Privacy Policy

Information we process

Rota da Inércia stores campaign progress, current rounds, completed trajectories, cached daily challenges and settings on your device. A random installation secret is stored in the device Keychain. There are no accounts, advertising or analytics SDKs. The app does not ask for your name, email address, location or contacts.

When the app connects to the optional online archive, it sends its installation secret over HTTPS, a random record identifier, the level identifier, the sequence of moves and the number of impulses. The server stores a SHA-256 hash of the installation secret, the submitted trajectory and its creation time. It does not store the original secret. Daily challenge requests do not require an installation identity. Railway, our hosting provider, also processes connection information such as IP addresses and request metadata as part of providing the service.

How we use information

Local information lets you resume a round, keep campaign progress, replay completed trajectories, use settings and play offline. The installation secret restricts access to your own online archive and allows deletion of its records. The server validates submitted solutions against the game's movement rules. Daily challenge delivery and comparison with the best valid submitted solution are the online gameplay features. The app retries pending archive uploads and deletion when it can reconnect. We do not use your information for advertising or marketing.

Service providers and sharing

Railway hosts the API and its persistent database and processes network requests as an infrastructure service provider. We do not include advertising networks or analytics services. The public comparison endpoint returns only a level identifier, move sequence and impulse count from a valid submitted solution. It excludes the installation hash, record identifier and creation timestamp. Other players can view these gameplay contributions. They cannot use the public endpoint to read your private list of records. Apple provides the operating system's Keychain and local notification functionality; reminders do not use a separate messaging provider.

Data retention

Local records remain on the device until you reset progress or remove the app, subject to the device's storage and backup settings. The installation secret uses device-only Keychain protection and cannot be used to restore an archive on another device through an account. Online archive records remain until a deletion request for that installation is successfully received. We do not impose a scheduled retention period on these gameplay records. Hosting logs and any infrastructure backups are governed by the provider's configuration and retention practices; we do not promise a particular retention duration or immediate erasure of provider backups.

Deleting your information

The reset option in Settings deletes local campaign progress, rounds, archives and cached challenge data and requests deletion of all online archive records associated with the installation secret. If you are offline, the app keeps a deletion request locally and retries when connected; online records are not deleted until that request succeeds. Server deletion also removes that installation's trajectories from the live public comparison archive. Records do not remain in a separate permanent public collection. Removing the app alone does not send a server deletion request. If the installation secret is lost, the server cannot identify or restore your archive through an account. For other privacy requests, use the contact email below.

Permissions and your choices

Daily challenge reminders are optional local notifications. The app asks for notification permission only when you enable reminders. You can disable reminders in the app and withdraw notification permission in iOS Settings. Denying permission does not prevent playing or using the archive. The app does not request access to location, contacts, photos, camera or microphone. Network access is used for daily challenges, verified archive uploads, comparisons and deletion; the campaign and local replay remain available offline.

Your privacy rights

Depending on your location, you may have rights to access, correct or delete personal information, restrict its use or raise a privacy complaint with your local authority. You can review your saved trajectories in the app and remove installation data through Settings. Contact Wainwright1999@icloud.com for privacy questions or requests. We do not require an account or collect an email address during gameplay. A request may need enough information to identify the installation's data without exposing its secret publicly. We cannot match an archive to your real-world identity when we do not hold that information.

Security

The online API uses HTTPS. Installation secrets are generated with the device's secure random generator and kept in Keychain using protection limited to that device. The server stores a cryptographic hash of the secret and checks it for every private archive operation. Inputs and submitted trajectories are validated, payloads are limited and database queries are parameterized. Application logs do not include bearer secrets or submitted trajectories. Access controls and these precautions reduce risk, but no storage or transmission system can guarantee absolute security. Keep your device protected and do not share the installation secret.

Children’s privacy

The game is designed for players aged 16 and older and is not directed to children under 13. It has no accounts, advertising, purchases or social messaging. We do not knowingly collect children's contact information. If you believe a child has provided information that should be removed, contact Wainwright1999@icloud.com so the concern can be assessed using the information available to identify the affected records.

Changes to this policy

We may update this policy when the game's data practices or hosting arrangements change. The version published at this address will show the updated effective date. Material changes to information handling will be reflected in the app or this policy as appropriate. You can review this page from the Privacy Policy link in Settings. The contact for privacy questions remains the email listed below.