Hushlines Privacy Policy

Two Coffees In · Effective 20 October 2026 · Updated 28 October 2026 · Terms of use

1. Who we are

Hushlines is made by Two Coffees In, an independent game studio ("we", "us"). If you have any question about this policy or your data, write to twocoffeesin.studio@gmail.com.

2. Summary

3. Data that stays on your device

Your levels, times, Hush balance, album, looks, settings and a short log of your recent games are saved only in the app's storage on your phone. Uninstalling the app or clearing its data removes them. They are only sent to us if you choose to attach the log to a feedback report (see section 5).

If backup is turned on in your phone's settings, Android may also copy the app's data (your progress and settings) to your own backup on Google Drive (Android Auto Backup), so it comes back when you set up a new phone. That backup belongs to your Google account and is handled by Google; we can't see it. You can turn it off or delete it in your phone's backup settings.

4. World records

When you finish a level fast enough to post a time, the app sends our server:

• a random player ID created by the app (it isn't linked to your name, phone number or Google account), and a secret install code that proves the time comes from your copy of the app (we keep only a scrambled form of it);
• the player name you chose in Settings;
• the level or daily puzzle, and your time.

The app also sends a Google Play check (Firebase App Check with Play Integrity) that shows the time comes from the real app; it doesn't identify you. Records are processed and stored by our server in Singapore (Google Cloud region asia-southeast1).

Your player name and time appear on public world-record lists that every player can see, so please don't use your real full name if you'd rather not. Rude names can be reported from the list (we receive your player ID, the reported player's ID and the level) and we may hide them. We also keep a short count of how many times were sent per hour, only to stop cheating and spam. We don't store your IP address with your records, but our server's logs keep IP addresses for about 30 days, to keep the service safe.

5. Feedback

If you use Send feedback in Settings (in the app or the web version), your email app opens with a report filled in; nothing goes to our server, and we only receive it if you press Send there. The report holds your message, its category, the app version, basic device details (device type and browser engine, screen size, language), a summary of your game state (mode, progress, Hush balance), your install ID and, only if you leave the box ticked, a log of your recent games. You see exactly what will be sent before you send it, and we receive your email address because you email us. Don't include personal information in the message itself.

6. Web version

You can also play a free demo of Hushlines in your browser (hushlines-b6fb8.web.app/play). It has no ads, no purchases, no analytics (only the anonymous counts below) and doesn't post world records. Your progress and settings are kept only in your browser's storage on that device; clearing your browser data removes them. The page is served by Firebase Hosting (Google), which keeps server logs with IP addresses and browser details for a limited time, to deliver the page and keep the service safe. Feedback works by email, as above. The page sends our server only three things: the tester sign-up below, an anonymous visit count and anonymous invitation counts. That count adds 1 to a daily total, at most once a day per browser, together with the link tag that brought you (for example "fbad" for our Facebook ad, or "direct"); it keeps no personal data, no ID, no IP address and no browser details. As with any web page, Google's servers see your IP address in order to deliver that request, but we don't store it. To count you only once a day, the page keeps the last day it counted in your browser's storage (localStorage), and it keeps the link tag for the open tab only (sessionStorage); both stay in your browser.

After you clear your 3rd new level (and once more after the 8th, if you didn't sign up), the page invites you to test the Android app. Each time the invitation is shown, you start typing your Gmail, you send it, or you tap "Not now", the page adds 1 to a daily total for that step and link tag. These counts work like the visit count: no personal data, no ID, no IP address, no browser details, and never your Gmail. To ask you at most twice, the page keeps in your browser's storage how many new levels you've cleared there and how many times it has asked; that stays in your browser.

The same demo is also on itch.io (twocoffeesin.itch.io/hushlines). That copy keeps your progress only in your browser and sends us nothing: no sign-up, no visit or invitation counts, no world records, no analytics and no ads; we only hear from you if you email us feedback. The page is served by itch.io, whose own privacy policy covers its site.

