Privacy Policy
Last updated: 3 October 2026
This policy explains what information is collected when you use the Shovrim (שוברים ת'ראש) app and website, why it is collected, who it is shared with, and what rights you have. It was written under the Israeli Protection of Privacy Law, 5741-1981 (including Amendment 13), and the EU General Data Protection Regulation (GDPR).
1. Who is responsible for your data
Shovrim is operated by Swipe Digital, Israel. Swipe Digital is the database owner under Israeli law and the controller under the GDPR.
For any privacy question or request: Rackingbrainsapp@gmail.com
2. In short
- You can play without signing up and without giving a name or an email.
- We collect what is needed for the games, the score and the league to work, and usage data that helps us improve the games.
- Usage data stays with us. The app has no analytics, advertising or tracking tools from other companies.
- We do not sell personal data.
- Payment details never reach us. When purchases open, they will go through Apple or Google.
- You can ask to see, correct or delete your data at any time.
3. What we collect
| Type | What it includes | Where it comes from |
|---|---|---|
| User ID | A random ID and a temporary name, such as user6754236783 | Created automatically on first launch |
| Sign-up details | Nickname, email address and password (stored encrypted, and nobody can see it). A phone number, only if you chose to add one | From you, only if you sign up |
| Sign-in with Google or Apple | The email address, name and profile picture the account shares. We do not receive your password or access to anything else in the account | From Google or Apple, only if you choose that option |
| Game data | Score, points and coins, progress in each game, daily round results, daily missions, league position, hints you used, and words you typed that were not in our word list | Created as you play |
| Usage data | Which screens and games you opened, how long you played, what you solved in each puzzle, when you opened the instructions, and error messages | Automatically, from the app |
| Technical data | Device type, operating system, browser, language, screen size, the site you came from, and whether the app is installed | Automatically, from the device |
| Approximate location | Country, region and city, based on your IP address. We do not store the IP address itself with the usage data | Automatically, from our hosting provider |
| Age and gender | Age range and gender. Never shown to anyone | From you, only if you fill in "Tell us about yourself" on your profile |
| Notifications | An address your browser creates so we can send you a daily reminder | Only if you turn on notifications in settings |
| Purchases | What was bought and when, and the transaction ID | From the app store, once purchases open |
| Messages | Your email address and what you wrote | From you, when you write to us |
What we do not collect: precise (GPS) location, contacts, photos, recordings, or special categories of data (such as health data, political opinions or religious beliefs).
Answering by voice: in "What's in the Picture" you can say your answer out loud. Speech recognition is done by your browser or operating system (in some browsers, such as Chrome, your voice is sent to Google for this, under Google's privacy policy). We receive only the recognized text. The recording never reaches us.
4. Why we use it, and on what legal basis
| Purpose | Data | GDPR legal basis |
|---|---|---|
| Running the games and saving progress | User ID, game data | Performance of a contract (the Terms of Use) |
| Showing the league table and daily round results | Nickname or temporary name, score | Performance of a contract |
| Keeping your account across devices and letting you sign in | Sign-up details, Google or Apple sign-in | Performance of a contract |
| Sending a daily reminder | Notifications | Consent |
| Improving the games and puzzles, and understanding what is hard and what does not work | Usage data, technical data, approximate location | Legitimate interest |
| Fitting the puzzles to our players | Age and gender | Consent |
| Providing purchases and handling purchase problems | Purchases | Performance of a contract, legal obligation |
| Fixing bugs and keeping the service secure | Technical data, error messages | Legitimate interest |
| Preventing cheating in the league | Game data, technical data | Legitimate interest |
| Answering your messages | Messages | Legitimate interest |
In Israel, data is used on the basis of your consent to the Terms of Use and this policy, and only for the purposes listed here.
You can object to the use of usage data for improving the games. Write to us and we will stop storing it for your account.
5. Do you have to give us information?
There is no legal obligation to give us information. It is up to you and your consent.
- Without signing up: you can play every game. Your score is saved under a temporary name, and we cannot restore it on another device.
- Without age, gender, phone number or notifications: everything works exactly the same.
- Without basic technical data: the app cannot work, because this data is needed to connect to the server.
