. The game also keeps your settings and any game in progress in your browser's own storage.

Who else handles your data

• Cloudflare hosts the game and its database, and sends the sign-in code emails. Like any web host, it handles each request and keeps short-lived operational logs.
• Apple, if you choose Sign in with Apple.
• Anthropic or Cloudflare Workers AI write new puzzles. They get the topic you type, if any, and never your email or anything else about you.

How long it's kept

Until you delete your account. Sign-in codes expire after 10 minutes and sessions after 60 days without use.

Deleting your account

Open Settings in the game and choose Delete account. That removes your account, email, name, Apple link, games, coins and sessions straight away, on every device. If you signed in with Apple, the game also tells Apple, so it leaves the list of apps using Sign in with Apple in your Apple Account. Build records stay for cost accounting, with your email taken off them, and the puzzles themselves stay, since they aren't about you. You can also ask by email.

Children

The game isn't aimed at children under 13, and doesn't knowingly collect their data.

Changes and contact

If this policy changes, the date at the top changes with it. Questions, or a request to see or delete your data: privacy@crostica.com.