MIDPOINT privacy notice

Who controls your data

MIDPOINT is operated by Material Conditions Ltd, the controller for the personal data described here that we receive. We are a private limited company registered in England and Wales, company number 16914900. Our registered office is 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ.

Contact privacy@playmidpoint.com for privacy matters, support@playmidpoint.com for support, or security@playmidpoint.com for security reports.

Your game stays on your device

Find The Midpoint has 250 levels. The first 100 are free. No ads or subscriptions. Daily and Trial are free too. One purchase unlocks the other 150 levels. Campaign progress, settings, Daily results, personal History and reminder preferences are stored on your device. Compatible progress from earlier versions is preserved locally.

MIDPOINT does not upload your game save to us and does not provide cloud saving or progress sync. Buying or restoring the expansion restores access to levels, not your progress. On iPhone, Apple device backups may behave separately from the app. On Android, MIDPOINT excludes its app data from cloud backup and device-to-device transfer.

The optional expansion

On iPhone, Apple handles payment and purchase records through the App Store. MIDPOINT uses Apple’s StoreKit service on your device to verify whether you own the expansion and to restore access. On Android, Google Play handles expansion purchases and payment details; MIDPOINT receives purchase status to grant or restore access. We do not receive your payment-card details, and we do not operate a purchase server.

On iPhone, the game receives the product, price and verified access status from the native app. Transaction and Apple Account identifiers are not passed to the game’s web layer or sent to a MIDPOINT server. On Android, MIDPOINT keeps signed purchase receipts in app-private storage, excluded from backup, to verify ownership and support offline access. These receipts are not passed to the game’s web layer or sent to a MIDPOINT server. Google Play purchase ownership is separate from the Google account you choose for Daily ranking. Purchases do not transfer between Google Play and the App Store. Purchase ownership is separate from your local save.

Optional iPhone Game Center Daily ranking

On iPhone, you can choose to connect to Apple Game Center for Daily ranking. Campaign, Trial and local Daily play do not require Game Center or an internet connection.

When you use ranking, MIDPOINT submits your Daily score and limited challenge context, including the number of perfect attempts, to Apple Game Center. Apple associates the submission with your Game Center player. Your Game Center alias, score and rank may be visible to other players according to Apple’s service and your settings.

MIDPOINT retrieves aliases, scores and ranks to show the leaderboard. These leaderboard entries are used for the current display; we do not send them to a MIDPOINT server. Your own result and submission status can remain in your on-device Daily record. Native Game Center code uses Apple player identifiers to recognise your own entry, without passing those identifiers to the game’s web layer.

Apple controls Game Center account data and service retention. See Game Center and Privacy for Apple’s explanation and choices. Deleting MIDPOINT does not itself delete Apple’s Game Center records.

Optional Android Daily ranking

On Android, Campaign, Trial and local Daily play work without Google sign-in or an internet connection. If you choose online Daily ranking, MIDPOINT explains the service before opening Google’s account chooser. The native app sends a Google ID token over an encrypted connection to MIDPOINT’s Cloudflare ranking service to verify your account. Google handles the sign-in chooser and its account data under its own privacy terms.

The service uses the verified Google account identifier to create a keyed account identifier. It does not store your raw Google account identifier, email address, display name or ID token. It stores the keyed identifier, UTC challenge date, first accepted Daily score, generator version, run fingerprint and timestamps. Your public board entry displays a generated alias, score and rank, rather than your Google name. Other players can see that board entry. MIDPOINT does not use ranking data for advertising, analytics or linking Android and iPhone accounts.

Online scores remain available for 72 hours after the UTC challenge day ends, then expire and are removed by scheduled cleanup. In the app, you can sign out or request deletion of your online ranking data. Deletion removes live scores and retains a keyed deletion record for 31 days to prevent an older backup or queued submission from restoring them. Signing out alone does not delete an online score. Deleting online ranking data does not affect local progress. Cloudflare processes IP addresses and ordinary request and security data to provide and protect the service. The ranking database is configured for Cloudflare’s EU jurisdiction, though requests may be handled elsewhere. MIDPOINT does not log ID tokens or submitted attempt details.

Analytics and Android purchase diagnostics

MIDPOINT’s own Measurement analytics transmission is disabled in this release. The app does not request Measurement consent or show an Analytics control in Settings. Earlier notices described a conditional Measurement service, including daily summaries and deletion schedules. Any future activation of that service would require an updated explanation before collection begins and your consent. MIDPOINT does not use advertising trackers or sell your game data.

On Android, Google’s Play Billing library automatically sends operational diagnostics, a random identifier for each Billing client instance, and device, software and network metadata to Google when the app checks or manages expansion access. This can occur when the app opens, before a purchase. This processing is separate from MIDPOINT’s ranking service and disabled Measurement service. Google handles these records under its privacy policy; we do not promise a fixed Google retention period or a MIDPOINT control that disables this SDK processing.

