Effective date: 12 November 2026
Quirk is an offline puzzle game with no Quirk account. Game data is stored on your device. Google services, Apple services, ad networks and the optional features below can process data outside your device.
This policy describes the Quirk apps for Android, iPhone and iPad, version 1.2.3 and later. A separate section below covers Quirk Social, an internal tool of the Quirk team that is not part of the apps.
Quirk is published under the trade name CJ Commerce Studio, which is responsible for the processing described in this policy. Website: www.playquirk.app. Contact: info@playquirk.app.
The app sends problem reports, optional statistics and optional puzzle statistics to the Quirk service at www.playquirk.app. Versions 1.2.2 and older still use the Quirk service at cjcommercestudio.nl, which keeps answering them.
Data on your device
Quirk keeps your progress, puzzles and moves, hints, Daily results, local statistics, achievements, settings and reminder choices on your device. It also keeps local reports, a random puzzle-generation seed and local action IDs. Ad-free ownership has a separate local store.
Parts of this data can leave the device through reports, optional statistics or sharing, as described below.
On Android, backup and phone transfer can copy progress and settings. Cloud backup on Android 10 or later is used only when Android's encryption conditions are met. Phone transfer follows separate Android rules. Reports, the purchase cache, queued statistics and your age range are outside Quirk's backup inclusion lists.
On iPhone and iPad, device backups may include progress, settings and shared widget data. Quirk marks reports, pending crash diagnostics, queued statistics, the purchase cache, your age range and reminder scheduling records as excluded from backups. Quirk has no built-in iCloud sync.
Settings > Your progress > Back up progress saves a file where you choose. Quirk does not encrypt this file. Your chosen storage provider may receive it. The file does not contain your age range, reminder schedule or statistics choice. On iPhone and iPad, saving and restoring the file use Apple's document picker. Restoring a progress file keeps the current device's statistics choice. Restoring a device backup may restore an earlier choice.
On iPhone and iPad, Quirk shares a small local file with its Daily widget through an App Group. It contains the Daily date, puzzle type and name, solved status, weekly progress and goal, level and Big Quirk status. The widget reads this file on your device.
On iPhone and iPad, Quirk also keeps a copy of your game progress and settings in your own iCloud (iCloud key-value storage), so you can get them back after reinstalling Quirk. This copy stays in your iCloud account: we never receive it, and Quirk has no server or account for it. If iCloud is off, no copy is kept. You can delete it by removing Quirk's data under iCloud in your iPhone or iPad settings.
Problem reports
Crash reports are saved locally. Quirk's report feature sends nothing automatically.
Open Settings > About > Report a problem. A report can include the app version and build, creation time, device maker and model, Android or iOS version, screen details, text size, theme and Reduce Motion setting, error traces and recent app events. It can also include the current puzzle and moves, settings and your note. Settings can include pending share text and action IDs. Your age range is left out. Notes and traces are not automatically stripped of personal information.
On iPhone and iPad, Quirk also saves limited crash and hang details delivered by Apple's MetricKit. These can include error details, call stacks, app build, device model, iOS version and a reporting time window. The exact incident time, puzzle and settings at the incident are unknown. These details stay local unless you choose to send the report.
Use Show the report to review a new report. Copy report puts it on your clipboard. Send report sends it to the Quirk service at www.playquirk.app over HTTPS, only after your tap. We use reports to reproduce and fix problems.
Reports go only to the Quirk service on www.playquirk.app (app version 1.2.2 and older: cjcommercestudio.nl), run by the developer and hosted by Hetzner Online GmbH. Encrypted backups of that server are stored with Cloudflare R2. No other company processes them.
Sharing and install referrer
Share opens your device's share menu. You choose the app and recipient. Their privacy policies apply.
A puzzle link can contain the puzzle, your result time and hint count, and for a Daily puzzle its day. The link is not encrypted. Opening its web page sends the code in the URL to the server. The Quirk server does not decode, log or store the puzzle code.