7. Android tester sign-up (web version)

The web version of Hushlines lets you sign up to test the Android app before it's released. If you do, we receive your Gmail address, the game's language, the time you signed up and the link tag that brought you to the page (as in section 6). We use your Gmail only to add you to the test on Google Play and send you the invitation; we don't use it for anything else or share it. We delete it when the test ends, or sooner if you ask us at twocoffeesin.studio@gmail.com.

8. Purchases

All purchases (Hush packs, Extreme mode, Remove ads, premium looks, paid hands such as Rose & gold, Stardust and Night glove, and the small "Touch grass" joke tip) are processed by Google Play. We receive the product you bought and an order number so the app can deliver it. We never receive your card or bank details.

9. Ads

Hushlines shows ads through Google AdMob: optional rewarded videos you choose to watch, a small banner on the road and shop screens, and, after the ad-free hours, an occasional full-screen ad between levels. Ads never appear on the game board. To show and measure ads, AdMob may collect your device's advertising ID, IP address, device information and how you interact with ads. See how Google uses data from apps that use its services.

• In the EEA, the UK and Switzerland, the app asks for your consent before showing personalised ads. You can change your choice any time under Ad privacy choices in Settings.
• Everywhere, you can reset or delete your advertising ID in your Android settings (Settings → Google → Ads).
• Buying Remove ads stops all ads.

10. Analytics and crash reports

We use Google Analytics for Firebase to understand how the game is played (for example which levels players finish, how long sessions last, whether players come back the next day) and Firebase Crashlytics to receive reports when the app crashes. These collect an app-instance ID, device model, Android version, app version, country (from your IP address) and in-game events. Google Analytics may also use your device's advertising ID. We use this only to improve Hushlines, never to identify you. You can turn usage stats off in Settings.

In the EEA, the UK and Switzerland, analytics and crash reports start only after you agree in the consent form the app shows after your first few levels, or before your first ad if that comes sooner. Until then, and if you say no, nothing is collected. You can change your answer any time under Ad privacy choices in Settings.

World-record times, your player ID and your player name (section 4) are not based on this consent: they are sent as part of the game itself, to run the world-record lists and keep them fair (to provide the game under our terms of use, and our legitimate interest in fair lists), each with the Play Integrity security check described there.

11. Children

Hushlines is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has sent us personal information (for example in a feedback message or player name), contact us and we will delete it.

12. How long we keep data

• World-record entries: for as long as that ranked list exists, or until you ask us to delete them.
• Feedback emails: up to 12 months.
• Tester sign-ups (Gmail address): until the Android test ends, or until you ask us to delete it.
• Anti-spam counters: a few days. Server logs (with IP addresses): about 30 days.
• Analytics: up to 14 months. Crash reports: up to 90 days.
• Ad data: as described in Google's policies.

13. Your choices and deleting your data

You can see, correct or delete the data we hold about you, or object to how we use it. To delete your world-record entries or feedback emails, email twocoffeesin.studio@gmail.com with the subject "Delete my Hushlines data" and include your player ID (shown in Settings). To delete a tester sign-up, just tell us the Gmail address you signed up with. We will delete it within 30 days. Data stored only on your phone is deleted by uninstalling the app or clearing its storage (in the web version: clearing your browser's data for the site). For data held by Google (purchases, ads), use your Google account settings.

Depending on where you live (for example the EU, UK or California), you may have further rights under local law, including the right to complain to your data-protection authority.

We don't sell your personal information for money. But showing personalised ads through Google AdMob may count as "selling" or "sharing" personal information (for targeted advertising) under some US state privacy laws, such as California's. To opt out, open Ad privacy choices in Settings, where the app shows it, or buy Remove ads, which stops all ads. You can also reset or delete your advertising ID in your Android settings (Settings → Google → Ads).

14. Where data is stored and how it's protected

Our server runs on Google Cloud (Firebase) in Singapore, and Google's services may process data in other countries. Data is sent over encrypted connections (HTTPS), and our database only accepts data through our own server code, or, for tester sign-ups, visit counts and invitation counts, in exactly the shape described above.

15. Changes to this policy

If we change how Hushlines uses data, we will update this page and the date at the top, and tell you in the app when the change is important.

16. Contact

Two Coffees In · twocoffeesin.studio@gmail.com