Privacy Policy — A Thousand Paths
Last updated: 21 August 2026
A Thousand Paths is a single-player story game published by PIAZ Software ApS ("we", "us"). This policy explains what the app does with data. It covers the Android and iOS versions of the app (package com.piaz.athousandpaths).
The short version
- There is no account. You never give us a name, an email address, or a password.
- Your progress stays on your phone. Everything you unlock, remember and save is stored on the device and is never uploaded to us.
- We collect anonymous counts of which endings players reach. No name, no account, no device id, no advertising id, no location. You can switch this off in Settings.
- The app shows ads and sells one optional purchase. Google's ad system and your app store handle those, and they collect more than we do. Their policies are linked below.
- We do not sell your personal information.
1. What stays on your device and never reaches us
The game stores the following locally, using your device's app storage. None of it is sent to us, and none of it leaves the device unless you back the device up yourself:
- your settings (text speed, volumes, haptics, motion, whether statistics are shared);
- your progress: dreams completed, endings you have found, saved games, recovered memory fragments, unlocked chapters and rooms, and story scenes you have seen;
- your daily streak and banked hints;
- a cached flag recording whether you have bought the unlock, so the game knows to stay unlocked when offline.
Deleting the app deletes all of it. "Reset progress" in Settings clears the progress portion at any time.
2. Anonymous play statistics
What we send. When you reach an ending in a dream, the app sends one small message to our own server. It contains only:
| Field | Example | Why |
|---|---|---|
| Chapter | ch1 | Which part of the story the ending belongs to |
| Dream | the_far_shore | Which dream it was |
| Ending | never_left | Which of that dream's endings you reached |
| First time? | true | Whether this install had reached that ending before |
| Platform | android | So Android and iOS numbers can be told apart |
| App version | 1.0.0 | So a change in the numbers can be traced to a release |
| Install tag | a random code | Explained below |
That is the whole message. There is no free-text field of any kind: the server only accepts chapter, dream and ending values that match a fixed list of the game's own content, and rejects anything else.
Why we collect it. To find out which endings players actually reach, so that the dreams we write next are shaped by the paths people walk rather than by guesswork, and so we can tell when an ending has become unreachable because of a bug.
The install tag. This is a randomly generated code (a UUID) created on your device the first time statistics are sent. It is not derived from and not linked to your name, your account, your device's identifiers, your advertising id, your push token, or your store purchase. Its only purpose is to let us tell "one player reached this ending forty times" apart from "forty players reached it once". It is deleted from your device the moment you turn statistics off, and again if you delete the app. On our side, the install tag is stripped from stored events after 90 days, so older events are plain counts with nothing linking them together at all.
What we never receive. No name, email, or account. No device id, advertising id, or push token. No location. No IP address is retained: our server runs with request logging disabled, so while an IP address is necessarily used to deliver the request over the internet, none is written down or stored anywhere by us. No text you type, and no record of which choices you made inside a dream — only the ending you arrived at.
How to turn it off. Settings → Privacy → "Share play statistics". Switching it off stops all sending immediately and deletes the install tag and any unsent events from your device. Nothing about the game changes when it is off.
Retention. Event rows are kept as long-term statistics. As described above, the install tag column is cleared after 90 days, after which the rows are anonymous counts.
Where it goes. The service runs on Cloudflare (Cloudflare Workers and Cloudflare D1), which processes the data on our behalf. The database is stored in the European Union. Cloudflare operates a global network, so the request itself may be handled by a server near you, wherever that is, before the event is written to the EU database.
3. Advertising
The app shows optional rewarded ads — the kind you choose to watch in exchange for something in the game. It shows no interstitials and no banners. Ads are served by Google AdMob.
To do this, Google's ad software in the app collects data of its own, which typically includes your device's advertising identifier, IP address, device and app information, and whether you interacted with an ad. We do not receive this data; Google acts as an independent controller of it. Google's practices are described here:
- Google Privacy Policy: https://policies.google.com/privacy
- How Google uses data from sites and apps that use its services: https://policies.google.com/technologies/partner-sites
Your choices. In the European Economic Area, the United Kingdom and Switzerland, the app shows Google's consent form the first time you open it, and your choice determines whether ads are personalised. You can reopen that form at any time from Settings → Privacy → "Ad privacy choices". On iOS, the app also asks for App Tracking Transparency permission; if you decline, you can still play, and ads are not personalised. You can change that at any time in iOS Settings → Privacy & Security → Tracking. On Android you can reset or delete your advertising id in your device settings.
On "selling" and "sharing". We do not sell your personal information for money. If you allow personalised ads, Google may use your advertising identifier for cross-context behavioural advertising, which some laws (including the California Consumer Privacy Act) treat as "sharing". Declining the consent form, declining App Tracking Transparency, or buying the unlock (which removes ads entirely) all stop that.
4. Purchases
The app offers one optional, one-time purchase that unlocks every dream and removes ads. The purchase is processed entirely by Google Play or the Apple App Store. We never see or receive your payment details. The store tells the app only whether the purchase exists; the app stores that answer locally so the game stays unlocked offline. Refunds and purchase records are handled by the store under its own policy:
- Google Play: https://policies.google.com/privacy
- Apple: https://www.apple.com/legal/privacy/
5. Notifications
If you allow notifications, the app schedules up to two reminders on your device. They are generated and delivered locally by your phone. There is no push server, no push token is sent to us, and we cannot see whether a reminder was shown or opened. Turning notifications off in your device settings stops them.
6. Children
The app is not directed to children. Ad content is limited to a "Teen" rating, and we do not knowingly collect personal information from children. If you believe a child has provided personal information to us, contact us and we will delete what we hold.
7. Legal bases (for players in the EEA, UK and Switzerland)
- Playing the game, including everything stored locally on your device: performance of our agreement with you, and our legitimate interest in the app working.
- Anonymous play statistics: your consent, which you give by leaving "Share play statistics" on and withdraw by turning it off. The switch is in Settings and takes effect immediately.
- Advertising: your consent, gathered through Google's consent form, which you can change at any time from Settings → Privacy → "Ad privacy choices".
- Purchases: performance of a contract, handled by your app store.
8. Your rights
Depending on where you live, you have rights to access, correct, delete, or receive a copy of your personal data, to object to or restrict processing, and to withdraw consent. You can also complain to your local data protection authority.
In practice, most of these you can exercise yourself and instantly: your game data lives on your device, so "Reset progress" and deleting the app erase it, and the statistics switch stops and deletes the only thing we collect.
Please note an unavoidable consequence of collecting so little: because we hold no name, account, email, or device identifier, we have no way to find records that belong to a particular person. If you ask us to delete your data we will explain this rather than pretend otherwise — and after 90 days the stored events carry no linking identifier at all. If you want nothing further sent, turn off "Share play statistics".
To make a request, contact us at piazsoftware@gmail.com.
9. Security
Data in transit to our statistics service is encrypted with HTTPS. Because we deliberately store no personal data, there is no store of personal data to breach.
10. Changes
If we change what the app collects, we will update this policy and the "last updated" date above, and — for any change that widens what we collect — describe it in the app's release notes. The current version is always available at https://athousandpaths.pages.dev/privacy.
11. Contact
PIAZ Software ApS piazsoftware@gmail.com