Privacy

Three Tells collects no data.

The app stays offline and private. This website uses optional Google Analytics only if you explicitly allow it.

For threetells.app/privacy, and the App Store Connect privacy policy URL. Last updated 2026-08-16.

The app

Three Tells collects no data. It has no accounts, no analytics, no advertising, no third-party software, and it never connects to the internet. Everything it knows — the safes you have opened, your times, where the dial was when you put the phone down — is stored on your device only.

The app keeps a small play log on your device (dial positions and timings, nothing about you) so the game can pick up where you left off. You can hand that log to someone yourself from the Notebook screen, using the system share sheet; nothing leaves your device unless you do that.

If you delete the app, everything it stored goes with it.

The website

On the production Three Tells website, Google Analytics loads only after you explicitly allow it. No request is made to Google before consent, and Analytics does not load on localhost or Vercel preview deployments.

With consent, the website sends the page path without URL query strings, page title, and the referring website's origin. Google Analytics also processes limited technical information needed to provide the service, such as a random browser identifier, browser and device information, approximate location derived from an IP address, and interaction timestamps. Advertising storage, personalization, and Google signals remain disabled.

Your analytics choice is remembered for 30 days. Analytics cookies are limited to 30 days. You can allow, refuse, or change website analytics at any time through “Analytics settings” in the footer. Revoking consent disables future Analytics use and removes accessible Analytics cookies. If your browser sends a Global Privacy Control signal, Analytics stays disabled regardless of an earlier choice.

Google handles consented Analytics data according to its Privacy Policy. The hosting provider may separately process standard connection data needed to deliver the static site and protect its service.

Questions

Email b@brianstoffer.com.