Privacy Policy
UNDERMASK has no accounts, no analytics, no advertising, and no tracking of any kind. We never learn who you are — not because we choose not to look, but because we never ask and operate no system capable of connecting an answer to a person.
1. What we never collect
We do not ask for and never receive:
- Your name, email address, or phone number.
- Your age, gender, city, country, or any other demographic information.
- Any login, social account, or contact list.
- Any advertising identifier or device fingerprint.
There is no registration and no sign-in. The application opens and works immediately.
2. The anonymous device identifier
When you first open the app, it generates a random identifier — a string of characters with no meaning, created on your device. It contains no information about you or your phone.
Its only purpose is to prevent the same device from answering the same question more than once, which is what keeps the statistics meaningful. It tells our server "same device or different device" — never "who".
3. What is stored on your device
The following stays on your phone and is never sent to us:
- Your Drift Level: two numbers for the total, and two more for each of the nine categories.
- Which questions you have already seen, so they are not shown again.
- Your medals and app settings, including the language you chose.
Your individual choices are not recorded anywhere — not even on your phone. When you answer, the app takes the share of people who picked the same option, turns it into a number, and adds that number to your Drift Level. The option itself is not written down.
4. What is stored on our server
Our server holds:
- The questions themselves and their translations.
- Anonymous counters — how many people in total selected each option. When you answer, one number goes up by one.
- The fact that a device answered a particular question, with the time and whether it was skipped. This is what prevents answering twice and what makes the daily limit possible.
- A record of the device: its random identifier, when it first and last appeared, how many questions it has been through, the interface language, and whether a purchase is active.
- Medals awarded for being among the first three to answer a question.
- Weekly snapshots of the counters, so the history of how opinions shift is not overwritten.
We deliberately do not store a record connecting your identifier to the option you chose. Such a record does not exist anywhere in our system. We know that 6,412 people chose a particular answer; we have no way of knowing which devices they were.
5. Suggesting a question
VIP users can suggest one question a day. The text you write is stored on our server together with the identifier of the device that sent it, so the daily limit can be enforced.
Suggestions go to the developer's inbox. They are never published, never shown to other users, and never appear in the app.
This is the only place in the app where you can type free text. Please do not write anything about yourself or anyone else in it — a suggestion should be a question, not personal information.
6. Protecting the statistics
Because the statistics are the whole point of the app, we watch for automated abuse. If a device answers unrealistically fast over a long run, an entry is written to an internal log with the device identifier and the timing involved. A person then looks at it and decides whether to block that identifier.
No personal data is involved: the log records how fast answers arrived, never what was answered.
7. IP addresses and logs
Like any internet service, our server receives a connection from your device. We do not log or store IP addresses ourselves and never use them to identify anyone.
Our hosting provider processes connection data, including IP addresses, as part of running and protecting the infrastructure, under its own terms. We do not have access to it in a form linked to your activity in the app.
8. No third-party services
We use no analytics, no crash reporting, no advertising networks, and no third-party trackers. No SDK inside the app reports your behaviour to anyone. This is unusual, and it is deliberate: an application built on anonymity should not quietly hand your activity to someone else.
It also means we cannot see how you use the app. If something breaks, we will only know if you tell us.
9. Device backups
If you have iCloud Backup or Google Backup enabled, a copy of the app's data may be stored in your own cloud account, under Apple's or Google's terms, and restored if you reinstall or change your phone. This is a feature of your device, not of our service. We have no access to that backup and cannot read it.
10. Purchases
UNDERMASK VIP is a one-time purchase. Payment is handled entirely by Apple or Google. We never see your card details, billing address, or name.
When you buy, your device sends us the transaction identifier issued by the store. Our server asks Apple whether that transaction is genuine, and if it is, records against your device identifier that a purchase is active. That flag is all we keep — no payment data of any kind reaches us.
The purchase belongs to your store account, not to your device. If you reinstall the app or change phones, the store restores it.
11. Children
UNDERMASK is rated 4+ and contains nothing unsuitable for any age. Since we collect no personal data from anyone, we hold no personal data belonging to children either.
12. Your rights
Data protection law gives you rights to access, correct, or delete your personal data. In our case these rights have an unusual answer: we hold no personal data about you to access, correct, or delete.
You are always in full control of what does exist:
- Reset inside the app clears your Drift Level and starts your count from zero.
- Deleting the app removes your local data from the device. If a cloud backup exists in your Apple or Google account, you can delete it through your device settings.
Note that answers already counted remain part of the anonymous totals. They are not personal data — they cannot be traced back to you, and there is nothing in them to identify.
The same is true of what the server holds against your device identifier: it is a random string with nothing personal attached to it, and once you delete the app, nothing on your phone points to it either.
13. Changes to this policy
If this policy changes, the updated version will be published on this page with a new date. If a change ever affects what we collect, we will say so plainly rather than quietly editing the text.
14. Contact
Questions about privacy: [email protected]
Data controller: Individual Entrepreneur Andrei Akentev (NNCNC Lab).
In short: the app knows what a crowd of anonymous devices answered. It does not know who you are, and it never did.