Privacy Policy
The short version
Solo Maxxing scores your actions, not your face. We collect the minimum needed to run the game: your account (email or Apple/Google sign-in), the quests you complete, and your self-reported stats. We don't sell your data, we don't show ads, and we never ask for photos of you.
What we collect
- Account data — email address and display name when you sign up. If you use Sign in with Apple and choose to hide your email, we only ever see the relay address.
- Game data — quests completed, XP, streaks, stats history, titles, arcs, and anything you write in custom quests or the journal.
- Device data — push notification token (if you enable notifications) and timezone, so your day rolls over at your midnight.
- Diagnostics — crash reports and basic usage counts, so we can find bugs. These are aggregated and not tied to your journal content.
The website waitlist
This is separate from the app, and it's the only thing this website collects. If you enter your email address in the waitlist form on the home page, we store that address, the date you joined, the country your request came from, and the page that referred you. It lives in our own Cloudflare storage — no third-party form or mailing service is involved — and it exists for exactly one purpose: to send you a single email when Solo Maxxing launches on iOS.
We do not add you to a newsletter, we do not send a drip sequence, and we do not share the list. To stop rate-limit abuse we briefly keep a one-way hash of your IP address, never the address itself, and it is deleted automatically after an hour. Our legal basis is consent, given when you submit the form. Write to support@solomaxxing.app and we'll delete your address immediately; otherwise the list is erased once the launch email has gone out.
Browsing the site itself sets no cookies. Aggregate traffic counts come from Cloudflare Web Analytics, which does not use cookies and does not fingerprint visitors.
We do record which site sent you here — the referring domain, or the campaign tag in the link you clicked — so we can tell which pages and which posts actually bring people to the waitlist. That single value is held in your browser's session storage for the length of the visit and is gone when you close the tab. It is not a cookie, it contains no identifier, and it is never linked to your email address or to anything you do on another site.
What we never do
- Sell or share your personal data with advertisers or data brokers.
- Ask for, store, or analyze photos of your face or body. There is no appearance rating in this app and there will not be one.
- Show third-party ads.
- Use your journal entries or custom quests to train machine-learning models.
Why we're allowed to hold it
If you're in the UK or EU, our legal bases under the GDPR are: contract (account and game data — without it there's no game), consent (push notifications and the optional AI features, both of which you can withdraw at any time), and legitimate interests (crash diagnostics and preventing abuse).
AI features
The weekly review and coach chat send your game history — quests, stats, streaks, and any journal text you've written — to a large-language-model provider to generate your review. Your email address and account identifier are not included. The provider processes the request on our behalf under a data-processing agreement and does not use the content to train their models. You can use the app with these features switched off entirely.
Who else sees your data
Only the service providers we need to run the app: cloud hosting, crash reporting, push notification delivery, the LLM provider described above, and Apple for subscription billing. Each is bound by contract to process data only on our instructions. We do not sell data, and we would only disclose it to authorities where legally compelled.
Squad and duo features share exactly what you'd expect — your display name, rank, and whether you completed your quests. They never share your journal.
How long we keep it
Game and account data is kept while your account is active. When you delete your account there is a 30-day grace period in which you can change your mind, after which everything is permanently removed from our production systems, and from backups within a further 30 days. Aggregated, non-identifying statistics may be retained.
Your rights
You can reset your progress or delete your account and all associated data at any time from Settings. You can also request a copy of your data, ask us to correct it, object to processing, or withdraw consent for notifications and AI features. Email support@solomaxxing.app and we'll respond within 30 days. If you're in the UK or EU and you're unhappy with our response, you can complain to your local data protection authority.
Children
Solo Maxxing is not intended for anyone under 13, and we don't knowingly collect data from them. If you believe a child has created an account, email us and we'll remove it.
This website
solomaxxing.app is a static site. It sets no advertising or tracking cookies. We use Cloudflare Web Analytics, which measures page views without cookies and without fingerprinting individual visitors. Fonts are served from our own domain, so no font request leaves for a third party.
We also count two things ourselves: a waitlist signup, and a click on one of our support email links. Each is stored as a counter alongside the page it happened on, the referring site, and the country — no address, no IP, no visitor identifier, and nothing that could be joined back to a person. It stays on Cloudflare's infrastructure and is deleted after three months.
Changes
If we make a material change to this policy we'll update the date above and notify you in the app or by email before it takes effect.
Contact
Questions: support@solomaxxing.app. See also our Terms of Service and what we're building.