If the puzzle cannot fit in a link, sharing uses a fallback link. On Android, this is the Play listing. On iPhone and iPad, this is Quirk's App Store page.
On Android, Quirk checks Google Play's install referrer after installation to find a shared puzzle code. Failed checks may be retried a few times. Quirk does not upload that referrer or use it for advertising attribution. On iPhone and iPad, Quirk does not read an install referrer.
Optional anonymous statistics
Shared statistics start off on a new installation. Quirk asks once: Share stats or No thanks. Closing the question or pressing Back means no. Before yes, Quirk collects no puzzle outcomes for sending and sends none. Earlier puzzles are not sent later.
You can change your choice in Settings > About > Share stats without personal details. The same rules apply on Android, iPhone and iPad.
If you answered or closed an older prompt, your saved on/off choice stays. An unanswered older prompt starts off. Restoring a progress file keeps the current device's choice.
Each solved or skipped puzzle can send:
- puzzle type, difficulty band and score;
- solved or skipped result;
- hint count as 0, 1, 2 or 3+;
- time range and level range;
- play mode and app version.
The event has no name, account, device or installation ID, exact time or exact level. Batches go to the Quirk service at www.playquirk.app over HTTPS to help improve puzzles. Individual events are stored with their receipt date; the overview shows totals. The server does not add your IP address to statistics records.
Turning off Settings > About > Share stats without personal details stops new recording. Quirk then clears the queue in the background. A request already in progress may finish. Previously sent events cannot be found by player because they contain no player ID. Local game statistics and progress keep working.
Optional puzzle statistics
These rules apply from 27 October 2026.
CJ Commerce Studio operates Quirk. Contact us at info@playquirk.app about privacy. This optional measurement is available only to adults: when your age range is 18 or older. It is off until you choose “Share stats”. Refusing does not affect playing or Ad-free. We record no information for this measurement before your choice and do not upload earlier play.
If you agree, Quirk keeps counters for puzzle starts, solutions, unsolved replacements and departures from a puzzle, including departures within the first minute of active play. Leaving can mean an interruption, not giving up. Counters also record displays and choices in “Too easy?”, the “I'm stuck” menu and the “Stuck on this one?” prompt, and which app interface language is used on active days.
From version 1.2.3, these statistics also count, in broad groups rather than exact values: the days and weeks on which you play; about how long ago you installed Quirk; your progress group; about how many days ago you last played; milestones (your first solve, reaching levels 3 to 500, your first Daily and your first share); how long you play at a time and how many puzzles you play per session; and the hints and solving time per solved puzzle. If you said yes to these statistics before, Quirk asks you once more. Until you choose again, it sends only what you agreed to before.
Gameplay counts include puzzle type, difficulty and broad progress groups, play mode, Android/iOS and an app release group. Language counts are kept separately from gameplay counts. We do not send a device ID, an installation ID, an advertising ID, a player ID, your name or an account, exact play times, puzzle seeds, boards, moves, answers or purchase details in these statistics. They are not linked to ads, purchases or support reports, sold, or used for tracking or ads.
Counters are sent over HTTPS to our Quirk service at www.playquirk.app, at most once per active day. We immediately add them to weekly totals and do not save individual uploads. The service receives your IP address to communicate and prevent abuse. It does not save the raw IP in statistics or analytics-route logs. It keeps a separate IP-derived security code for at most 26 hours; this is not added to the statistics. Our hosting provider processes the connection on our instructions: Hetzner Online GmbH, Germany. No international transfer takes place for these statistics.
We rely on your consent for this optional measurement and on our legitimate interest in protecting the service for the separate, limited abuse prevention. Pending counters stay on your device for at most seven days within a fixed size limit and may be dropped. Weekly totals are removed by daily cleanup after 13 months and are excluded from historical backups. Security codes expire within 26 hours. These choices apply to the new measurement; older optional statistics follow the rules in “Optional anonymous statistics” until deleted.
