Plain English.
The short version. Hueful doesn't require an account, doesn't ask for your name or email, and doesn't sell your data. Your streak and palette live on your device. A few things do leave the app — limited ads, a small config fetch, anonymous play events, and (if you opt in) Apple Game Center — and we walk through each below.
What this covers. The Hueful iOS app and the website at hueful.app. Both are made by J&B Creations LLC.
What stays on your device
The app keeps the following locally, in iOS's standard app sandbox:
- Your streak and your daily results (target color, your guess, ΔE score)
- Your growing palette (the colors you've completed)
- App settings (notification time, sound on/off, haptics, theme preference)
- Hueful Plus entitlement (whether you've subscribed)
None of this is transmitted to us. If you delete the app, this data is removed by iOS.
What leaves your device
Five things, each with a specific purpose:
- Remote configuration. Hueful's daily puzzles are generated on your device — no puzzle data is sent to or fetched from a server. The app does periodically fetch a small configuration file (ad settings, feature flags) from our Cloudflare Worker at
hueful-worker.joel-a24.workers.dev. As with any web request, Cloudflare may process standard connection metadata (IP address, user-agent) and retains server logs for approximately 7 days for abuse prevention and then discards them. - Subscription verification (only if you subscribe). If you purchase Hueful Plus, the App Store handles the transaction. The app verifies your receipt to know whether to unlock Plus features. We do not receive your name, email, or payment information from Apple.
- Anonymous gameplay events. The app may send a randomly-generated anonymous identifier (not linked to your name, email, or Apple ID), the app version, and basic events such as "completed today's puzzle" to our Cloudflare Worker. See Anonymous usage below for what's included and what isn't.
- Ad requests via Google AdMob. When you see an ad, the AdMob SDK makes a request to Google's ad servers. This is a third-party connection that may include your advertising identifier (IDFA) if you allowed tracking when iOS asked. See Advertising below.
- Apple Game Center (optional). If you sign in to Game Center, Apple sends our app a persistent player identifier so leaderboards can recognize you across sessions and devices. See Game Center below.
iCloud sync (future)
Future versions of Hueful may offer optional iCloud sync so your streak and palette move with you across devices. If we ship this, it will be opt-in, the sync uses your private iCloud container (we never see the contents), and this section will be updated before that feature is released.
Subscriptions & payments
Hueful Plus is a subscription handled entirely by Apple via the App Store. Apple processes payment, manages billing, handles refunds per their policies, and provides us only with an anonymized entitlement flag (yes/no on Plus). We never see your name, email, or payment method.
Anonymous usage
To understand engagement and improve the daily puzzle, the app sends a randomly-generated anonymous identifier (not linked to your name, email, or Apple ID) along with basic events such as "completed today's puzzle," your star count, and the app version. This identifier lives on your device and is not shared with any other app or service. It is not used to track you across other companies' apps or websites.
If you purchase Hueful Plus, your purchase receipt is also sent to our Cloudflare Worker so we can validate it against the App Store. The receipt does not contain your name, email, or payment method.
Advertising
Hueful is free to play and shows limited ads (one interstitial per day and an optional rewarded video you choose to watch). Ads are provided by Google AdMob, a third-party advertising network. To show ads, this provider may access your device's advertising identifier (IDFA) and limited usage data.
When you first open the app, iOS will ask whether Hueful may track you across other companies' apps and websites (Apple's App Tracking Transparency prompt). If you decline, you'll still see ads, but they won't be personalized using that identifier. You can change this anytime in iOS Settings → Privacy & Security → Tracking.
Game Center
Hueful supports Apple Game Center for optional leaderboards and friend comparisons. When you opt in (by signing in to Game Center on iOS, or by tapping a Game Center prompt inside Hueful), Apple sends our app a persistent player identifier scoped to this developer. We use it to associate your scores with your account so leaderboards can show your nickname where you've placed.
