Privacy Policy

What we collect

Your account details: your email address and display name.

The training data you generate: solves and their times, penalties, scrambles, sessions, reconstructions, trainer attempts, ranked runs, challenges, experience points, levels and achievements. When a smart cube is connected, a solve also carries its move sequence with timestamps and the orientation track measured by the cube's gyroscope. That data is what shows your progress over time.

Your settings: training configurations, paired hardware, language and display preferences.

Basic technical data that any server receives, such as your IP address, browser or app version and device type, kept in request logs for security and debugging.

How we use it

To run the app, sync your sessions across your devices, compute your statistics and rankings, keep your subscription in order, and answer you when you write to support.

We also look at aggregated, anonymous training data to build features such as peer averages and step distributions. We do not sell your personal data and we do not use it for advertising.

What other people can see

Your display name, level and achievements appear on your public profile and on leaderboards, along with the results that earned them. Ranked and trainer leaderboards are public.

When you share a solve, an average or a reconstruction, anyone with the link can open it, and link previews in apps like Slack or Discord are generated from that public page. Your email address is never shown publicly.

Signing in with Apple, Google or the WCA

If you sign in with Apple, Google or your World Cube Association account, that provider tells us your email address and name so we can create or find your account. Apple's Hide My Email relay address works fine here. Signing in with the WCA also links your WCA ID to your profile.

Payments and subscriptions

Subscriptions are handled by RevenueCat, which works with the Apple App Store, Google Play and our web payment provider depending on where you subscribe. They tell us whether your subscription is active, which plan it is and when it renews.

Card and billing details go to the store or the payment provider, never to our servers. Refunds and cancellations are handled by whichever store took the payment.

Smart cubes and smart timers

A smart cube or smart timer connects straight to your device over Bluetooth. We store the model and identifier of the devices you pair so the app can reconnect to them, and the moves and orientation data a cube reports during a solve are saved with that solve.

On Android 11 and older, the system requires the location permission before an app may scan for Bluetooth devices. We use it only to find your cube. We never collect or store your location.

Analytics and cookies

On the website we use Google Analytics through Google Tag Manager, and only after you accept it in the cookie banner. Decline it and no analytics script is loaded. You can change your mind by clearing the site data in your browser.

The mobile apps run no analytics at all. Apart from analytics, we store a few items in your browser or app storage that the service needs: your login token, your preferences and your cookie choice.

Crash and error reports

When something breaks, an error report goes to Sentry so we can fix it. It contains the technical details of the error, the page you were on, your browser or app version, and, if you are signed in, your email address and display name so we can tie a report to a support message.

Who else processes your data

Beyond the providers already named, we use hosting, database and email delivery providers to run the service, and Capgo to ship app updates to the mobile apps. Each of them handles data only on our instructions.

Some of these providers are based outside the European Union. We only use providers that commit contractually to European data protection standards.

How long we keep it

We keep your account and training data for as long as your account exists. Delete your account and we remove your personal data and your solves, keeping only what the law requires us to keep, such as billing records.

You can delete your account from the app at any time, under Account then Profile. Deletion is confirmed with a code sent to your email address, then the account is locked for 30 days so a request made in error can be undone. After that, the data above is deleted permanently. If you cannot sign in, or you want a copy of your data, write to us from the email address linked to the account.

Your rights

If you are in the European Union or the United Kingdom, you can ask for access to your data, correct it, have it deleted, receive it in a portable format, or object to a given use. Write to us and we will answer within a month.

We process your data to provide the service you signed up for, to meet our legal obligations, and, for analytics, on the consent you give in the cookie banner. If you think we handled your data badly, you can complain to your national data protection authority, which in France is the CNIL.

Changes to this policy

We update this page when the way we handle data changes. The date at the top always reflects the current version, and we will tell you in the app before a significant change takes effect.

Contact

For any question about your data, or to ask for a copy or its deletion, write to vwojtasinski@xcross.gg from the email address linked to your account.