Privacy Policy

Effective date: February 11, 2026

Boxwood Chess ("Boxwood," "we," "us") is made by Tortoise. This policy explains what data the app collects, how it's used, and who has access to it.

The short version: we collect very little. There are no analytics, no tracking, and no advertising in Boxwood.

What We Collect

Account information

If you create an account (optional), we store your email address and a unique user ID. If you sign in with Apple or Google, we receive the name and email associated with your account from those providers.

Progress and settings

Boxwood stores your puzzle progress (which puzzles you've solved, attempt counts) and app settings (board orientation, theme, haptics preference) locally on your device in a SQLite database. If you create an account, this data is synced to our server so you can access it across devices.

Purchase information

If you subscribe or make a one-time purchase, the transaction is processed by Apple (App Store), Google (Play Store), or Stripe (web). We receive a record of what you purchased and when, but we never see your payment card details.

What We Don't Collect

Boxwood does not use any analytics, crash reporting, or user tracking services. Specifically:

• No usage analytics (no Amplitude, Mixpanel, Firebase Analytics, or similar)
• No crash reporting (no Sentry, Bugsnag, or Crashlytics)
• No advertising identifiers (no IDFA or GAID)
• No device fingerprinting
• No behavioral tracking of any kind

Third-Party Services

Boxwood uses the following third-party services:

Supabase (authentication and data sync)

If you create an account, your authentication credentials and synced data (progress, settings, entitlements) are stored on Supabase servers. All data is protected by row-level security policies tied to your user ID. Supabase privacy policy.

RevenueCat (iOS and Android purchases)

On mobile, in-app purchases are managed through RevenueCat, which processes purchase events and manages subscription status using an anonymous user ID. RevenueCat privacy policy.

Stripe (web purchases)

On the web, payments are processed through Stripe. When you make a purchase, Stripe handles your payment information directly. We only receive confirmation of the transaction. Stripe privacy policy.

FontShare (web typography)

The Boxwood website loads the Satoshi typeface from FontShare's CDN. This only applies to the website, not the mobile app. FontShare terms.

Data Retention

Your local data (progress, settings) stays on your device and is under your control. You can reset all progress from the app's settings screen.

If you have an account, your synced data is retained on our servers until you request deletion. To delete your account and all associated data, contact us at the email below.

Children's Privacy

Boxwood does not knowingly collect personal information from children under 13. The app is rated 4+ and does not require an account to use. If you believe a child has provided us with personal information, please contact us.

Your Rights

You can request access to, correction of, or deletion of your personal data at any time by contacting us. If you use the app without an account, no personal data is stored on our servers.

Changes to This Policy

If we make material changes to this policy, we will update the effective date above. Continued use of Boxwood after changes constitutes acceptance of the updated policy.

Contact

Questions about this policy? Reach us at privacy@tortoisestudio.co.

Boxwood is made by Tortoise — a small software company building calm technology that protects human flourishing.