What Mazemind writes on your phone
Android gives every app a private storage area that other apps cannot read. Mazemind puts four things in it:
- The maze you are in the middle of — its layout, where your dot has got to and which corridors the breadcrumb trail has marked, so that closing the app half way through does not throw it away.
- Your best time for each size, where a time was being kept at all.
- Your settings — the dimensions and difficulty you last chose, the maze style, and whether hints are switched on.
- Nothing else. No archive of the mazes you have finished, no record of how long you wandered before finding the exit, no count of the hints you took.
Because the mazes are generated rather than downloaded, none of this arrived from anywhere. The saved maze is the app's own output, written by the app, read by the app, and gone when you leave it behind. It is copied into a device backup only if you have Android's backup switched on, in which case Google holds that backup under Google's terms and we see nothing of it. Uninstalling takes all four with it.
What it never does
- No sign-in and no profile. Nothing in the app asks for a name, an email address or a telephone number, and there is nowhere to put one.
- No advertising and no advertising identifier. The package contains no advertising code, so the Advertising ID is never read and nothing about how you play is sold to anybody.
- No analytics and no crash reporting. No session counted, no screen logged, no stack trace uploaded, and no remote switch we could throw from here.
- No permissions of consequence. No location, contacts, camera, microphone, photos or files, and the whole game runs with the handset in flight mode.
- No leaderboard and no comparison. Your best times are yours; there is nobody to rank them against, because there is nowhere for them to go.
These describe the build on the store today. The final panel sets out the order in which any of them would have to be withdrawn if that ever changed.
“Endless” nearly always means a server. Here it means an algorithm.
An app that promises never to run out of content has two ways to keep that promise. It can fetch — ask a server for the next item each time you want one — or it can make the next item itself. The two look identical from the outside. They are not remotely the same thing for you.
Fetching has a side effect nobody chooses and nobody can switch off: every item you are shown is a request, and every request is a line in a log, with your address and the time on it. After a month that log is a precise account of when you opened the app, how long you stayed, how fast you got through things and which nights you could not sleep. Nobody has to decide to collect it. It exists because the architecture produced it, and it sits on somebody's disk whether or not a single person ever reads it.
Mazemind's endlessness comes from a generator. A maze is woven by code already on your phone, out of a number the phone picked, in the fraction of a second between your tap and the screen redrawing. There is no request, so there is no log, so there is nothing to leak, subpoena, sell, breach or quietly repurpose two years from now under a different owner. Not because we promised, but because the thing that would have to exist does not.
That is the strongest form a privacy claim can take, and it is worth saying plainly where it stops: it holds only for as long as nothing is fetched. The day any part of this app starts asking a server for anything, the log comes into existence with it — and this panel would have to be deleted rather than reworded.
Clearing it
Starting a new maze replaces the saved one. For everything at once, Android's own app settings will clear Mazemind's storage while leaving the app installed, which returns it to its first run — no maze in progress, no best times, settings back to their defaults.
Neither route needs anything from us, and neither can be undone, because no second copy of any of it was ever made anywhere.
Who is responsible
The data controller is Embryonic Studio Limited, a company registered in England and Wales with its registered office at 124–128 City Road, London EC1V 2NX. The person answerable is Marco Botticelli. The UK GDPR requires a controller to name itself however slight the processing turns out to be, which is why the company appears in full rather than as "the developer".
In practice that duty reaches one channel: email. The app hands us nothing to be responsible for. Obtaining or updating Mazemind through Google Play is a separate arrangement between you and Google, which is its own controller for that, on its own terms.
If you write to us
Mail reaches path@acetollivormistuse.bond. Your address, your message and anything attached arrive with us and stay while the matter is live and for a short period after it closes, in case it reopens, and are then deleted. The lawful basis is legitimate interests: replying to people who write about our own software. It is read, answered and used for nothing else — no list, no onward sharing, no marketing. Ask for a thread to go sooner and it goes.
Nothing in the app is identified, so nothing in an email can be matched against a maze you played. If one generated badly, say which size and style — there is no way for us to look it up.
Your rights — and the letter you would get
The UK GDPR and the Data Protection Act 2018 give you a set of rights over personal data held about you: to be told what is held, to receive a copy, to have it corrected, to have it erased, to have its use restricted, to object to that use, and to have it moved elsewhere. Policies normally list them and stop there, which tells you nothing about what would actually arrive if you used one.
So here, word for word, is the reply we would send to somebody who wrote asking what we hold about them, assuming they had not written to us before.
Thank you for your request of [date], which we treat as a request for access under Article 15 of the UK GDPR.
We hold no personal data about you other than this exchange of correspondence: your email address, the message you sent, and our reply, which is the whole of it. Mazemind has no user accounts, no device identifier, no analytics and no server, so there is no record anywhere in our systems of the app having been installed or used, by you or by anybody else. Nothing exists that could be searched for you.
Your maze in progress, your best times and your settings are stored in the app's own area on your handset. They are not in our possession and never have been, so we cannot send you a copy, correct them or erase them. You can clear all of them yourself in a few seconds through Android's app settings, as described on our privacy policy page.
If you would like this correspondence itself deleted, say so and it will be, immediately. There is no charge for this or for any further request.
If you are not satisfied with this answer you may complain to the Information Commissioner's Office at ico.org.uk. You do not need to raise anything with us first.
— Embryonic Studio Limited
What that letter does and does not settle
It answers access, copy and portability in one go, because there is nothing to hand over beyond the thread itself. Rectification and erasure apply to that thread and we act on them at once. Restriction and objection have nothing to bite on, since answering a letter is the entire processing operation — an objection simply ends it. Every one of those is free, needs no particular form of words, and is answered inside one month, which here means days.
The one right the letter cannot deliver is anything to do with your handset, and we would rather say so than imply a reach we do not have. The supervisory authority is the Information Commissioner's Office, at ico.org.uk, which takes complaints directly.
Children
Mazemind has no chat, no shared content, no links leaving the app and nothing to buy. It collects no data from anybody, which includes anybody under thirteen, so there is no age gate to operate and no parental consent to gather, and neither is simulated here. It is a dot, some corridors and a way out.
If this page is ever rewritten
The date under the title names the edition in force. Where a release would make any statement above untrue — anything collected, anything transmitted, a component added, a permission requested, a transfer out of the United Kingdom — the order does not vary: this page is corrected first, the Data safety declaration in the Play Console is corrected in the same sitting, and only then does that release reach anybody. A sentence tidied for clarity is not such a change and brings nothing with it but a fresher date.
Superseded editions are kept. Ask at the address below for the earlier text and it will be sent, which is the only way anybody outside this company can hold the paragraph above to account.
Embryonic Studio Limited
Registered in England and Wales
124–128 City Road, London EC1V 2NX, United Kingdom
Responsible person: Marco Botticelli
Email: path@acetollivormistuse.bond
Application: com.pathforge.mazemind
If anything on this page is unclear, ask for it in plain words and that is how it will come back — no legal vocabulary, and in as much detail as you want.