Privacy policy

Your quilt
stays yours.

Core puzzles work without an account. Optional services have clear, separate data practices.

Summary

Core puzzles do not require an account, and Coverlet does not use your data for advertising or cross-app tracking. Gameplay progress and preferences are stored on your device. Optional Apple services process information under Apple’s terms. The Coverlet 3.0 paid Thread testing service also processes identity and transaction information as described below; paid Thread is not available in the current App Store release.

Information stored on your device

Coverlet stores your puzzle progress, quilt blocks, streak, selected fabric, reminder settings, purchase-entitlement state, and gameplay preferences in private app storage or shared app-group storage used by widgets and Live Activities. The Thread testing service does not receive your complete puzzle history or board contents.

Optional Apple services

Game Center

If you choose Game Center, Apple processes your player identity, scores, leaderboards, and achievements under its own terms and privacy practices. The optional Thread testing service uses a verified Game Center identity to associate a paid balance with the correct player.

In-app purchases

Apple processes purchases and provides transaction information so the app can unlock content. Coverlet does not receive or store your card number or Apple Account password.

Notifications, widgets, and Live Activities

Daily reminders are scheduled locally. Widgets and Live Activities read the gameplay state needed to display Coverlet information on your device.

Coverlet 3.0 Thread testing

Paid Thread is under development. Its hosted sandbox service is for testing and does not enable real-money Thread sales. Core puzzle play and existing permanent purchases do not require this service.

When you use a build that connects to Thread testing, the service receives an Apple-signed Game Center identity proof. It verifies that proof and stores a hashed player identifier, an assigned account identifier, and hashed session and proof records. Raw identity proofs and session credentials are not retained in the database.

For test purchases, the service verifies Apple transaction information and stores transaction and product identifiers, purchase dates, the store environment, refund status, the paid balance, and records of Thread spending and delivered benefits. Verified Apple notification records support refunds, reversals, and recovery. These records are associated with the assigned account identifier; hashing does not make them anonymous. Raw signed transaction payloads are not retained in the database.

The service is hosted through Sites on Cloudflare Workers and D1. To protect it from excessive requests, it uses scoped hashes of request IP addresses, request counts, and time windows. These rate-limit records expire after one hour and are removed in bounded batches on subsequent requests. The hosting provider may separately retain technical request logs under its own practices.

Data retention and deletion

Local data remains until you reset it through available app controls or delete Coverlet. The Thread testing service retains account, transaction, notification, spending, and consumed-proof records for recovery and to prevent duplicate delivery. Session credentials expire after 15 minutes; their hashed records are retained to prevent proof reuse. Deleting the app or signing out does not delete those server records. To request access to or deletion of testing data, contact support@coverlet.app. Apple manages its own Game Center and App Store records through your Apple Account and services.

Website privacy

This website contains no Coverlet advertising, behavioral analytics, tracking pixels, account forms, or marketing profiles. Its hosting provider may process basic technical request information—such as an IP address, browser type, and request time—to deliver, secure, and operate the site. Coverlet does not use that information to identify visitors or build profiles.

Children

Core puzzles do not ask for a name, email address, or payment credentials. Optional Game Center and App Store features are subject to Apple’s account and family controls. The Thread testing service processes the identity and transaction records described above when used.

Your choices

  • Use Coverlet without enabling Game Center.
  • Turn daily reminders off in Studio.
  • Manage Game Center and App Store settings through your Apple Account.
  • Delete Coverlet to remove its private local data.

Changes and contact

If Coverlet’s data practices materially change, this policy will be updated before those changes take effect. Questions are welcome at support@coverlet.app.

Effective 7 August 2026 · Last updated 8 September 2026

Coverlet on the App StoreFree daily puzzles
Get the app