Turn sharing off at Settings > About > Share expanded puzzle stats. This stops new recording and clears pending counters; an upload already dispatched may finish. Withdrawal does not affect the lawfulness of earlier processing. Local progress and normal local statistics continue to work. The measurement choice and queue are excluded from progress exports and device backups; reinstalling requires a new yes.
We retain no player key with totals, so we cannot normally find and remove one person's contribution. Contact us for access, correction, deletion or restriction where applicable; if you can provide information that lets us identify your data, we will assess the request. We do not collect an identity solely to identify these counters. You may complain to the Dutch Autoriteit Persoonsgegevens at https://autoriteitpersoonsgegevens.nl. Google and Apple may separately provide store statistics under their own privacy settings. Advertising choices through Google UMP are separate from this choice.
App update checks
On Android, Quirk asks Google Play whether an update is available.
On iPhone and iPad, Quirk contacts only Apple's public iTunes lookup for update checks, at most once every 24 hours. It sends the app's bundle ID and, when available, the device's region setting. It sends no player data or identifiers and uses no Quirk server. Apple receives the usual connection data for this request. Choosing Update opens the App Store. The versions already offered and the last Apple check time stay in Quirk's local settings.
Google AdMob ads and consent
Quirk uses Google AdMob for full-screen ads between puzzles and optional videos for hints. Google's User Messaging Platform (UMP) checks privacy choices and shows Google's consent message where needed. UMP contacts Google for this check.
In the EU, the EEA and the UK, Google's consent message is shown once more after the update to version 1.2.3, because an ad partner (Adagio) was added.
Quirk initialises AdMob and requests ads only when UMP allows requests, the device is online and Ad-free is off. On iPhone and iPad, ads also require configured ad units. UMP may still contact Google when ad units are not configured. See Google's consent guides for Android and iPhone and iPad.
At the first start Quirk asks your age range: 13-17 or 18 or older. It does not ask for a birth date. The answer stays on your device. Quirk does not send it to its server or put it in reports, statistics or progress backups. It is also excluded from device backups. Until you answer, Quirk asks for no consent and requests no ads.
Where the law requires it, Quirk reads an age range from your app store on your device: Google Play Age Signals on Android, or Apple's Declared Age Range on iPhone and iPad. Quirk uses it only to set the age group that decides which ads may be shown. It is never sent to us.
For 13-17, Quirk tells Google's consent check and ad requests to apply Google's protections for younger users. Google then does not show personalised ads. For 13-17, Quirk asks only for ads rated for general audiences (G). For 18 or older, the highest ad rating is the one set in our ad account, currently teen (T); ads for mature audiences only (MA) are not shown. You can change your age range in Settings > Ad-free > Age range.
On iPhone and iPad, Google shows a short explanation and then Apple's App Tracking Transparency prompt. If you are 18 or older and allow tracking there, Google may use the advertising identifier (IDFA) to show ads that match your interests. Where Google's consent message applies, your choice there must also allow it. If you do not allow tracking, or you are 13-17, Quirk requests non-personalised ads and the advertising identifier is not available to Quirk or Google. You can change this any time in iOS Settings > Privacy & Security > Tracking.
Google may process device or account identifiers, IP address and approximate location, app and ad interactions, and diagnostic data. These support ads, measurement and fraud prevention. This may include the advertising ID on Android and, only after you allow tracking, the advertising identifier on iPhone and iPad, subject to the age treatment and privacy choices above. See Google's SDK disclosures for Android and iPhone and iPad, Google Privacy Policy and Google's advertising information.
Through Google AdMob, ads in Quirk can also come from other ad networks: Unity Ads, Liftoff (Vungle), InMobi, Moloco, DT Exchange (Digital Turbine), Meta Audience Network, Pangle, Mintegral, AppLovin, ironSource, BidMachine, PubMatic OpenWrap and Adagio. Some of them may not be in use yet. When ads are set up or requested, these networks may process device identifiers (including the advertising ID on Android) and device details, IP address and approximate location, your taps and other interactions with ads and the app, crash and diagnostic data, your privacy choices and, for Unity Ads, purchase history. They use this for ads, measurement and fraud prevention. On iPhone and iPad, they can get the advertising identifier only after you allow tracking.