Website visits, email and platform services

If you open our website, Cloudflare processes your IP address and ordinary request, security and operational information to deliver and protect it. This website processing is separate from your local game save and the disabled app analytics service.

If you email us, we receive your email address, message and any attachments you choose to send. Google Workspace processes these messages for us. Please avoid including passwords, payment-card details or unnecessary sensitive information.

Apple handles App Store downloads, purchases, reviews and its own diagnostic or usage reports under Apple’s terms and your Apple settings. Google handles Google Play downloads, purchases, reviews and its own diagnostic or usage reports under Google’s terms and your Google settings. Local reminders use your device’s notification controls. Sharing sends only the content you choose to your selected destination, which handles that content under its own terms.

Why we use information we receive

We use support and security correspondence to answer requests, operate MIDPOINT and investigate problems, relying on our legitimate interests. We process rights requests and other information where needed to meet legal obligations. Website and ranking-service security processing serves our legitimate interests in safely delivering and protecting those services. We verify Google sign-in and process the first accepted Daily result to provide the optional Android ranking you request.

Local game information supports the features you request. Apple and Google process their own platform services under their respective privacy notices. We do not use personal data for solely automated decisions that produce legal or similarly significant effects.

Providers and international transfers

Our website, email and Android ranking providers may process information outside the United Kingdom. Where required, we use applicable adequacy decisions or contractual safeguards for international transfers. Cloudflare’s data processing terms include Standard Contractual Clauses and a UK transfer addendum; Google Workspace provides corresponding data processing terms and transfer safeguards. Contact our privacy address to request a copy of the transfer safeguards relevant to your request.

Retention and deletion

Local game data remains until it is removed from the device. Deleting the app removes its local data, subject to device behaviour and, on iPhone, Apple backup settings. MIDPOINT excludes Android app data from its cloud backup and device transfer. There is no MIDPOINT cloud save for us to recover or erase. Expansion purchase records follow Apple’s or Google’s controls and retention, depending on your platform. iPhone Game Center records follow Apple’s controls. Android online Daily ranking scores and deletion records follow the periods above, separately from local progress.

We retain support, privacy and security correspondence only as long as reasonably necessary to answer requests, manage security and meet legal obligations. We review correspondence periodically and delete it when no longer needed. An active request, dispute, security investigation or legal obligation may require longer retention. We do not keep a separate MIDPOINT website request-log database. If we receive website security records, we keep them only while needed to investigate misuse, resolve a service incident or meet legal obligations, then delete them. Cloudflare’s operational records follow its service retention settings and terms.

If you have a question about data associated with an earlier version, contact us. We will explain what records, if any, we can locate; we do not promise that deleting local data removes records held independently by Apple or another destination you chose.

Delete Android ranking data

To delete your Android ranking identity and online scores without installing or opening the app, use Delete Android ranking data. Sign in with the same Google account you used for Daily ranking, then confirm deletion. Google verifies the account; MIDPOINT uses the verified identity to remove its online ranking records. Signing in on the deletion page does not post a score.

You can also open Settings → Daily ranking → Account in the app. If prompted, sign in with the ranking account, then open Account again. Choose Delete ranking data and confirm Delete. Signing out alone does not delete scores. Deletion removes live online scores; a keyed deletion record stays for 31 days to prevent restoration, and encrypted provider backups expire within 30 days. You can join ranking again on a new UTC day. Local progress and History, your Google Account and Google Play purchases are unaffected.

For help, email privacy@playmidpoint.com. Never send your password or sign-in token. A public player alias alone cannot verify ownership.

Your choices and rights

Depending on where you live and the applicable law, you may have rights to access, correct, erase, restrict or receive personal data. Email privacy@playmidpoint.com to make a request. We may need information to identify relevant records and verify the request, and respond within the period required by applicable law.

MIDPOINT does not provide a cloud-save account and cannot access your local save. Optional Android ranking uses a Google-authenticated ranking identity; use the deletion options above to remove its online records. For Apple Account, App Store purchase or Game Center data, use Apple’s privacy and support controls. For Google Account and Google Play data, use Google’s privacy and support controls. You can delete MIDPOINT’s Android online ranking data in the app or through the external deletion page, and contact our privacy address for help. This does not limit any right that applies to information we hold. You may complain to the UK Information Commissioner’s Office or the relevant authority where you live.

Your right to object

You may object to our use of your personal data where we rely on legitimate interests, including responding to support and security messages and protecting our website. Email privacy@playmidpoint.com to object. We will consider your request under the applicable law.

Availability and changes

MIDPOINT’s initial public iPhone release is planned for the United Kingdom and United States. The Android version is available to existing private testers through Google Play. The game has not launched publicly on either platform. This notice also covers visits to our MIDPOINT website and messages to us from other locations. MIDPOINT does not ask for your age or date of birth. Apple’s and Google’s age ratings, account settings and parental controls apply to their respective services.

We will update this notice when our practices change. Material changes to app collection will be explained before the new processing begins.