No Such Room — Forensic Architecture

Privacy

Last updated: 17 August 2026

This describes what the app actually does, not what a template says it might do. If the app changes, this page changes with it.


The short version

Anonymous device registration

The first time the app comes to the foreground it asks our server at nosuchroom.website for a player token. The server generates a random identifier and returns it. That identifier is stored on your device and sent with later requests so your progress and leaderboard entries can be attributed to the same player.

This identifier is not derived from your name, your Apple ID, your email address, your phone number, your advertising identifier, or any hardware serial. It is a random string. It is not tied to a real-world identity and we have no way to connect it to one.

If registration fails, the app plays offline. Nothing is lost except leaderboard participation and cross-device sync.

Camera and photo library

The app can place a photograph of a paper sketch beneath the blueprint grid, so you can trace a drawing you made by hand. It can also import an existing image from your library for the same purpose.

Underlay images are processed entirely on your device and are never transmitted to us or to anyone else. We do not keep a copy, and there is no code path in the app that sends them anywhere.

Exported plans are written to your own photo library at your request. What you then do with that image is entirely yours.

Notifications

Permission is requested after you finish your first case, never on launch. If you allow it, the app may send:

Both respect a quiet-hours window you set in Settings. You can turn either off inside the app, or turn all of them off in iOS Settings → Notifications → No Such Room.

The unfinished-case reminder is scheduled entirely on your device. The daily note may also be sent from our server so it arrives on the day the case is generated. That requires a delivery address for your copy of the app: if you allow notifications, Apple issues a token for this install, Firebase Cloud Messaging (Google) exchanges it for one of its own, and we store that against your anonymous player token so a message can be addressed to you. It is a delivery address for a device, not an identity — it carries no name, no email, no advertising identifier, and it changes if you reinstall the app.

Firebase Cloud Messaging is used for delivery only. We do not enable Firebase Analytics or any other Firebase product, and no gameplay data is sent to Google — only the message itself, which says a case is ready. Turning off Daily survey in Settings unsubscribes the app immediately; deleting the app invalidates the token, and we delete the record the first time a send comes back rejected.

What is sent to nosuchroom.website

All of it travels over HTTPS. The app permits no insecure connections.

We do not use third-party analytics, advertising, attribution or crash-reporting services. There are no trackers in the app. We do not sell data, because we do not have anything worth selling. The one third party in the app at all is Firebase Cloud Messaging, and only to carry notifications to your device — see above.

Retention and deletion

Push delivery tokens are kept only while they work: they are deleted the first time a send is rejected, which is what happens once the app is removed from a device. Submission and progress records are kept against your token for as long as the token exists, so that sync and leaderboards work. You can ask us to delete everything associated with your token by emailing the address below — include the token, which you can find and copy in Settings → Account. Deleting the app from your device also destroys the stored token, which makes the server-side record permanently unattributable; if you want it actually removed, email us before deleting the app.

Children

The app is a drawing and deduction game with no chat, no user-to-user contact, no in-app purchases and no advertising. We do not knowingly collect personal information from anyone, children included — the only identifier that exists is one we generated at random, and we never ask for anything else.

App Store privacy labels

This maps to Apple's nutrition labels as: Identifiers — a developer-generated player ID, linked to the user, not used for tracking. Usage Data — gameplay submissions and progress, linked to that ID, not used for tracking. Camera and photo library access are used for app functionality only and are not collected, so they are not declared as data collection. The push delivery token is declared under Identifiers — Device ID, linked to the user, used for app functionality (notifications) and not for tracking.

Changes

If this policy changes in a way that affects what leaves your device, the app will tell you on next launch rather than quietly updating this page. The date at the top always reflects the current version.

Contact

Questions, or a deletion request: [email protected]

This is a plain, honest description of the app's behaviour written by its authors, who are not lawyers. Have it reviewed before you publish it.