Where Google's consent message applies, your choices there apply to these networks. Moloco, Mintegral, PubMatic and ironSource say they rely on their legitimate interest for some of this, such as choosing ads with limited data, measuring ads or fraud prevention. In US states with privacy laws, your opt-out in Privacy options is passed on to the networks that support it.
If you chose 13-17, Quirk uses separate ad units that leave out Unity Ads, Pangle and AppLovin, and it passes on the protections for younger users to the other networks.
Each network's own privacy policy applies to its processing: Unity, Liftoff, InMobi, Moloco, Digital Turbine, Meta, Pangle, Mintegral, AppLovin, ironSource, BidMachine, PubMatic, Adagio.
Open Settings > Ad-free > Privacy options when Google requires that option. Ad choices are separate from anonymous statistics. Declining personalised ads does not necessarily stop all Google or ad network processing. Ad-free stops Quirk's ad requests; consent and purchase checks may continue.
Purchases
On Android, Google Play handles the one-time Ad-free purchase. Quirk receives a purchase token and state to check ownership. It also checks the product ID, acknowledgement status and signed purchase record. Quirk does not receive your payment-card details.
On Android, only the verified purchase token is saved in Quirk's separate device cache. Quirk passes the token to Play to acknowledge the purchase. No Quirk purchase-verification server is used. Play keeps its own transaction records under Google's policies.
On iPhone and iPad, Apple handles the one-time Ad-free purchase through StoreKit. Quirk checks the product, verified transaction and ownership state. It saves the verified original transaction ID in a separate local cache. Restoring purchases uses Apple's StoreKit services. Quirk does not receive your payment-card details or use a Quirk purchase-verification server. Apple keeps its own transaction records under Apple's policies.
A purchase from Google Play and a purchase from the App Store are separate. Neither moves to the other store.
Downloads, reminders and device access
On Android, Google Play Asset Delivery installs the art pack with Quirk and downloads the music pack automatically after installation. Google documents processing of device metadata and app version for delivery, with encryption and a fixed retention period. It does not publish the period's length on that page. See Google's Asset Delivery disclosure.
On iPhone and iPad, art and music are included in the app.
Quirk offers a Daily reminder, which is off by default, and reminders for your week goal, a break and a saved puzzle, which work only after you allow notifications. Turning a reminder on can request notification permission. Reminders are scheduled on your device without a push service. On Android, they can also be scheduled again after a restart. On iPhone and iPad, they use Apple's local notification service. Turn them off in Settings > Reminders or your device's notification settings.
Quirk uses vibration for optional haptics and network access for the services above. Quirk itself does not ask for access to your contacts, precise location, camera, microphone or broad storage, on Android, iPhone or iPad.
Visitor statistics on this website
This website (www.playquirk.app) counts its visits itself, to see how many people visit, where they come from and which pages and buttons help them. It uses no cookies and stores nothing on your device, and no other company receives the data.
When you open a page, a small script sends our server: the page address without the part after the question mark, the website that linked to you reduced to its name (for example google.com), campaign tags in the link (utm), a rough screen width, how long the page was visible, how far you scrolled, and clicks on the store buttons, the trailer and links to other websites (only the name of that website).
Our server sees your IP address and browser details (user agent) to receive this, but does not store them. From the IP address it looks up only the country, with the free IP to Country Lite database of DB-IP on our own server. From the browser details it keeps only the type of device, the operating system and the browser family. To recognise visits on the same day, it turns your IP address and browser details into a code that cannot be reversed, using a random key. That key changes every day and is deleted every night. Bots and pages that a browser loads in advance are not counted.
The visit data is kept without a time limit, in anonymous form: the daily key that could link visits of the same day is deleted every night and no IP address is ever stored.
If your browser sends Global Privacy Control, the script sends nothing. Our legal basis is our legitimate interest in understanding and improving this website. You can object at any time by turning on Global Privacy Control or by blocking scripts on this website. The statistics are processed on our own server at Hetzner Online GmbH, Germany, and our web server does not write these requests to its access log.
