Your privacy
Effective 11 November 2026
The short version. Single player and Pass & Play collect nothing and work offline. Online play stores a display name you choose and an anonymous player ID on our game server, along with records of your online games. If you choose to sign in, we also store your email address or Apple sign-in identifier so you can recover your account. We never send marketing email. There are no ads, and no third-party analytics or tracking in the app. We never sell your information.
Who we are
Surge Stones is made by MK Ignite LLC ("we", "us"). MK Ignite LLC is responsible for the information described in this policy (the "data controller").
MK Ignite LLC, 9137 W Irma Ln, Peoria, AZ 85382, United States. Email: support@surgestones.com.
This policy covers the Surge Stones app for iPhone and iPad, our online game service, and this website.
Single player and Pass & Play
We collect nothing. Games against the bots and Pass & Play games run entirely on your device and work offline. Your saved game, stats and settings are stored only on your device and are never sent to us. Deleting the app removes them.
Online play
To let you play other people, the app talks to our game server. You start as a guest: the app creates an online identity for you the first time you play online, with no sign-up. For every online account we store:
| What | Why |
|---|---|
| Display name you choose (you can change it) | So opponents know who they're playing. Your display name is visible to the people you play. |
| Anonymous player ID created by the app, and a secret sign-in token (we store only a scrambled, hashed form of the token) | To recognise your device as you, without needing an email address or password. |
| Game records: who played, the stones placed each round, results and times, and game codes | To run games, keep both players in sync, and show your games in progress. |
| Hidden skill rating, for quick-match games | To pair you with opponents of a similar level. It isn't shown to other players. |
| Reports: the reporter's player ID, the reported player's ID, the game ID, the reason, and any note the reporter adds | To deal with offensive names, cheating and other abuse. |
If you sign in
Signing in is optional. It makes your online account recoverable and lets you use it on more than one device. You can sign in with Apple, or with your email address and a one-time 6-digit code (there's no password). If you sign in, we also store:
| What | Why |
|---|---|
| Email address, if you sign in with email, or if Apple shares one with us when you sign in with Apple. If you choose Apple's "Hide My Email", this is a private relay address that forwards to you. | To sign you in, recover your account, and send service emails: sign-in codes and important notices about your account. No marketing email. |
| Apple account identifier, if you sign in with Apple. This is an anonymous ID that Apple creates for our app only; it isn't your Apple Account name or password. | To recognise you when you sign in with Apple on any device. |
| Sign-in times | To keep your account secure and help with problems. |
| One-time sign-in codes, stored only in hashed form | To check the code you enter. Codes expire within minutes. |
If you stay a guest and never sign in, you never give us an email address.
We don't ask for your real name, phone number, contacts, location or age, and the app doesn't use your device's advertising identifier.
Like any internet service, our server sees your device's IP address when the app connects. Our server logs record IP addresses, which we use only to deliver the connection, keep the service secure and limit how many requests one device can make. These logs are not stored in the game database.
Display names and reports
Display names are checked against a short list of blocked words, and other players can report a name or behaviour from inside the app. If a report is upheld we may rename, suspend or remove the account, as described in our Terms of Use.
Subscriptions
Online play will be offered as a subscription. When it is, purchases are processed by Apple; we never see your payment details. We use RevenueCat to check whether your subscription is active. RevenueCat receives your anonymous player ID and the purchase information Apple provides for the subscription, such as the product, dates and renewal status. Apple's handling of your purchase, and of Sign in with Apple, is covered by Apple's privacy policy.
What we don't do
- No ads.
- No third-party analytics, tracking or advertising tools in the app.
- We don't track you across other companies' apps or websites.
- We don't sell or rent your information.
Who else sees it
- Other players see your display name and the moves and results of games you play with them.
- Service providers who help us run the service: the company that hosts our game server, RevenueCat for subscriptions, and [EMAIL PROVIDER], which delivers our sign-in codes and account emails and so processes your email address if you sign in with email. They may use the information only to provide their service to us.
- If the law requires it, or to protect players and the service from fraud or abuse.
- If the business changes hands, the information would pass to the new owner, who would have to respect this policy.
This website
surgestones.com has no cookies, analytics or tracking scripts. Our web host may keep standard technical logs (such as IP addresses and pages requested) for security and to keep the site running.
How long we keep it
- Your online account information is kept while your account exists.
- When you delete your account, your display name is replaced with "Deleted player" everywhere, your rating is reset, your stored email address and Apple identifier are deleted, your Sign in with Apple link is revoked, and your sign-in token is destroyed straight away. Records of finished games are kept in that anonymised form so your past opponents' game history still works.
- Reports are kept for as long as we need them to handle abuse and keep the service safe.
- One-time sign-in codes expire within minutes.
- Server logs are kept only for as long as needed for security and to keep the service running.
- Support emails are kept for as long as we need them to help you, and then deleted.
Deleting your account
In the app, go to Play Online, tap your name, then Delete account. On a new device, sign in first, then delete. If you no longer have the app, or your version doesn't show the option yet, email support@surgestones.com. The details are on Delete your online account.
Your rights
Depending on where you live, you may have the right to:
- access the information we hold about you;
- correct it (you can change your display name in the app at any time);
- delete it (see above);
- object to or restrict how we use it, and to receive a copy in a portable form;
- complain to your local data protection authority.
To use any of these rights, email support@surgestones.com. If you signed in, we can confirm it's you through your sign-in email. For guest accounts, which have no email, we may ask for details that show the account is yours, such as your display name and a game code. We'll respond within the time the law requires.
Children
Single player and Pass & Play collect nothing from anyone, of any age. Online play asks only for a display name and doesn't ask for age. An email address is needed only if a player chooses to sign in with email. We don't knowingly collect personal information from children under 13 (or the minimum age where you live). If you're a parent or guardian and want a child's online account removed, email us and we'll delete it.
Where your information is processed
We're based in the United States, and your information may be processed in the United States or in other countries where our service providers operate.
Security
We take reasonable steps to protect the information we hold, such as storing sign-in tokens and one-time codes only in hashed form. No service can be perfectly secure, so we keep what we collect to a minimum.
Changes to this policy
If we change this policy, we'll update this page and the effective date above. If a change matters to how your information is used, we'll also tell you in the app or on this website before it takes effect.
Contact
MK Ignite LLC, 9137 W Irma Ln, Peoria, AZ 85382, United States
support@surgestones.com
See also: Terms of Use · Delete your online account · Support