Squishbox Privacy Policy

Last updated: September 6, 2026

Squishbox is a collecting game for kids. It is built so that it does not need to know anything about the person playing it.

What we collect

No personal information. There are no accounts, no sign-in, no email, no real names, no location, no contacts, and no device identifiers.

What stays on the device

Your collection, coins, streak, parent PIN, nicknames, shelf, and the activity log are saved on the device the app runs on. Deleting the app, or using "Reset everything" in the Parent corner, erases them.

Trading with friends

Trading with friends is off when the app is installed. Nothing leaves the device until a grown-up turns it on in the Parent corner. With it off, the app makes no network requests at all.

If a grown-up turns it on, the app talks to a small "trading post" server so two friends can swap dumplings. The server receives only:

• a random id and token the app makes up on the device, not tied to any person or device identifier
• a short friend code the app assigns, like TARO-71
• a basket name the child chooses (the app asks for a made-up name, not a real one)
• the list of dumplings owned, so trades can be checked and swapped fairly

Friends are added by typing a friend's code. There is no search, no chat, and no messages: the only text one player can see from another is the made-up basket name. Friend codes are short, so we cannot promise that nobody will ever reach a child by guessing one; that is part of why trading is off unless a grown-up switches it on, and why it can be switched back off at any time. This information is used only to run trades and is never sold, shared, or used for advertising. Turning trading off in the Parent corner stops all communication with the server.

Advertising and analytics

Squishbox has no advertising and no analytics or tracking of any kind, first-party or third-party.

Purchases

Squishbox has no purchases. Coins are free and are given once a day inside the app. The odds for every box are shown before it is opened.

Children

Squishbox is designed for children and complies with the Children's Online Privacy Protection Act (COPPA) by not collecting personal information from anyone.

Changes

If this policy changes, the new version will be posted at this address with a new date.

Contact

Questions: open an issue at github.com/kendallcoding202/squishbox.