Mochi QuestPop
Last updated 11 September 2026
The short version. You can play without registering — the app makes you a guest account by itself and never asks for your email. Quests you publish are stored on our server so the people you shared them with can play them. Puzzle answers and gift-card codes are kept in a place no app can read, including yours. The app measures which kinds of puzzle get played and whether quests get finished; it never sends anything you typed, any answer, any share code, or your location.
Mochi QuestPop is made by PTK Studio. This policy covers the Mochi QuestPop iOS app and this page. If anything here is unclear, write to hello@ptk-studio.com and we’ll answer plainly.
The first time you open the app it signs you in as an anonymous guest. That account is a random identifier and nothing else — no email, no name, no phone number — and it exists so the quest you are halfway through is still there tomorrow. You are never asked to register in order to play.
Making a quest is different, because a quest is something other people will open, so it needs an account that survives losing the phone. That is Sign in with Google, and it is the only sign-in we offer. When you use it, your guest account is upgraded in place so the progress you already made carries over. We receive your Google account identifier and the display name on it. We store the display name, because it appears on quests you publish. We do not store your email address — it stays with the sign-in provider and is never written into our database, attached to analytics, or used to contact you.
QuestPop is a thing you share with other people, so most of it has to live somewhere both of you can reach:
Your progress is readable by you and by nobody else. The person who made the quest cannot see how many attempts you took, and neither can anyone else playing it.
Some data is deliberately put out of reach of every copy of the app, including yours:
QuestPop does not sell, issue or buy gift cards. A creator can only attach a code they already own, and only to a private quest with a named recipient.
QuestPop uses Firebase Analytics to count how the app is used, so we can tell which parts are worth improving. Every event is one of a fixed list, and every value is a fixed option, a count, or an identifier that means nothing outside our database — for example that a combination lock was attempted for the third time, that a quest with seven stages was started, or that a wide-screen layout was used. Durations are reported as a band rather than a number, so a play session cannot be used to pick one person out.
The app also sends crash reports through Firebase Crashlytics: a stack trace, the iOS version and the device model, plus a note of which operation was in flight — “submitting an answer”, not what the answer was.
Firebase App Check uses Apple’s App Attest to confirm that requests are coming from a real copy of our app rather than a script. It tells us nothing about you.
You can turn usage reporting off in Settings → Privacy → Share anonymous usage data.
QuestPop asks for one thing, and only when it becomes relevant:
Notifications are scheduled on your phone rather than sent from our server, and they are deliberately vague — “Your next QuestPop stage is ready” — because a lock screen is visible to whoever is standing next to it and a countdown quest is usually meant to be a surprise.
Anyone can publish a quest, which means you may open text and pictures we did not write. A basic word check runs before a quest is published, and we are clear in the app that this is a first pass rather than moderation. Every quest can be reported from its own page, and you can block a creator, which hides everything of theirs from you.
A report records which quest, the reason you picked, anything you added, and who sent it. The creator cannot read reports and cannot find out who reported them.
Google, as the provider of Firebase, stores the data described above on our behalf and processes the anonymous usage counts and crash reports. Google also provides Sign in with Google. There is no advertising network, no analytics broker, and no other server of ours. No data of yours is sold.
Mochi QuestPop is not directed at children under 13, and we do not knowingly collect personal information from them. There is no chat and no user-to-user messaging; the only text another person can put in front of you is the quest they wrote, and any quest can be reported or its creator blocked.
If we change what the app collects, we’ll update this page and change the date at the top before the change ships. Material changes will also be noted in the release notes.