Privacy Policy
Estraldet - Star Sower
This policy explains how this application handles information and how to contact us about privacy.
Information we process
Estraldet — Star Sower does not require an account, name, email address or login. Your saved board, campaign victories, completed studies, daily results and preferences are stored in an application file on your device. The app creates a cryptographically random installation secret in the iOS Keychain on first launch. For daily challenges, the app requests the UTC date and receives a game layout. When a completed daily result is submitted, the service stores a SHA-256 hash of the installation secret, challenge date, win or loss, number of player moves and submission timestamp. The raw secret is sent over HTTPS for authorization but is not stored in the application database or application logs. Railway infrastructure receives network requests, which can include IP addresses, request paths, timestamps and operational metadata. The service uses connection addresses in memory for rate limiting. No location, contacts, photos, payment details or advertising identifiers are requested.
How we use information
Local information keeps your game and settings available after closing the app and supports campaign and study progress. The daily service provides a shared challenge, prevents more than one result from the same installation for the same day, and calculates public counts, win percentages and median move counts. Results are reported by the client; the server does not verify an entire game. The installation secret authorizes your own submissions and deletion. Operational information is processed to deliver, secure and troubleshoot the service. Offline gameplay uses a clearly marked built-in daily layout when the service is unavailable. Only results played from a server-provided daily layout enter the shared statistics; built-in offline-layout results remain local.
Service providers and sharing
The backend is hosted on Railway, which processes and stores data as infrastructure for the service. Public daily statistics contain aggregates, not installation hashes or individual records. The app has no advertising, third-party analytics, social sign-in, outbound email or other external integration SDK. The app uses Apple frameworks for device storage, Keychain, networking and audio. Opening the privacy link sends a normal web request to the hosting service and browser. Device-level backup may be handled by Apple if you enable it. Information may be disclosed when legally required. We do not sell game results or use them for advertising.
Data retention
Local game data remains until you reset local progress in Settings, remove the app or otherwise clear its storage. Daily-result records remain in the server database until deletion using the current installation secret; the service does not implement automatic expiry. The installation secret is stored as a device-only Keychain item and may remain after app removal according to iOS behavior. In-memory rate-limit counters use minute windows and old entries are discarded during capacity cleanup or service restart. Hosting logs and infrastructure storage are controlled by Railway; no fixed retention duration is asserted here. The application does not create separate database backups or configure automatic hosting backups. If infrastructure backups exist or are later enabled, deleted information can remain in them until their normal removal.
Deleting your information
Settings provides Delete my server results. With the current installation secret, this deletes only that installation’s daily-result rows from the active database and updates the aggregates. Local progress remains, and the app does not automatically resubmit deleted historical results. Reset local progress separately clears the saved game, campaign and study progress, local daily records and preferences. It keeps the installation secret so that existing server records can still be deleted. Server deletion requires a network connection and reports failure so that you can retry. SQLite journals and unused pages may retain deleted bytes until checkpointing or storage reuse; this is not a promise of immediate physical erasure. If the installation secret is lost, there is no account or recovery mechanism to prove ownership of past records. Do not send your secret to the public contact address.
Permissions and your choices
The app requests no camera, microphone, location, contact, photo-library, tracking or notification permissions. It uses ordinary network access for the daily challenge and results. Sound, music and motion preferences can be changed in Settings; the system Reduce Motion preference is also respected. You can stop network use through your device settings and continue offline gameplay. Device backup and browser permissions are managed in your iOS or browser settings.
Your privacy rights
For privacy questions or requests concerning access, correction, deletion, restriction or objection where applicable, contact icloud.v51@gmail.com. This address is a public privacy contact, not a game account or an in-app email delivery system. Use the server deletion control for records authorized by your installation. We cannot link anonymous records to your identity without the installation authorization, and do not offer cross-device account recovery. Depending on your jurisdiction, you may have additional privacy rights or the right to complain to the competent supervisory authority.
Security
Production communication uses HTTPS. The installation secret is randomly generated on the device, kept in a device-only Keychain item and never embedded as a shared application credential. The backend associates records through a cryptographic hash and checks the bearer secret for submissions and deletion. There is no public endpoint for individual installation data. Requests are validated and bounded by body-size, rate and timeout limits. Local saves are written atomically. The server database is on a persistent Railway volume. These measures reduce risk but cannot guarantee absolute security of a device, network or hosting service.
Children’s privacy
The game is intended for players aged 14 and older. It has no account registration or age-verification system and does not request a child’s name or contact details. If you believe a younger child has submitted information that should be removed, use the installation’s deletion control or contact icloud.v51@gmail.com for guidance. Without installation authorization we may be unable to identify a particular anonymous record.
Changes to this policy
We may update this policy when the application or its processing changes. The effective date at the top identifies the current version. Updated policies are published on this same public privacy page and linked from the app’s Settings. Material changes will be described in the updated policy and, where required, communicated through the app.