6. Who we share it with
We do not sell personal data or share it for other companies' advertising. Data goes only to these parties:
| Who | What for | Where |
|---|---|---|
| Supabase | Database, sign-in system and storage of puzzle images | Australia (Sydney) |
| Cloudflare | Hosting the app and the website, and the server function that derives the approximate location from the IP address | United States, with edge servers worldwide |
| GitHub | Sending the daily reminder, and the daily backup of user data | United States |
| Sign-in with Google, the fonts in the app (Google Fonts, which receives your IP address when a font loads), and the support mailbox (Gmail) | United States | |
| Apple | Sign-in with Apple, app downloads and in-app purchases | United States |
| Your browser's push service | Delivering the daily reminder to your device (Google, Apple or Mozilla, depending on the browser). It receives only the reminder itself, with no details about you | United States |
These providers act on our instructions and under terms that require them to protect the data. Google and Apple also act under their own privacy policies when you sign in through them.
We will disclose data to authorities only if the law requires it, or when it is needed to protect rights, safety or the security of the service.
7. What other users can see
The league table and daily round results are visible to all users. They show your chosen nickname (or the temporary name), your score and your position. When you send a challenge to a friend, anyone who opens the link sees your nickname and your result in that puzzle, and you see the nickname and result of whoever answers. Your email address, phone number, age and gender are never shown to anyone.
Do not choose a nickname that reveals details you do not want to publish, such as your full name or phone number.
8. Transfers outside Israel
Some of our providers store and process data on servers outside Israel, including in Australia (our database), the United States and the European Union. Transfers are made under the Protection of Privacy Regulations (Transfer of Data to Databases Abroad), 5761-2001.
For users in the European Union: the European Commission has recognized Israel as providing an adequate level of protection for personal data. When data is transferred onward to a country without such recognition, the transfer relies on Standard Contractual Clauses (SCCs) or an equivalent framework, such as the EU-U.S. Data Privacy Framework.
9. How long we keep it
| Data | How long |
|---|---|
| Account, game data and usage data | As long as the account exists, and up to 30 days after a deletion request |
| Unused account | There is no automatic deletion at the moment. You can ask for deletion at any time |
| Words you typed that were not in our word list | After the account is deleted, kept with no link to you |
| Purchase records | Up to 7 years, as tax and bookkeeping law requires |
| Server and security logs at our infrastructure providers | Up to 90 days |
| Backup copies | Up to 90 days |
| Messages | Up to two years after the matter is closed |
10. Your rights
Under Israeli law you have the right to see the data stored about you, and to ask us to correct or delete data that is not accurate, complete, clear or up to date.
If you are in the European Union, the European Economic Area or the United Kingdom, you also have the right to:
- Get a copy of your data.
- Correct inaccurate data.
- Have your data deleted (the "right to be forgotten").
- Restrict or object to processing.
- Receive your data in a format you can move to another service.
- Withdraw consent you gave, without affecting what was done before.
How to use them: write to Rackingbrainsapp@gmail.com from your account's email address, or give us the name shown at the top of your profile screen. We will reply within 30 days. To delete your whole account there is a dedicated page.
Without writing to us: you can delete your whole account yourself in the app (Settings → Manage account → Delete account). You can delete your age and gender on your profile (tap the selected option again). You can turn off notifications in settings.
Complaints: if you think we did not handle your request properly, you can contact the Israeli Privacy Protection Authority. Users in the European Union can also contact the data protection authority in their country.
11. Children and teenagers
The app is not meant for children under 13, and we do not knowingly collect data about children of that age. Anyone under 18 needs a parent's or guardian's permission to use the app and sign up. In the European Union, the age at which you can consent on your own is between 13 and 16, depending on the country.
Parents who think their child gave us data without permission are welcome to write to us, and we will delete it.
12. Security
Data travels over encrypted connections (HTTPS) and is stored with providers that use access controls. In our database, each user can access only their own data, except what is shown in the league. Access is limited to those who need it to run the service. No system is completely secure. If a serious security incident occurs, we will report it to the Privacy Protection Authority and to affected users, as the law requires.
13. Cookies and local storage
- In the app: your device stores your sign-in session (so you do not have to sign in every time), your settings (sounds, vibration, notifications, reduced motion), a copy of your progress, and a few small markers, such as which games you already solved today. The visit ID used for usage data is deleted when you close the app. Without this storage, the game cannot remember you.
- On the website: only two essential preferences are stored: your language choice (
shv_lang) and your cookie preference (shv_cookie). The website has no analytics, no ads and no third-party scripts, and its fonts are served from the site itself.
You can see the settings at any time through "Cookie settings" at the bottom of the site. If we ever add analytics to the website, it will run only after you agree.
14. Automated decisions
We do not make decisions that have legal or similarly significant effects on you by automated means alone, and we do not build marketing profiles.
15. Changes to this policy
If we update this policy, the date at the top will change. We will announce material changes in the app or by email before they take effect.
16. Contact
Swipe Digital, Israel
Rackingbrainsapp@gmail.com