CubersDen Privacy Policy

This Privacy Policy explains what information CubersDen (“CubersDen”, “we”, “us”) collects when you use the CubersDen apps for iPhone, Apple Watch and Android, and the cubersden.com website, how we use it, who we share it with, and the choices and rights you have.

CubersDen is a speedcubing app: a solve timer, a statistics tracker, an algorithm trainer, head-to-head “Battles”, and an optional community. Some of these features are social and, by design, show certain information to other users. This policy describes exactly which.

If you do not agree with this policy, please do not use CubersDen.

1. Who we are

CubersDen is operated by the app's developer (the “data controller”). For any privacy question, request, or complaint, contact us at:

• Email: support@cubersden.com
• Web: https://cubersden.com

2. Accounts and how you use CubersDen

You can use CubersDen in three ways:

• Guest / anonymous. You can time solves and use most local features without creating a named account. A pseudonymous, anonymous account identifier is created so your data can sync and (optionally) be upgraded to a full account later. No email is required.
• Email + password account. You create an account with an email address and password, managed by Firebase Authentication (Google). This unlocks cross-device sync, Battles, and the community.
• One account, every platform. The same CubersDen account works in the mobile apps and on the cubersden.com website — sign in anywhere to reach your data.

The mobile apps do not use third-party “Sign in with…” social logins. On the website you can optionally sign in with Google; if you do, Firebase Authentication receives your email address and basic profile information from your Google account. We never collect or store passwords ourselves — authentication is handled by Firebase Authentication.

3. Information we collect

3.1 Information you provide

• Account credentials: email address (for email/password accounts) and the authentication data Firebase needs to sign you in.
• Profile: a display name / username, and optionally a short bio, a “main event”, and a profile photo URL if one is associated with your account.
• Your cubing data: solve times, penalties (+2 / DNF), scrambles, puzzle type, timestamps, optional per-solve comments, session names, and algorithm trainer progress.
• Community content (if you use the Community): posts, comments, likes, follows, and scrambles you choose to share.
• Reports: if you report content or a user, the reason you provide.
• Age bracket: see Section 7 (Children's privacy). We ask for a birth year to compute an age bracket. We do not store your birth date — we store only the resulting bracket (Under 13 / 13–17 / 18+).

3.2 Information created by using CubersDen

• User identifier: the Firebase Authentication user ID that owns your data.
• Battle data: match results, opponents, best-of format, and your ELO rating and win/loss/streak record.
• Diagnostics (mobile apps): crash reports and performance data (via Firebase Crashlytics), tied to an app installation rather than to your identity. The mobile apps contain no other analytics or tracking SDK.
• Website analytics: the cubersden.com website uses Google Analytics to measure pseudonymous page views and site usage so we can understand which pages are useful. This applies to the website only, not to the mobile apps.

3.3 What we do not do

• We do not track you across other companies' apps or websites. There is no advertising SDK, no IDFA, and no cross-app tracking.
• We do not sell or rent your personal information.
• We do not request access to your camera, microphone, contacts, photos, or precise location. The apps do not include a cube scanner or camera feature.

4. How we use your information

We use your information to:

• Provide the timer, statistics, sessions, and algorithm trainer.
• Sync your data across your devices — iPhone, Apple Watch, Android, and the web.
• Run Battles and matchmaking, and calculate ELO ratings and leaderboards.
• Operate the community (feed, posts, comments, likes, follows, shared scrambles).
• Keep the service safe: process reports and blocks, and enforce our community and age rules.
• Diagnose crashes, fix bugs, and understand how the website is used so we can improve CubersDen.
• Communicate with you about your account or support requests.

5. Information shared with other users (social features)

Some features are inherently social. When you use them, the following becomes visible to other people:

• Battles. When you are matched with an opponent (quick match, invite code, or a friend invite), your display name, profile photo (if any), your solve times during that match, and your ELO rating are shown to your opponent. Match results are stored.
• Leaderboards. Leaderboards are public. Your display name, ELO rating, win/loss record, best times, and solve counts can be visible to other users.
• Community feed. Posts, comments, likes, follows, and scrambles you share are visible to other users according to the feed (e.g. “Following” and “Explore”) and your profile visibility.
• Public profile. If your profile is public, your display name, bio, main event, stats, and shared activity can be viewed by other users.

Your controls: You choose whether to use the community at all, what to post, and whom to follow or block. Accounts identified as Under 13 are automatically set to private and cannot use the community (see Section 7).

