Privacy Policy
Last updated
Patterns is a chess training app. To run it we keep an account, your puzzle history and your rating. We don't sell your data, we don't show ads, and we don't track you across other apps. This page explains the rest.
Who we are
Patterns (the app, and this website at patterns.gg) is made by Reactiive SRL, a company registered in Italy (VAT 10701501214). We are the controller of the personal data described here. For anything about your data, write to hello@reactiive.io.
What we collect
Your account
- Sign-in details. Your email address, and — if you sign in with Google or Apple — the account identifier they give us, your name and, from Google, your profile picture. If you sign up with an email and password, we store the password only as a salted hash.
- Profile. The username you choose, the level you start at, and your time zone (so the daily puzzle and reminders follow your day).
- Sessions. A random identifier created on install, so you can stay signed in on up to ten devices and sign one out.
How you play
- Every puzzle attempt: the moves you played, how long you took, whether you solved it, and your rating before and after.
- Storm runs, Journey progress, bookmarks, the puzzles on your Mistakes list, your daily streak and your settings.
Usage and diagnostics
- Product events we record ourselves, on our own servers: that the app was opened for the first time, whether notifications were allowed, when a notification or a link was opened. Each event carries your app version, platform and a random install identifier. We don't store your IP address with them.
- Crash and performance reports, sent to Sentry when the app fails or runs slowly: device model, operating system, the error, and the IP address the report came from.
What you send us
- Feedback you write in the app, with the email address of your account so we can answer.
- Purchases. Whether you subscribe to Patterns Pro and when it renews. Payment itself is handled by Apple or Google; we never see your card.
- The waitlist on this website: the email address you leave, the browser it came from, and a random identifier kept in your browser so the same address isn't counted twice.
We don't collect your location, contacts, photos or advertising identifier, and Patterns doesn't ask to track you across other companies' apps.
Why we use it
| Purpose | Legal basis (GDPR) |
|---|---|
| Running your account, choosing puzzles at your level, keeping your rating, streaks, Journey and history | Performing our contract with you |
| Providing a subscription you bought | Performing our contract with you |
| Showing your username and score on leaderboards and in the Hall of Fame | Performing our contract with you |
| Fixing crashes, keeping the service secure, understanding which parts of the app are used | Our legitimate interest in a working, safe app |
| Opening the right screen from a shared link | Our legitimate interest in links that work |
| Push notifications | Your consent, given in the system prompt |
| The launch email to the waitlist | Your consent, given by leaving your address |
| Keeping records the law requires | Legal obligation |
What other players see
If you choose a username, signed-in players can see it next to your Storm score or your rating on leaderboards, and your medal weeks in the Hall of Fame. They never see your email, your name or your picture.
Who processes it for us
We run our own servers and database. A few specialised services handle parts of the work on our behalf, only for the purpose listed:
Apple, Google
- What for
- Sign-in; in-app payments
- What it receives
- What you authorise at sign-in; your purchase
RevenueCat
- What for
- Managing subscriptions
- What it receives
- Your Patterns user ID and purchase history
Sentry
- What for
- Crash and performance reports
- What it receives
- Device and error details, IP address
AppsFlyer
- What for
- Opening shared puzzle links in the app
- What it receives
- Your Patterns user ID and device details. Advertising identifiers are switched off.
Expo, and Firebase Cloud Messaging on Android
- What for
- Delivering notifications and app updates
- What it receives
- A push token for your device; the notification
Resend
- What for
- Sending password-reset codes
- What it receives
- Your email address and the code
Telegram
- What for
- Delivering in-app feedback to our team
- What it receives
- Your message and your account email
Vercel
- What for
- Hosting this website
- What it receives
- Standard request data, such as IP address
Some of these providers are outside the European Economic Area. When data leaves it, the transfer relies on an adequacy decision (such as the EU–US Data Privacy Framework) or on the European Commission's Standard Contractual Clauses.
We don't sell or rent personal data, and we only disclose it otherwise when the law requires us to.
How long we keep it
- Your account and everything in it — until you delete your account. Deletion is immediate and removes your profile, history, rating, bookmarks, Mistakes list, sessions, push tokens and settings, and any waitlist entry with the same email.
- Product events are kept after deletion without your account attached, identified only by random install and session identifiers.
- Password-reset codes expire after one hour.
- Waitlist addresses — until Patterns launches and the launch email is sent, or sooner if you ask us to remove yours.
- Service providers keep what they receive for the periods set in their own policies. Subscription and payment records are also held by Apple or Google.
Your rights
You can ask us to:
- give you a copy of your data, including in a portable format;
- correct it;
- delete it;
- restrict how we use it, or object to a use based on our legitimate interest;
- stop using it where you gave consent — for notifications, turn them off in your device settings at any time.
Write to hello@reactiive.io from the address on your account. We answer within one month. You can delete your account yourself, at any time, from the app — here's how.
If you think we've handled your data wrongly, you can complain to the Italian data protection authority, the Garante per la protezione dei dati personali, or to the authority where you live.
Security
Connections to our servers are encrypted, passwords are stored only as salted hashes, and access to the database is limited to the people who run Patterns. No system is perfectly secure, but we'll tell you, and the authorities, if a breach puts your data at risk.
Children
Patterns isn't directed at children under 13, and in the European Union not at children under the age of digital consent in their country (14 in Italy). If you believe a child has given us personal data, write to hello@reactiive.io and we'll delete it.
Changes
When this policy changes we'll update the date at the top, and if a change matters to how your data is used we'll let you know in the app.