Moss & Glow

Privacy Policy

Last updated: 25 October 2026

Moss & Glow ("the game") is a puzzle game by Muhaymin Bin Mehmood ("we"). This policy explains what the game stores, what reaches us, and how to get rid of it.

The short version. You can play the whole game without an account, and then nothing about you reaches us at all. If you choose to sign in, we store your email address, the name and picture you pick, and a copy of your save — and you can delete all of it from inside the game.

What stays on your phone

Your save — the board, scores, creatures, garden, settings and any unfinished game — is stored in the game's own storage on your device. As a guest, that is the only copy, and it never leaves the phone.

Backup code

Settings → Backup & restore creates a code that contains your save, so you can move it to another install. The code is made on your phone and goes only where you paste it. We never see it.

If you sign in (optional)

Signing in is never required. It exists so your progress survives a lost phone and follows you to a new one. You can sign in with Google, or with your email address and a 6-digit code — there is no password.

What we store about you

WhatWhyWho can see it
Your email address It is your account — it is how we know it is you next time Only you and us
A name and picture you choose Shown on your account, and on leaderboards in a future version Anyone, once leaderboards exist. Do not use your real name.
A copy of your save So you can keep playing on another phone Only you. Enforced by the database, not just by the app.
A short record of account activity: a random account number, what happened (signed up, signed in, signed out, save uploaded or downloaded, account deleted), when it happened, and which version of the game you were on So we can tell what happened to an account when something goes wrong or you ask us about it, and so we can show that a deletion really took place Only us

When you sign in with Google, Google tells us your email address, name and profile picture URL. We keep only the email address. We never receive your Google password.

Where it is stored

On Supabase, our database and sign-in provider, on servers in Mumbai, India. Supabase processes this data on our behalf.

When you sign in with email, the email with your sign-in code is sent through Resend, our email delivery provider. Resend receives your email address and the message so it can deliver it, and processes them on our behalf.

What the game does not do

Deleting your data

The account and everything in it

In the game: Settings → Account → Delete account. It asks you to type DELETE, and then permanently removes your account, your cloud save and your name and picture. It cannot be undone. You can also choose to erase the progress on that phone at the same time.

If you cannot sign in, use the deletion request page and we will do it for you within 30 days.

What survives a deletion

One thing: the short activity record described above, which keeps a random account number (not your email, not your name) and the fact that an account was created and later deleted. We keep those entries for up to 12 months and then remove them.

The copy on your phone

Uninstalling the game, or clearing its storage (Android Settings → Apps → Moss & Glow → Storage), deletes the save on the device.

Children

The game is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has created an account, write to us and we will delete it.

Your rights

You can ask us what we hold about you, ask for a copy, ask us to correct it, or ask us to delete it. Write to support@mossandglow.app and we will answer within 30 days.

Changes

We update this policy before releasing a version that collects anything new, and the date at the top changes with it.

Contact

Muhaymin Bin Mehmood — support@mossandglow.app