Privacy Policy

Information we process

The game stores campaign progress, unfinished matches, chosen mascots, trophies, daily-match history and preferences on your device. An automatically generated installation identifier and secret are kept in the device Keychain. You do not create an account or provide a name, email address or password.

When you request an online daily match or the mascot catalogue, the server receives the request and standard connection information. If you submit a daily-match result, the server stores the installation identifier, match date, win/loss/draw outcome, turn count and update time. The server stores a hash of the installation secret, never the plain secret. We do not receive your full offline campaign or unfinished match. Hosting infrastructure can process IP addresses and technical request information. The service also briefly uses an address in memory to limit abusive requests.

How we use information

Local game information lets you resume play, keep unlocked mascots and trophies, and apply your settings. The backend provides a shared daily challenge and current mascot descriptions. Installation credentials restrict access to your own submitted daily results and authorize their deletion. Stored daily results provide your private history; this release does not publish a leaderboard or aggregate statistics. Technical connection data supports hosting, reliability and abuse prevention. There is no advertising or third-party analytics SDK in the game.

Service providers and sharing

The application backend and its PostgreSQL database run on Railway. Railway processes information needed to deliver and operate those services, including infrastructure logs and network requests. We do not send game data to advertising networks, social networks, email services or analytics providers. Other players cannot access your individual results through the API. We may disclose information when legally required; this policy does not promise confidentiality against lawful process.

Data retention

Local campaign and game state remain on your device until you reset game progress or remove the application. Keychain storage has a separate device-managed lifecycle and can persist after removal. Daily-match results and their installation record remain in the active database until you use the server-data deletion control. The history endpoint returns the most recent 30 results, but that display limit does not automatically delete older records. In-memory abuse-limiting entries are removed within about two minutes. Application error logs contain request identifiers and general error codes, not installation secrets or result bodies. Infrastructure-log and backup retention is controlled by the hosting provider and its configuration; no fixed duration is promised here.

Deleting your information

Use the server-data deletion control in Settings to delete the installation record and all its submitted daily-match results from the active server database. A successful deletion requires the installation secret and an online connection; if it fails, the app reports the failure so you can retry. Resetting offline campaign progress is a separate action. Removing the app alone does not send a server deletion request. Data already present in infrastructure logs or backups is subject to the provider’s retention and backup lifecycle, rather than immediate per-record removal. If the installation secret is lost, the service cannot recover access or identify and authorize deletion of that installation through an account.

Permissions and your choices

The core game does not require access to contacts, photos, location, microphone or camera. If you enable a daily-match reminder, the app asks for permission to schedule local notifications. Reminders are scheduled on the device rather than sent by the backend. You can turn reminders off in the game or withdraw notification permission in iOS Settings. Game audio and motion preferences are optional and remain on your device. Changing a permission does not delete previously stored daily results.

Your privacy rights

For privacy questions or requests, contact CaiBriar1@icloud.com. Depending on where you live, you may have rights to access, correct, delete or restrict processing of your information, and to raise a complaint with a competent privacy authority. The in-app controls provide direct access to deletion without an account. Because results are tied only to random installation credentials, we may be unable to locate or authenticate a record from a person’s name or email address. Do not email your installation secret; the game uses it only to authorize its own API requests.

Security

Online API requests use HTTPS. Each installation receives its own cryptographically random secret, and the server verifies a hash before reading, changing or deleting private results. PostgreSQL constraints and parameterized queries protect data integrity, and request-size and rate limits reduce abuse. Credentials and database passwords are not included in the application source or public API responses except for the secret issued once to its requesting installation. No storage or transmission method can guarantee absolute security. Protect access to your device because the device holds the credential for your results.

Children’s privacy

The game can be played by younger players and includes an offline campaign. It does not ask for age, contact details or an account, and it does not include advertising, purchases, social profiles or public player messaging. Online daily play uses a random installation identifier instead of a personal profile. If a parent or guardian has a privacy concern, they may use the device’s deletion control or contact CaiBriar1@icloud.com. Requests still need sufficient information to verify the relevant installation without collecting unnecessary personal information.

Changes to this policy

We may update this policy when game features, data practices or hosting arrangements change. The current policy is available at the public Privacy Policy link in Settings and on this website. The effective date identifies the published version. Changes that require a choice or notice under applicable law will be handled before the relevant new processing starts. You can keep playing the offline campaign without creating an account.