What Apple shares with us via Game Center:
- Your Game Center player identifier (a persistent ID, scoped to J&B Creations LLC — not your Apple ID)
- Your Game Center nickname (whatever you set in iOS Settings; this is the name that appears on leaderboards)
- Your scores you submit to leaderboards
What Apple does not share with us: your real name, your Apple ID email, your payment information, your contacts, or your Game Center activity in other apps.
Game Center is optional. If you decline the sign-in or turn it off in iOS Settings → Game Center, everything else in Hueful still works — you just won't appear on leaderboards. Apple's own privacy practices for Game Center are governed by Apple's Privacy Policy.
What we don't do
Beyond the anonymous usage events, AdMob requests, and Game Center described above, the Hueful iOS app includes no third-party analytics SDKs, no behavioral trackers, and no fingerprinting. We do not embed Google Analytics, Facebook SDK, Firebase, Amplitude, Mixpanel, or any equivalent.
The website at hueful.app uses Cloudflare's standard request logging (server side, retained ~7 days) for security and performance, plus PostHog for product analytics — anonymous pageviews and click events that help us understand which pages people read before downloading. PostHog is first-party, US-hosted, and sets a cookie that lasts up to one year. No Meta Pixel, no Google Analytics, no behavioral ad retargeting. Most ad blockers and Do Not Track / Global Privacy Control signals already block it.
Share tiles
When you tap Share at the end of a daily session, the app generates a 1080×1080 image on your device using only your local result data and hands it to iOS's native share sheet. We don't see what you shared or who you shared it with.
Sub-processors
These are the services we rely on. We share only what's strictly needed for each one to do its job.
| Provider | Purpose | What they see |
|---|---|---|
| Cloudflare | Remote-config Worker (hueful-worker.joel-a24.workers.dev), anonymous gameplay events, receipt validation, website hosting (Pages) |
Standard HTTP request metadata (IP, user-agent); anonymous identifier + play events; 7-day log retention |
| Google AdMob | Serving in-app advertisements | Advertising identifier (IDFA, only if you allowed tracking), usage data |
| Apple | App distribution, subscription billing, push notifications, iCloud sync (future), Game Center (optional leaderboards) | Apple's standard App Store / iCloud data, never shared with us in identifiable form. Game Center: persistent player identifier + nickname when you opt in |
| PostHog | Website-only product analytics (pageviews, click events on hueful.app) | Anonymous browser-side identifier, page URLs, referrer, user-agent; US-hosted, 7-year retention by default |
Notifications
If you opt in to daily reminder notifications, iOS handles delivery locally. Notification scheduling happens on-device. We don't send push notifications from our servers.
Data retention & deletion
We don't store personally identifiable information on our servers — no name, no email, no account. The anonymous identifier used for gameplay events isn't tied to your Apple ID, your name, or anything else that points back at you, so there is no per-user record to delete from our side. To remove the local copy of your streak and palette, delete the Hueful app from your device. iOS will clear the local sandbox along with the app.
Cloudflare's standard request logs (for the config fetch and gameplay events) automatically expire within 7 days. The anonymous identifier itself can be reset at any time by deleting and reinstalling the app, which generates a fresh one.
Game Center scores and leaderboard entries live on Apple's servers, not ours. To remove a leaderboard entry, use Apple's Game Center controls: iOS Settings → Game Center, where you can reset or sign out. We can't delete Game Center data on Apple's behalf — that's between you and Apple.
Children's privacy
Hueful is rated 4+ on the App Store and contains no content unsuitable for children. We do not knowingly collect personally identifiable information from anyone, regardless of age. The anonymous identifier and gameplay events described above are not tied to a name, email, Apple ID, or any other identifier that would let us figure out who's playing.
If a child uses Game Center, Apple's child account protections (Family Sharing, Ask to Buy, Screen Time, and Game Center's own age handling) govern what information flows to Hueful. Parents who want to limit Game Center exposure can disable Game Center for a child's account in iOS Settings → Screen Time → Content & Privacy Restrictions.
Changes to this policy
If we change what data the app handles (for example, when iCloud sync ships), we'll update this page and bump the effective date at the top. Material changes will also be flagged in the app's release notes.
Contact
Real questions: hello@jandbcreations.com. We reply.