GICROSOFT · WEBSITES & GAMES

Privacy Policy

Effective and last updated: October 29, 2026

Contents
  1. Scope and who we are
  2. Information you provide
  3. Information from devices and service providers
  4. How information is used
  5. Local storage, cookies and offline features
  6. Nonogram Garden
  7. Gicrosoft: Maze Defense / Odd Castle
  8. Other websites, creative tools and future products
  9. Annuity, insurance and financial inquiries
  10. Advertising, measurement and privacy choices
  11. Purchases and subscriptions
  12. Sharing and service providers
  13. Retention and deletion
  14. Your rights and requests
  15. Children and age
  16. Security and international processing
  17. Changes and contact

1. Scope and who we are

This Privacy Policy describes how Gicrosoft, Gicrosoft Annuity and the developer or publisher identified in the applicable app or website listing handle information when you use services that link to this policy. These include gicrosoft.com and its subdomains, Nonogram Garden, and Gicrosoft: Maze Defense (also known as Odd Castle). Contact: info@gicrosoft.com. Product-specific sections below explain differences. A service with a separate privacy notice is governed by that notice for the activities it describes. Future games and websites may use this policy only when they link to it and their actual practices are covered; new practices will be disclosed before they apply.

2. Information you provide

Depending on the feature you choose, we process your email address, display name, account identifier, authentication information, support messages, submitted files, feedback, and content you create. Game information may include puzzle designs, secret messages, maps, progress, inventory, scores, achievements, friend requests, invitations and cloud backups. Do not put sensitive personal information, passwords, payment details or confidential information in public content, QR codes or puzzle secrets.

3. Information from devices and service providers

Our hosting, authentication, advertising and payment providers may process IP addresses, approximate location inferred from IP, device or advertising identifiers, browser and operating-system details, interaction information, crash reports, diagnostics, timestamps and security logs. The information depends on the product, platform, enabled feature and your choices. App-store and sign-in providers supply the identifiers, purchase status or basic profile information needed for the function you request. We do not receive your full payment-card number from app-store purchases.

4. How information is used

We use information to deliver requested services; authenticate accounts; save, synchronize and restore progress; publish content you choose to share; operate rankings and social features; verify purchases; provide ads and privacy choices; respond to support and consultation requests; diagnose problems; prevent abuse, fraud and unauthorized access; moderate public content; and meet legal obligations. Where applicable law requires a lawful basis, processing is based on performing a requested service or contract, consent, legitimate interests such as security and service operation balanced against your rights, or legal obligations. Consent can be withdrawn for future processing through the relevant controls.

5. Local storage, cookies and offline features

Games may keep progress, settings, downloaded content and verified purchase information on your device. Websites may use cookies or browser storage for sign-in, preferences, consent and local features. Clearing browser or app storage or uninstalling an app can remove local information; this is separate from deleting a server account. Essential storage supports functionality and security. Advertising or optional measurement technologies may be used where enabled and subject to applicable consent requirements. Browser controls can restrict cookies; some features may stop working.

6. Nonogram Garden

Offline puzzles and local creations can be used without an account. Local puzzle and QR creation and local printing do not themselves publish a creation to our cloud. Google sign-in is used for cloud drafts and publishing; basic identity information such as email, display name and account identifier is used for authentication. We do not request Gmail, Drive or contacts access for this sign-in. Cloud drafts, published puzzles and attached secret messages are sent to our server when you save or publish them. Publishing creates a shareable web link that others can use without installing the app. Public content may be discoverable and recipients can copy or redistribute it. A secret is a game-completion reveal, not encrypted confidential storage or a security boundary. QR codes can contain readable text or links; distributing a QR puzzle may disclose its encoded content. Reports, moderation records and author-blocking choices support community safety. Blocking choices may be stored locally. Printing uses the operating-system print service or a PDF; a selected printer, PDF destination or sharing app handles information under its own practices. Printed pages may contain Gicrosoft branding. Ad-free purchases remove in-app ads, not printed branding. Request deletion at https://nonogram.gicrosoft.com/delete-data or through the available account controls.

7. Gicrosoft: Maze Defense / Odd Castle

Offline progress is stored locally. In versions offering accounts, Supabase provides account authentication, verification and cloud services. Depending on the version, sign-in may use email/password or Google. Account features can include latest cleared-round backups, rankings, nicknames, scores, invitation and help records and friends. Nicknames and scores can appear in rankings; friends and friend-request recipients may see nicknames and comparison results. Maps, inventory and email addresses are not published to other players by these features. Cloud restore is a separate action. Rewarded ads may be offered for optional rewards or retries; availability depends on the version. Delete a game account using Settings → Cloud save & game account → Delete game account, or https://gicrosoft.com/odd-castle/account.html. Local offline saves and achievements can remain after server-account deletion. Existing detailed product notices remain available for version-specific information.

8. Other websites, creative tools and future products

A website or app may offer local tools, uploaded files, generated content, account libraries, financial calculators or other features. Only features actually offered process the associated information. Public submissions are visible to the audience you select; local-only use does not by itself authorize publication. Where a service uses an external AI, storage or processing provider, the applicable feature notice will identify material additional processing and choices before new uses apply. This policy does not authorize unspecified future collection, new sensitive-data uses or public release of private creations.

