Privacy Policy

“Post Mortem” app (Android, com.btroussel.postmortem).

Last updated: 20 August 2026 · version 1.0

In short

The app asks for no account, keeps no data about you, shows no ads and contains no trackers. What you play is written on your phone and stays there.

Its only connection is a check for an update. That one request carries what any internet request carries, your IP address included: section 4 says exactly what, and to whom.

This policy covers the app in its entirety.

1. Who is responsible, and who to contact

The app is published by Benoît Roussel, the data controller under the General Data Protection Regulation (GDPR).

For any question about your data, about this policy, or to exercise one of the rights in section 11: contact@laboitebleue.games. That is the single point of contact for anything privacy-related, and every request gets an answer.

2. What the app stores on your phone

So that your game survives from one launch to the next, the app writes to your device:

• which riddles you have solved, and which ones you have read the solution to;
• when you last opened each riddle, which is what fills the “Resume” section;
• your daily streak, your best streak, and the list of days you solved the riddle of the day;
• how many riddles you have opened today;
• the language you picked.

This is written to the private storage the operating system reserves for the app (keys br.progress.v2 and br.locale). It contains no name, no email address, no advertising identifier, no location and nothing that identifies you: it is riddle identifiers, counters and dates. None of it is sent anywhere.

3. How long any of it is kept

On your phone, no expiry is imposed on you: your progress stays as long as you keep it. One thing does age out on its own, the list of days you solved the riddle of the day, capped at the last 90 days because the streak calendar shows no more than that.

You can delete all of it in two ways, both immediate and both final: “Erase my progress” in the app’s Settings, or uninstalling, which takes everything described in section 2 with it.

On our side there is no retention period to declare: we hold no data about you, on a server or anywhere else. The technical data Expo receives during the update check (section 4) is kept according to Expo’s own policy.

4. The only connection the app makes

On each launch, the app asks Expo’s servers (u.expo.dev) whether a newer version of its content exists, and downloads it if so. That is what lets a typo be fixed or new riddles be published without waiting for a Play Store release.

The request carries what any internet request carries, namely your IP address, plus the app’s version, its platform, your device’s operating system, and a random token whose only job is to tell whether the update has already been downloaded. That token holds nothing about you and is matched against no other information. The request carries none of your progress.

The service is operated by 650 Industries, Inc. (Expo), in the United States, acting as a technical processor; see their privacy policy at https://expo.dev/privacy. The lawful basis is legitimate interest (GDPR article 6(1)(f)): delivering fixes and content to the people who installed the app.

That transfer outside the European Union is covered: Expo states that it is self-certified with the U.S. Department of Commerce under the EU-U.S. Data Privacy Framework, and that it additionally relies on the European Commission’s standard contractual clauses.

When no update is available, the request has no visible effect. The app runs entirely offline: all 84 riddles and their illustrations ship inside the app, and nothing is downloaded in order to play.

5. Android’s automatic backup

The app does not opt out of Android’s automatic backup. If you have that feature enabled on your phone, the data described in section 2 may be included in your device’s backup to your Google account, which is what lets your progress come back after a reinstall.

That backup belongs to Google and to you, not to the app: we have no access to it and cannot read it. You can turn it off in your phone’s Android settings, under “Backup”.

6. Google Play

Downloading, installing and updating the app go through Google Play, which applies its own privacy terms and acts on its own behalf.

On our side, the Google Play Console shows us aggregate, anonymous figures only: install counts, ratings, public reviews, and technical crash reports (device model, Android version, stack trace). None of it identifies you, and we make no attempt to.

7. What the app does not do

It is shorter said the other way round. The app contains:

• no account, no sign-up, no email address requested;
• no advertising, no ad tracker, no advertising identifier;
• no analytics (no Google Analytics, no Firebase, no social-network SDK, or anything of the kind);
• no in-app purchases at this time;
• no sale, rental or commercial transfer of data to third parties;
• no profiling and no automated decision-making.

Beyond Expo and Google, described in sections 4 and 6, no data is shared with anyone.

8. How this data is protected

The strongest protection here is architectural: there is no server holding your data, so there is no database to breach, no access to revoke and no leak possible on our side. That falls straight out of the decision to keep everything on the device.

On your phone, the data in section 2 is written to the private storage the operating system reserves for the app: no other installed app can read it, and it sits behind the device encryption Android provides.

The update check in section 4 goes over an encrypted connection (HTTPS). The app makes no other network exchange.

9. Permissions

• Internet: only for the update check described in section 4.
• Vibration: inherited from a library the app is built with. The app no longer triggers any vibration.

Android may also list two permissions inherited from the framework the app is built on: storage access on Android versions before 13, and drawing over other apps. The app uses neither and calls neither.

10. Children

The app is not directed at children. The riddles deal in deaths, crimes and grim situations: it is written for teenagers and adults, in line with the rating shown on its Google Play listing. It collects data on nobody, and therefore on no child.

11. Your rights

The GDPR gives you rights of access, rectification, erasure, restriction, objection and portability over your personal data.

In this app those rights have almost nothing to bite on, deliberately: we hold no personal data about you, and we have no way to know who you are or to find your device. The data described in section 2 is under your direct control, and section 3 says how to delete it in two gestures.

If you nonetheless believe your rights are not being respected, write to the address in section 1, and you may lodge a complaint with your national data protection authority. In France that is the CNIL, www.cnil.fr.

12. Changes to this policy

This page will be updated if the app starts handling data it does not handle today, for instance when it offers purchases or online play assistance. The date at the top marks the current version, and significant changes will be announced in the app before they take effect.

13. Contact

contact@laboitebleue.games

“Black Stories” is a registered trademark of the publisher moses. Verlag, with no connection to this app.