GRIDFALL privacy policy

Last updated 10 September 2026. GRIDFALL is published by Noteroom, operated by the developer of GRIDFALL. Noteroom is the data controller for the small amount of information described below. You can reach us at support@noteroom.app.

The short version

GRIDFALL has no accounts, no logins, no advertising, no analytics and no third-party trackers, and it never asks for your email address or your real name. The only information that ever leaves your device is what is needed to put you on the global leaderboards, and only after you choose a name for yourself. If you never set a name, nothing about your play is sent anywhere.

What stays on your device

Your scores, unlocked cosmetics, settings and stats are saved on your own device. On Android they live in the app's private storage and are removed when you uninstall the game. On Windows they live in a save file in your user folder. On the web they live in your browser's local storage.

The global leaderboards

GRIDFALL has optional global leaderboards. They are switched on for you when you set a name in the game; until you do, the game sends no scores and no name.

Once you have set a name, the game sends the following to our own server at noteroom.app after a run and when you change your name:

• The name you chose — letters, digits and spaces, up to 16 characters. You pick it; it is not taken from your device or from any account.
• A random device ID — a 16-character random code (for example 3f9a2c81d40b7e56) that the game generates on your device the first time you open the name screen. It is a random per-install value: it is not derived from your device, your phone number, your advertising ID or anything else that identifies you. It exists only so the board can keep one row per player instead of a new row for every run.
• Your best score on that board, the stage or room you reached, how long the run lasted in seconds, and the run's seed (a number that describes the layout you played).
• The version of the game you are running.

That is the whole list. No email address, no password, no contacts, no location, no advertising identifier, no device fingerprint, no crash or analytics reporting.

We use this data to run the public leaderboards and to keep them honest — the score, stage, time and run telemetry let us spot and reject impossible or tampered runs (basic anti-cheat).

What other players can see. The boards are public. Anyone who opens a board sees your chosen name, your score, the stage or room you reached, your run time, and the date your entry was last updated. Please treat your name as public: do not use your real name, your school or workplace, your email address, your social media handle, or anything else that identifies you. Pick a nickname. If a name is offensive or impersonates someone, we will remove or reset it: report it by email to support@noteroom.app with the name and the board it appears on, and it will be taken down.

Server logs and your IP address

The leaderboard server is a small script running on our hosting provider's web hosting. Like every web server, it keeps standard access logs: your IP address, the date and time, the web address requested, the response code and your browser or app's user-agent string. We use those logs only to keep the service running, to investigate errors, and to deal with abuse such as flooding or fake scores. We do not use them to build a profile of you, and we do not combine them with the leaderboard data to try to work out who you are.

One honest detail: once you have set a name, the game puts your random device ID in the web address when it loads a board, so that ID appears in the access log next to your IP address for as long as that log is kept. Before you set a name the ID never leaves your device.

Under UK data protection law an IP address can count as personal data, which is why it is described here.

Where the data is held

The leaderboard database and the logs sit on web hosting provided by our hosting provider, which acts as our processor: it hosts the data for us and is not allowed to use it for its own purposes. Its staff and the suppliers it uses for backups, security and support may need access to the servers to provide the service. We do not sell your data, we do not share it with advertisers or data brokers, and there are no third-party SDKs in the game.

Why we are allowed to hold it (lawful basis)

• Consent (UK GDPR Article 6(1)(a)) for putting your name and scores on the public boards. You give that consent by choosing a name; nothing is published before you do. You can withdraw it at any time by removing yourself from the boards (see below), and withdrawing it does not affect anything we did before you withdrew it.
• Legitimate interests (UK GDPR Article 6(1)(f)) for the server logs and for basic anti-cheat and abuse handling — our interest is keeping a small game's leaderboards working and honest, and the information involved is minimal and not used for anything else.

How long it is kept

• Leaderboard entries — kept until you remove yourself, or until we retire that board. Weekly boards are kept for up to 12 months and then deleted.
• Server access logs — kept for a short period, normally no more than 30 days; the exact rotation is set by our host.
• Backups — a copy of the database may sit in a backup for up to 30 days after you delete your entry, after which it is overwritten.
• Emails you send us — kept only as long as we need them to answer you, and for a reasonable period afterwards in case you follow up.

Removing yourself

You can do this yourself, without contacting anyone:

• Open the name screen in the game and press REMOVE to remove yourself from the global boards. That deletes your rows from every board on our server and clears the name and random device ID stored on your device. You can carry on playing; your offline scores stay where they are.
• Or use the removal page, which does the same thing if you have your random device ID (the game shows it on the name screen).
• Or email support@noteroom.app. Because we hold no email address and no account for you, the only way we can find your entry is by the name shown on the board and your random device ID, which the game displays on the name screen — please include them. If you cannot supply them we may not be able to identify your data, and UK GDPR does not require us to collect extra information about you just to make that possible.

Uninstalling the game removes everything held on your device, but it does not remove an entry already on the board — use one of the routes above for that.

Your rights

If you are in the United Kingdom or the European Economic Area you have the right to ask us for a copy of the data we hold about you, to have it corrected, to have it deleted, to restrict or object to how we use it, to receive it in a portable form, and to withdraw consent. Write to support@noteroom.app and we will answer within one month. The same caveat applies: we can only act on a request if you can tell us the name and random device ID that identify your entry.

If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office, the UK regulator, at ico.org.uk/make-a-complaint, or to your local supervisory authority in the EEA.

Children

GRIDFALL is not directed at children under 13 and we do not knowingly collect information from them. The game does not ask anyone's age, so it cannot verify it. There is no advertising, no profiling, no chat and no way for players to message each other; the only thing a player can publish is a short name on a scoreboard. If you are a parent or guardian and believe your child has put a name on the boards, email support@noteroom.app with the name shown and we will remove the entry.

Security

The game talks to the server over HTTPS, and the score database is not served to the public web. This is a small independent project, so we cannot promise perfect security — but there is very little to lose here: no passwords, no email addresses, and no payment details are stored anywhere in GRIDFALL.

Other network use

The Windows version can show what you are playing on Discord if you turn that on in Settings; that information goes only to the Discord app running on your own computer, and the switch does nothing for anyone who does not have Discord open.

Changes

If this policy changes, the new version will be posted at this address with a new date. If a change means we start collecting something materially different, we will say so in the game as well.

Contact

Noteroom, operated by the developer of GRIDFALL.
Questions, deletion requests and anything else: support@noteroom.app.