9. Annuity, insurance and financial inquiries

If you contact Gicrosoft Annuity, we use the contact details and information you choose to provide to respond to your inquiry. Ordinary website browsing and game use are separate from applying for insurance or an annuity. Do not submit Social Security numbers, medical records, bank details or application documents through a game, public content or ordinary website contact field. If a regulated product or carrier requires financial, identity or health information, use the designated secure application process and review the applicable carrier or agent privacy notices. Those notices may impose different retention and disclosure requirements. We do not use game progress or puzzle content to determine eligibility for financial or insurance products.

10. Advertising, measurement and privacy choices

Supported products may use Google AdMob and Google consent services. Advertising SDKs can process device identifiers, IP addresses, approximate location, interactions and diagnostics for ad delivery, measurement, security and fraud prevention. Non-personalized ads still involve data processing. Current game implementations may request non-personalized ads and a teen-appropriate maximum content rating; this does not eliminate provider processing or guarantee every ad classification. Consent or opt-out forms are shown where required. When available, reopen Ad privacy options in the app settings. Device advertising settings and Google ad controls provide additional choices. An ad-free purchase does not necessarily stop hosting, authentication, security or app-store processing. We do not sell account contact details for money. Advertising disclosures can constitute a sale, sharing or targeted advertising under some privacy laws; applicable opt-out choices apply to those activities. Where legally required and technically applicable, recognized opt-out preference signals are honored for the relevant browser. We do not treat a browser Do Not Track setting as a universal service-wide opt-out.

11. Purchases and subscriptions

Google Play, Apple App Store or the payment provider identified at checkout processes payments under its own terms and privacy policy. Only products and platforms actually offered apply. Apps may receive product identifiers, purchase tokens, transaction identifiers, signed receipts, status and entitlement information to validate, acknowledge and restore purchases and prevent fraud. Current permanent ad-removal products are one-time purchases, not subscriptions. Other products must disclose their own pricing and renewal terms at checkout. Purchase entitlements are associated with the relevant store account and are separate from a game login. Deleting a game account does not cancel store subscriptions, erase store transaction records or automatically issue refunds. Manage those through the store. Local verified purchase data may be protected with platform security facilities.

12. Sharing and service providers

Information is disclosed as needed to hosting/CDN and infrastructure providers, authentication and cloud database providers, advertising and consent providers, app stores/payment processors, email/support providers and providers specifically identified by a feature. Current services may use Cloudflare, Microsoft Azure, Supabase, Google sign-in, Google Workspace, AdMob and Google Play; Apple services apply to supported Apple versions. Not every provider is used by every product. Providers may act on our instructions or independently for their own services as described in their notices. We may disclose information to comply with valid legal process, protect rights and safety, investigate abuse, or in a business transfer subject to appropriate protections. Public content is disclosed when you choose to publish or share it. External links and embedded third-party content have their own privacy practices.

13. Retention and deletion

We retain information for the period needed for its purpose, account operation, support, fraud prevention, dispute resolution and legal obligations. Cloud account data generally remains until removed by you or through the account-deletion process, subject to these exceptions. Latest-backup features can replace prior active backups; providers may retain historical backups or operational records under their schedules. Deletion from active systems does not promise immediate erasure from backups or legally required records. Backup data is restricted and removed or overwritten through normal retention cycles. Public copies saved by others, local files, browser caches and app-store records may remain outside our control. We do not claim a fixed retention period for all products and providers.

14. Your rights and requests

Depending on your location and applicable law, you may request access, correction, deletion, a copy or portability of information; restriction or objection to processing; withdrawal of consent; and opt-out of applicable sale, sharing or targeted advertising. California and other US residents may have rights to know categories, sources, purposes and recipients and to use an authorized agent; we do not discriminate for exercising applicable rights. Where applicable, you may appeal a denied request by replying with Privacy appeal, or complain to your local privacy regulator. Contact info@gicrosoft.com with Privacy request, identify the service and account, and describe your request. We may verify identity and authority with proportionate information before acting. Do not email passwords or full payment-card details. We respond within applicable legal time limits. Marketing email, if offered, can be unsubscribed from; necessary account/security messages can continue.

15. Children and age

Nonogram Garden and Maze Defense are intended for users aged 13 and older and are not directed to children under 13. We do not knowingly collect personal information from children below the applicable minimum age without a legally valid basis or required parental consent. If you believe a child has supplied information improperly, contact us for review and deletion where appropriate. A future product directed to younger children will need a specific notice and appropriate safeguards before launch; this general policy does not establish parental consent or make every future game suitable for children.

16. Security and international processing

We use reasonable safeguards appropriate to the service, such as HTTPS, access controls and platform-protected local credentials where implemented. No system is perfectly secure. Information may be processed in the United States and other countries where we or providers operate, whose laws may differ from yours. Where applicable, transfers are subject to legally required safeguards, such as contractual protections or another permitted transfer mechanism. Ask us for relevant information about a particular service. Public links and puzzle secrets should never be treated as secure confidential storage.

17. Changes and contact

We update this policy when products or practices change and revise the date below. Material changes will receive additional notice or consent where required by law. Future games must be checked against their actual data flows and store declarations before relying on this notice. Questions, privacy requests and support: info@gicrosoft.com.