Trailer on this website
The Quirk home page shows a picture of our trailer. Nothing is loaded from YouTube until you press play. When you do, the video plays from youtube-nocookie.com and YouTube, operated by Google, processes your request under its own privacy policy. YouTube may set cookies at that moment.
Quirk Social (internal team tool)
Quirk Social is a desktop tool that the Quirk team uses to upload its own approved puzzle videos to the Quirk TikTok account as drafts. It is not offered to the public and is not part of the Quirk apps. Its terms explain what it does.
Data from TikTok: when the account owner signs in with TikTok Login Kit (scope user.info.basic), TikTok gives the tool the account's basic profile: the open ID and union ID, the display name and the profile picture. The tool also receives an access token and a refresh token. With the scope video.upload the tool uses the token only to send videos to the Quirk TikTok account as drafts. Direct Post is off. The account owner reviews and posts each draft in the TikTok app.
Where it is kept: the tokens are stored only on the Quirk team's computer, outside this website. This website does not receive or store them. We use them for nothing but uploading drafts to our own account.
No other users: Quirk Social collects no data from other TikTok users or from viewers of the videos. TikTok processes the videos and the account under its own privacy policy.
Deletion and revoking: the team deletes the stored tokens from its computer to end the connection. The account owner can also remove Quirk Social's access at any time in the TikTok app's settings for app permissions. TikTok then stops accepting the tokens.
Security
Reports and statistics travel to the Quirk service at www.playquirk.app over HTTPS (older versions: see the start of this policy). On the server, only signed-in administrators of the developer can view them. A separate access key for the developer's own tools is stored only in scrambled (hashed) form.
The server sees your IP address when the app connects. To limit misuse, it uses a scrambled form of that address that changes every day and expires after about a day. It does not store the address itself and does not add it to reports or statistics. Backups of the server are encrypted.
Service providers that host Quirk's server and its backups process data only on our behalf and must protect it at least as well as this policy describes.
Children
Quirk asks whether you are 13-17 or 18 or older. It offers no age choice for children under 13. If you believe a child sent us a report, contact us and we will delete it.
Retention
Local game data stays until reset or uninstall. Quirk keeps at most five saved local reports. Sending successfully, choosing Delete or saving newer reports can remove them. On iPhone and iPad, Quirk may also keep up to five pending MetricKit diagnostics before adding them to saved reports.
Unsent statistics use a bounded queue and are removed after sending, refusal or opt-out. The purchase cache stays until uninstall or a successful store check removes ownership.
The Quirk server keeps at most 2,000 reports and 200 MB of reports. It removes reports older than 365 days when another report is saved. It removes statistics older than 13 months when the first statistics of a day are saved and when the overview is opened. Records can remain longer while the server is idle. These are not guaranteed deletion deadlines.
Google's, Apple's and the ad networks' retention rules apply to their service data. Exported files and device backups follow the storage provider's rules.
Deletion and your choices
Settings > Your progress > Clear all data clears progress and settings, asks for your age range again and cancels scheduled reminders. It resets shared statistics to off, with no answer saved. Sharing again requires yes.
This does not delete saved reports, purchase rights, Google's ad consent, exported files, backups or data already sent.
Delete saved reports under Report a problem. Uninstalling removes Quirk's private device files, including its purchase cache. It does not cancel the store purchase or delete remote records. A device backup restore may bring progress, settings and a previous statistics choice back. Restoring a progress file keeps the current device's statistics choice.
To request deletion of a sent report, contact us with its creation time and app version, or a copy you kept. We then delete it from the server. For Google service data, use Google's privacy and advertising controls linked above. For ad network data, use that network's privacy policy linked above.
Changes
We will update this page and its effective date when these practices change.
Contact
Quirk is published under the trade name CJ Commerce Studio. Privacy and support: info@playquirk.app. Website: www.playquirk.app.