Privacy policy

Last updated: October 22, 2026

This policy explains how QuantivoWorks (“we”) handles information when you use Mill Club and its online service at https://mill.quantivoworks.com. Contact us at info@quantivoworks.com.

Offline play

Offline game progress, move history, statistics, sound preferences, and haptic preferences are stored on your device. They are not uploaded to our server. No account is required.

Online play

When you create or join an online room, we process the room code, a random room-specific player credential, your assigned side, game moves, game state, revision numbers, and update timestamps. These let us authenticate the two players, enforce the rules, synchronize the board, and restore interrupted games.

The server stores a cryptographic hash of your player credential rather than the original secret. The app stores the secret in the device’s Keychain. Do not share the secret; share only your room code with the person you want to invite. A room code permits another player to join an unfilled room, so do not post it publicly unless you intend that.

Network and security information

Our server necessarily receives your IP address while handling a connection. It uses a short-lived in-memory request counter to protect against abuse. Our supplied Nginx configuration disables access logs for gameplay API requests. Website access logs may contain IP addresses, requested pages, browser information, and request timestamps; the supplied log rotation configuration removes these after seven days. Server error logs may contain network information needed to diagnose failures.

Retention and deletion

Online rooms expire after seven days without a game update or player joining. Expired room records are removed by periodic maintenance or during server startup. A disconnection does not immediately delete a room, so you can resume it. Leaving an active game records a resignation; the completed room remains until it expires.

You can clear statistics in the app’s Settings. Starting a new offline game replaces local game progress. The app removes its saved online credentials when you leave the room successfully. For a server-side data request, contact us with the room code. We may ask you to verify that you participated before deleting records or disclosing information.

Support email

If you email us, we receive your email address and the information you choose to send. We use it to respond to your request and resolve the issue. Please do not send sensitive information or credentials.

Service providers and sharing

The online server is hosted by infrastructure providers acting on our behalf. Support correspondence is handled through our email provider. We do not sell personal information, use advertising trackers, or include third-party analytics SDKs in the app. We disclose information only to operate the service, address abuse, comply with applicable legal requirements, or protect users and the service.

Your choices

You can use offline modes without sending gameplay to our server. You can decline to play online and contact us about access, correction, or deletion of information related to your use of the service. Rights and response requirements depend on the law that applies to you. We do not require a real name, profile, contact list, or location to play.

Children

Mill Club has no player profiles, public chat, advertising, or requests for a child’s name or contact details. The network information described above is still processed for online play. A parent or guardian can contact us about a child’s information.

Policy changes

We update this page when our data practices change and revise the date above. Please check this page before using new online features.