Move Zero Privacy Policy

Last updated: 17 August 2026.

The short version

Move Zero collects the least it can to run an account and a ranked ladder. There

are no analytics, no crash reporting, no advertising, and no tracking SDKs in

the app: 17 dependencies, none of them a tracker. Nothing about you is sold or

shared for advertising. You can delete your account from inside the app, and the

deletion is real.

What is collected, and why

When you make an account

• Email address: to verify the account, to let you sign in, and to reset a

forgotten password. Nothing else is ever sent to it; there is no mailing list.

• A password hash: never your password. (users.password_hash,

migrations/0002_users.sql.)

• Display name: 1 to 24 characters, chosen by you. This is public: it

appears on the leaderboard and to anyone you play or befriend. Do not use your

real name if you would rather not be identified.

As you play

• Games and moves. Every game is stored as its move log, which is what makes

replays and post-game review possible. The log is append-only.

• Rating and progress: a Glicko-2 rating, seasonal ladder points, XP, level,

and how many placement games remain.

• Your chosen avatar, from a fixed set the app ships. Not a photograph, and

there is no way to upload one.

• Friends and blocks: who you have added, and who you have blocked.
• Timestamps: when the account was created, updated, and last seen.

What is NOT collected

• No location, contacts, photos, camera, microphone, calendar, or health data.

The app requests none of these permissions.

• No advertising identifier (IDFA). No device fingerprint.
• No third-party analytics or crash reporting of any kind.
• No payment information. Nothing is sold in the app.

Who else sees it

• Resend: sends the verification and password-reset emails. It receives your

email address and the message. (services/api/src/email/resend.ts.)

• DigitalOcean: hosts the servers and the database, in their Singapore

(sgp1) region. Data is stored there.

That is the complete list. No one else receives your data, and it is not sold,

rented, or shared for advertising or marketing.

Deleting your account

Settings has a Delete account control. Using it deletes your account from the

database, revokes your sign-in tokens immediately, and removes you from

matchmaking. It is immediate and cannot be undone.

The app's own deletion notice is the authoritative wording, quoted here verbatim

so the two documents cannot drift apart:

This is permanent. There is no undo.

Gone for good: your name and your picture, your email and password, your rating,

your season progress and your place on the ladder, your friend code, and your

friends. They lose you from their lists too.

Games you have already played stay in your opponents' history, because those

games are theirs as well. Your name comes off them and shows as Deleted player.

The armies saved on this device are cleared as well.

That is exactly what the database does, not an approximation of it. Six columns

reference the user record. Five cascade: sign-in details

(0008_auth.sql), season standing (0009_progression.sql) and all three

friendship columns (0010_friends.sql, one canonical row per pair, so a

friendship disappears from both sides at once). The sixth,

game_players.user_id, is on delete set null (0005_game_players.sql:12),

whose own comment explains why: the opponent's game and its replayable log

survive, and no personal data is left behind. So a past game keeps its moves and

loses you; the interface shows Deleted player in your place.

Why it is put that way round: a game belongs to both players, and erasing it would

delete one person's record at the request of the other. Nothing identifying you

remains attached to it.

Keeping it

Account and gameplay data is kept while the account exists. Deleting the account

removes it. Server logs, which may contain an account identifier for diagnosing

faults, are short-lived operational records and are not used to build any profile.

Children

Move Zero is not directed at children and does not knowingly collect data from

anyone under 13. If you believe a child has made an account, use the contact below

and it will be deleted.

Your choices

• See or correct it: your profile is editable in the app.
• Delete it: Settings, Delete account. Immediate.
• Ask a question, or ask for a copy: the contact below.

Depending on where you live you may have additional rights (for example under the

GDPR or the CCPA) to access, correct, export, or erase your data, and to complain

to a regulator. Deletion is available to everyone in the app regardless.

Contact

playmovezero@gmail.com: for privacy requests, data questions, or anything

in this policy. It is monitored.

You do not need to write to us to delete your account: Settings → Delete

account does it from inside the app, and it is immediate.

Changes

If this policy changes materially, the date above changes and the app will say so

rather than changing it silently.