Hits & Blows is designed with privacy as a default. The app does not ask for personal information, does not require an account, and keeps your gameplay on your device. One opt-in analytics feature is available — described below — and is off by default.

Information Collection

We do not collect any personally identifiable information. You are never asked for a name, email address, phone number, or any other identifying detail to play Hits & Blows.

Gameplay Data

All game progress, stats, and history are stored locally on your device. Your secret codes, guesses, and any game content stay on your device and are never transmitted.

Third-Party Services — Opt-In Anonymous Analytics (PostHog)

Hits & Blows can send anonymous product analytics to PostHog (posthog.com) to help us understand how the app is used. This is strictly opt-in:

• The default is OFF. On first launch a dialog asks your choice.
• You can change your choice at any time in Profile → "Share anonymous usage data".

What is collected when you opt in

• Anonymous event names, e.g. game_started, game_completed, mode_selected.
• Screen / route names, e.g. /, /game, /profile.
• An anonymous distinct ID generated by the PostHog SDK. This ID is not derived from any on-device account or user identifier.
• Standard auto-captured context properties: app version, device model and type, operating system name and version, locale, timezone, and screen size.
• Approximate location, derived from your IP address by PostHog server-side. When your device sends an event, PostHog's servers briefly see the request's source IP and use it to look up approximate country, region (e.g. state or province), city, and city-centroid coordinates. These geo values are not based on GPS or device location services — the app does not request location permission and cannot read your real location. The accuracy is city-level at best and often wrong by tens of kilometres, particularly on mobile networks. Two users on the same network receive identical coordinates. The IP itself is discarded after the geo lookup and is not stored or attached to your events.

What is NOT collected — ever

• No name, email address, or any user-entered text.
• No game answers, secret codes, guesses, or any gameplay content.
• No precise location. The app does not request location permission and does not access GPS, Wi-Fi, Bluetooth, or device location services. Only the approximate IP-derived geolocation described in the previous section is collected; your real location is never read.
• Your IP address is not stored. IP capture is disabled at the PostHog project level — the IP is used transiently by PostHog server-side for the geo lookup described above and is then dropped.
• The app's internal on-device user UUID (used only for your local stats) is never sent to PostHog and is never linked to your PostHog distinct ID.

Where data is stored

PostHog stores events in its EU cloud region (eu.i.posthog.com). See posthog.com for PostHog's own data-handling policies.

How to opt out

Open the app → Profile → toggle "Share anonymous usage data" OFF. Future events stop immediately.

Security

Local game data is stored on your device. Anonymous analytics (when you opt in) is transmitted over HTTPS to PostHog.

Children's Privacy

Hits & Blows is safe for all ages. We do not knowingly collect personally identifiable information from anyone, including children under 13. The opt-in analytics described above is anonymous and does not identify individual users.

Contact Us

If you have any questions about this privacy policy, feel free to contact us at [email protected].