6. Moderation, blocking, and reporting

To keep CubersDen safe:

• Reporting. You can report a post, comment, user, battle, or shared scramble. Your report (the target and your stated reason) is stored for review. Reports are retained as moderation records even after you delete your account.
• Blocking. You can block another user. Blocked users' content is filtered out of your feeds, comments, leaderboard, and matchmaking.

7. Children's privacy (COPPA / age gating)

CubersDen is a general-audience app and includes age gating rather than being directed to children.

• No birth dates. We ask for a birth year only to compute an age bracket. Only the bracket (Under 13 / 13–17 / 18+) is stored — never the birth date itself.
• Under-13 restrictions. If an account is in the Under 13 bracket, the app automatically:
  • removes the Community entirely (no feed, posts, comments, likes, or follows);
  • forces the profile to private;
  • restricts Battles to invite-code only (no public matchmaking).
• In this bracket, we do not knowingly collect personal information beyond the minimum needed to provide the timer and local features and to operate a basic account. We do not knowingly collect personal information from children under 13 for the community or public features.
• Community interactions require accepting our community guidelines first.

If you are a parent or guardian and believe a child under 13 has provided personal information in a way this policy does not permit, contact us at support@cubersden.com and we will delete it.

8. Third parties and sub-processors

CubersDen relies on the following service providers (“sub-processors”):

• Google Firebase — Authentication (sign-in), Cloud Firestore (storing your solves, sessions, profile, battles, and community data), and Crashlytics (crash diagnostics in the mobile apps). Data is stored on Google Cloud infrastructure. See Google's privacy documentation for how Firebase processes data.
• Google Analytics — pseudonymous usage measurement on the cubersden.com website only.
• Apple — App Store distribution, and on-device iPhone↔Apple Watch communication. Apple Watch data is exchanged locally between your paired devices and is not a separate cloud service.
• Google Play — Android app distribution.

We share personal information with these providers only to operate the service. We may also disclose information if required by law, to enforce our terms, or to protect the rights, property, or safety of our users or the public.

9. Data retention

• Active accounts: we keep your data while your account exists so CubersDen can function across your devices.
• Guest data: kept locally on your device and in your anonymous account until you sign up, sign out, or delete it.
• On deletion: your data is removed as described in Section 10.
• Moderation reports: retained after account deletion as safety records.
• Diagnostics and analytics: retained per Crashlytics' and Google Analytics' default retention windows.

10. Accessing, exporting, and deleting your data

• Access & correction. You can view your data in the app and edit your profile at any time (mobile apps: You → Edit Profile; website: your profile page).
• Export. In the mobile apps you can export your solves as a CSV file from the Statistics screen (share/export), for your own backup or portability.
• Account & data deletion (in-app). You can permanently delete your account from You → Settings → Delete Account in the mobile apps. This is irreversible. When you delete your account:
  • Removed: your solves, sessions, community posts, comments, follows you created, scrambles you shared, your block list, and your algorithm trainer progress; plus all app data stored locally on the device.
  • Removed or anonymized on our servers: your user record, your public profile and aggregate stats, inbound follows from other users, and your identity in shared battle records (battle records themselves are anonymized rather than deleted, so an opponent's history stays intact).
  • Retained: moderation reports you filed (as safety records).
  • Deletion of your sign-in requires a recent login; for email/password accounts you re-enter your password to confirm.
• If you cannot access the app: see cubersden.com/account/delete for how to request deletion by email.

To request help with any of these rights, contact support@cubersden.com.

Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA (to access, correct, delete, or port your data, and to object to or restrict certain processing). We honor these rights; the in-app tools above cover most requests, and you can contact us for anything else.

11. Data security

We use industry-standard measures to protect your data, including encryption in transit (TLS) and server-side security rules that restrict each user's data to that user. No method of transmission or storage is 100% secure, so we cannot guarantee absolute security.

12. International transfers

Your information is processed on Google Firebase / Google Cloud infrastructure and may be processed in countries other than your own. Where required, we rely on appropriate safeguards for such transfers.

13. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version at https://cubersden.com/privacy and update the “Last updated” date. If changes are material, we will provide a more prominent notice where appropriate.

14. Contact us

Questions, requests, or complaints about privacy:

• Email: support@cubersden.com
• Privacy policy: https://cubersden.com/privacy