Privacy Policy

Last updated: September 14, 2026

The short version. Gemburrow has no account and no third-party analytics or advertising SDK. The iPhone app has one in-app purchase, and Apple runs it: we never see or store a card, a name or a billing address. Your progress lives on your device. For the Daily Dig leaderboard, the game sends a random ID made on your device, an auto-generated name like MOLE-4F2A, and the numbers from that run. It also uses the same random installation ID to look up your own standing. The public board shows names and scores, not that ID.

What is stored on your device

Gemburrow saves your progress locally: in the iPhone app's storage, or in your browser's local storage when you play at hypersage.ai/gemburrow/play/. That save contains:

The full save is not sent to us. Deleting the iPhone app deletes it, and so does clearing your browser's data for this site. The app's save may be included in your own iCloud or iTunes device backup, which is Apple's backup of your phone, not a service of ours.

The random identifier

The first time Gemburrow runs it generates a random UUID on the device and builds a display name from its first four characters: for example MOLE-4F2A. The leaderboard uses that identifier to recognise your scores, keep your best for each day, and return your own standing.

It is not your Apple ID, your advertising identifier, or any device identifier issued by Apple, and it is not tied to your name, email address or Apple ID; the game never has any of those. It is pseudonymous: it links results from the same installation without naming you. It is the key your Daily Dig scores are stored under: every score posted from one install carries the same identifier and MOLE- name, so the board can tell those scores belong together. It is not shared with anyone else and it is not used to track you across apps or websites. Deleting the iPhone app, or clearing your browser's data for this site, discards it; the game then generates a new one.

Daily Dig scores and leaderboard reads

When you finish a Daily Dig, the game posts that run to our leaderboard, hosted on Supabase. The message contains only:

Opening SCORES fetches leaderboard data and looks up your own standing; refreshing its boards repeats those reads. The personal lookup sends the same installation ID to our leaderboard service and returns your own score and rank. The ID is not displayed on the public board; this lookup does not create a score or a public profile. The League adds together your Daily scores from the last 14 days.

If a Daily score cannot be sent, the game holds it on your device and retries on launch, reconnection or resume while that Daily is still current. Pending scores expire at the next UTC day. Career, Free Dig and archive results are not uploaded. A pending Daily score may retry while another mode is open. The game does not send individual tap timings or custom session and career telemetry to our leaderboard service.

Scores are stored for the leaderboard and are visible to other players as a name and a number. They are kept until you ask us to remove them. If you would like a score row removed, email support@hypersage.ai with the MOLE- name, day and score shown in the game so we can help identify and remove the right rows. Generated names can be shared by more than one player, so we may need to clarify which results are yours.

What Gemburrow does not do

Reports from Apple

Apple may provide App Store performance and purchase reports, along with app usage and diagnostic reports when you opt in through Apple's sharing settings. These are Apple's reporting services, separate from the game's leaderboard. We use them to understand App Store performance and improve reliability; we do not add in-app tracking. You can manage diagnostic sharing in your device's settings. See Apple's analytics and diagnostic sharing guide.

Children's privacy

Gemburrow is a cozy puzzle game suitable for a wide audience and is not directed at children under 13 specifically. It asks no one, of any age, for a name, an email address or any contact detail. Its leaderboard messages contain only the Daily results and random installation identifiers described above. A player cannot type any text into the game. The leaderboard name is generated by the game and cannot be edited, precisely so no personal detail can end up on a public board.

This website

This page and the rest of hypersage.ai/gemburrow are static files served by GitHub Pages. There is no analytics script, no cookie set by us, no advertising pixel and no form. Web fonts are requested from Google Fonts, which receives the request as any font host would, and the game's own files are served by GitHub Pages, which sees those requests the same way any host would.

There are two playable things here, and they do not behave the same way. The small jar demo on the home page runs entirely in your browser, sends nothing anywhere, and keeps no state between visits. The full game at hypersage.ai/gemburrow/play/ saves progress in your browser's local storage. Daily scores and personal standing lookups use the same leaderboard service and random installation ID described above. The browser game has no purchase store. Clearing your browser's data for this site erases its save and identifier.

Changes to this policy

If the game's data behaviour changes, this page changes with it, and the date at the top moves. Wherever the iPhone app is listed on the App Store, material changes will also be reflected in the privacy summary on that listing.

Contact

Questions, corrections, or a leaderboard row you want gone: support@hypersage.ai.

Gemburrow is published by HyperSage AI Labs LLC, a Delaware limited liability company.