Last updated: 2026-07-23

TRIPLES LLC operates Triples!. This policy covers local play, accounts, social features, reminders, and first-party measurement. Triples does not sell personal information or use third-party analytics or advertising SDKs.

Eligibility and Local Play

Triples is a United States general-audience service for people age 13 and older. Local and offline play do not require an account. Before account collection, a player confirms 13+. Triples stores the confirmation, disclosure version, and time, not a date of birth, birth year, exact age, or age band. Learning that an account belongs to a child under 13 disables it and opens deletion review.

Accounts and Public Identity

Stytch manages passwordless sign-in and holds the verified email address or phone number used to sign in. For phone sign-in, Stytch generates a one-time code and sends it by text message; the code expires after use or a short timeout. Message and data rates may apply. Triples binds an opaque Stytch user ID to an opaque Triples player ID; it stores no password, link token, or SMS code. Signing in by email or phone grants no marketing or reminder consent.

Global rank, friends, and future remote play require an account. An optional public handle stays private until moderation approval and may be rejected or hidden for safety and service integrity.

Gameplay and Daily Results

The device stores game progress, local Daily results, streaks, tutorial progress, preferences, installation state, and an anonymous app identifier. Clearing site data removes it.

Account leaderboard submissions send compact actions for rule validation. Triples stores the result, challenge and season, rank eligibility, integrity receipt, and submission digest. The server record governs global rank.

Product Measurement, Feedback, and Beta Access

First-party categorical events measure discovery, play, returns, sharing, and installs. Triples stores an anonymous browser identifier only as a salted hash. Raw bodies are discarded; aggregates and hashed markers expire after 60 days. Analytics excludes contact information, raw invite slugs, free text, raw URLs, durable IP addresses, and durable user-agent strings. Visit turn off usage measurement once to stop future events on this device; turn it on the same way.

In-app feedback has a quick check, optional note, and no contact field. It opens no email draft and sends nothing. Direct replies stay in the original channel.

Private beta access uses random install tokens, salted hashes, opaque slugs, access state, source, and timestamps. This path adds no contact or gameplay data.

Triples also sends a small number of categorical error and crash signals (failure type, general app area, and a redacted, length-limited description with no device identifier or page URL) so the team can watch for stability problems, governed by the same analytics opt-out control.

Optional Messages

Marketing email, email gameplay reminders, and web-push reminders are separate, optional, and unchecked by default. Each is independently revocable. Triples stores the channel, purpose, choice, disclosure version, source, locale, and time. SMS marketing and SMS gameplay reminders are unavailable in the account alpha.

Web-push reminders use the endpoint, encryption keys, preferences, time zone, and delivery records. Turn them off in Triples or device settings.

Service Providers

Cloudflare provides site delivery, Workers, D1 storage, networking, and security. Email and device push providers process the address, subscription, delivery, or network data needed for enabled messages.

Export, Deletion, and Retention

Export and account deletion are self-serve controls in Account settings. The Triples D1 export covers the player record, consent and handle state, results, and eligible operational records; it excludes the verified email address or phone number and provider-side authentication records held by Stytch. Account deletion removes the verified email address or phone number from Stytch promptly.

Deletion immediately hides the public handle and social identity. An ordinary numeric result remains anonymous and rank-eligible through the end of its UTC calendar month plus 90 days, then is purged or aggregated. A known under-13 account is permanently excluded from rankings and enters deletion review.

Web-push subscriptions expire after 90 days of inactivity. Ended beta entitlement and referral records expire after 90 days. Consent and account audit records expire 90 days after account deletion. Moderation and appeal evidence expires after 180 days.

Email hello@triples.one for privacy questions, security incidents, account help, or handle appeals.