Privacy

What Settled keeps.

As little as it can, for as short a time as it can. There is no account, no advertising and no tracking. This page says exactly what goes where.

13 October 2026 · Nine Fathoms

The short version

Your games, your rulebooks and your record of nights stay with you, on your device and in your own iCloud. We cannot see them.
A question is answered and forgotten. It goes to our server with the rulebook text it is about, comes back as a ruling, and is not kept.
A night you invite people to is kept for 90 days after the night, so the link works. Its faces, photographs, address and record are sealed with a key that exists only in the link. We hold them and cannot open them.
Nothing is sold, and nothing is used to follow you.

What goes where

Your shelf and your record

What: The games you add, the text of your rulebooks, your nights, faces, photographs, rulings and scores.
Where: On your device, and in your own iCloud when iCloud is on.
Who can read it: You. Apple stores it for you under your Apple ID. We have no way in.
How long: Until you remove it.

A question

What: The question, and the text of the rulebook it is asked about.
Where: Our server, then Anthropic, whose model reads the text and answers.
Who can read it: Nobody at Settled reads it. It is processed to make the ruling and its sentence.
How long: We do not keep it. Anthropic holds it briefly under its own terms, which do not let it train its models on your text.

A night you invite people to

What: The game, the day and time, the name of the place, a note, the host’s name, and each guest’s name, answer and line.
Where: Apple’s CloudKit, reached through our server.
Who can read it: Anyone who holds the link. Treat the link like a group chat.
How long: 90 days after the night, then it is deleted from the server. Sooner if the host calls the night off or takes it off their record.

The sealed parts of a night

What: Faces, photographs of the table, the address, what a guest reads before the night, and the night’s record: who won, the score, the arguments and their sides.
Where: The same place, sealed before it leaves the device or the browser that made it.
Who can read it: Only people holding the link. The key is in the part of the link a browser never sends to a server. We hold bytes we cannot open.
How long: As long as the night.

A table shared with phones in the room

What: The rulebook text for the game on the table, sealed, so a phone with no app can ask.
Where: Our file store, hosted by Vercel.
Who can read it: Only phones that scanned the code on the table.
How long: Until the host stops sharing, or 14 hours, whichever comes first.

Your voice

What: What you say while you hold the die.
Where: Apple’s speech recognition turns it into text: on your device when it can, with Apple when it cannot. On the page for phones without the app, your browser does this, and some browsers send the sound to their maker.
Who can read it: Settled receives the words, never the sound.
How long: We keep no audio.

A purchase

What: Apple’s signed record of what was bought: which product, an id for the purchase, and when it renews.
Where: Apple handles the payment. Our server reads the signed record to know what your table holds.
Who can read it: We never see your name or your card. We keep a scrambled id for the purchase.
How long: While the purchase stands.

Keeping it fair

What: A random id your device makes once, a count of the rulings asked this month, and the internet address a request comes from.
Where: Our server and its host’s request logs.
Who can read it: Us. The id is not your name and not your device’s own id. The address is used in scrambled form to limit abuse.
How long: Counts by the month. The address for a day in our use, and for as long as our host keeps its logs.

What the app asks your device for

The microphone and speech recognition, to hear a question while you hold the die. You can type instead.
The camera and your photos, only when you photograph a box, a face or the table. The pictures go where the table above says.
The local network, to find the table in the room. What passes between the devices stays in the room.
Notifications, for a reminder you asked for. They are made on your device.

Who else is involved

Three companies handle what is listed above, and only that: Apple (your iCloud, CloudKit, speech recognition and the App Store), Vercel (the server and its logs) and Anthropic (reading a rulebook to answer a question).

This website

No cookies, no analytics, and no script from anyone else. The invitation page remembers your name and your seat in your own browser so that you can change your answer. Clearing the browser’s data removes them.

Children

Settled is not directed at children under 13 and does not knowingly collect anything from them. A child at a family table needs no account. The most a night holds about them is a first name, if the host writes one.

Taking things back

A night: the host calls it off or takes it off the record, and the page is gone at once.
Your name on someone’s night: open the invitation and choose “Take my name off the night”.
Everything on your device: delete the app, and remove its data from iCloud in Settings.
Anything else: write to support@ninefathoms.com. We answer within 30 days, and we will delete what we hold that can be tied to you.

Depending on where you live, the law may give you the right to see, correct, delete or move what is held about you, or to object to its use. Write to the same address and we will honour it.

When this changes

The date at the top changes, and what changed is said here. Nothing has changed yet.

Who we are

Settled is made by Nine Fathoms. Write to support@ninefathoms.com.