Privacy — ONE MORE FLOOR

Last updated 13 September 2026.

ONE MORE FLOOR is a game you can play without an account, an email address or a password. This policy describes everything it stores, in plain language. If something here is unclear, write to the address at the bottom and ask.

Who is responsible for your data

The data controller is a private individual:

Andreas Kviby
Skonstavägen 3
611 73 Vrena
Sweden
[email protected]

What we collect, and why

This list matches the App Privacy information shown on the App Store. Nothing else is collected.

Device identifier: A random identifier generated on your phone the first time you open the game. It is what keeps your guest account attached to your device, so your progress survives closing the app. It is not your advertising identifier, not your phone's serial number, and it is not shared with anyone.
User ID and display name: An internal account identifier, and the display name you play under. You are given a name such as Traveller-4821 and can change it whenever you like. The display name is the only text you publish.
Coarse location — country only: A two-letter country code, taken from your phone's locale settings, so you can appear on the leaderboard for your country. No GPS, no precise location, no city, no IP-based lookup.
Gameplay content: Your runs: the floor you reached, the coins you secured, how the run ended, how long it took, which tower you played and which version of the app you played on. This is what the leaderboards, your own statistics, and the fairness checks described below are built from.
Sign-in identity — only if you choose to sign in: Signing in with Apple or Google is optional, and only exists so you can recover your account on a new phone. When you do, Apple or Google send us an account identifier, and may also send a name and an email address — with Sign in with Apple that email may be an anonymised relay address. We store only the account identifier. The name and the email address are used to complete the sign-in and are then discarded; there is no column for them in our database.

What we do not do

No tracking, and no tracking across other apps or websites.
No advertising, and no advertising identifiers.
No analytics SDKs and no crash-reporting SDKs in this version.
No email address, no password, no real name, no photograph, no contacts.
No precise location.
Nothing is sold or shared with data brokers, ever.
No payment data. This version of the game has nothing to buy; if that ever changes, purchases are handled entirely by Apple or Google and we never see your card.

Cookies on this website

This website sets two strictly functional cookies: a session cookie and a security token that protects form submissions. There are no analytics, advertising or tracking cookies, and nothing on these pages is loaded from a third party. The game's own API sets no cookies at all.

What is public

Your display name, your country code and your results appear on public leaderboards — both inside the game and on this website, which anyone can read without an account. That covers the Daily Tower and Endless: Endless runs are ranked all-time and weekly, so your best one is public too.

Your display name is the name you chose in the app, and you can change it at any time from your profile. Nothing else is published: your account identifier, your device identifier and your friend code are never shown to anyone, and neither is the detail of individual runs beyond the floor you reached and the coins you secured.

Where your data is stored

On servers rented from Vultr (The Constant Company, LLC), located in Frankfurt, Germany. Your data stays inside the EU/EEA and is not transferred outside it.

Why we are allowed to store it

Under the GDPR, we rely on two legal bases:

Article 6(1)(b) — performance of a contract. Your account, your progress and the leaderboards are the service itself. Without this data there is no game to provide.
Article 6(1)(f) — legitimate interests. Checking submitted results for cheating, so that the Daily Tower stays a fair competition for everybody who plays it honestly.

How long we keep it

Until you delete your account. There is no other expiry — a leaderboard is only meaningful if the results stay on it.

Deleting your account

In the app, go to Profile → Delete account. It happens immediately, and it is real deletion rather than a flag:

Your account is removed, along with your display name and friend code, which are released so another player may claim them.
Your sign-in links to Apple or Google are removed.
Your device identifier is removed.
Your access tokens are revoked, signing you out everywhere.
Your friendships are removed, in both directions.
Your Daily Tower results are deleted, so you disappear from every leaderboard.
Your Endless runs are anonymised rather than deleted: the results stay in our aggregate data for balancing the game, with the link to you severed and no way to restore it.

What is left behind is an empty record holding a random identifier and the dates it was created and deleted — nothing that identifies anybody. If you would rather ask us to delete your account than do it in the app, write to the address below.

Your rights

Under the GDPR you have the right to:

ask what we hold about you, and get a copy (access);
have anything wrong corrected (rectification);
have it deleted (erasure);
receive it in a portable, machine-readable form (portability);
object to processing we base on legitimate interests (objection).

Email [email protected] to exercise any of these. You are also entitled to complain to the Swedish data protection authority, Integritetsskyddsmyndigheten (IMY) — imy.se.

Children

ONE MORE FLOOR is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child under 13 has created an account, write to us and we will delete it.

Changes to this policy

If this policy changes, the date at the top of the page changes with it, and the new version is published here. Changes that materially affect what is collected will also be announced in the app before they take effect.

Contact

Andreas Kviby, Skonstavägen 3, 611 73 Vrena, Sweden · [email protected]