Privacy Policy

1. Data we collect and store

• Guest account identifiers and hashes of authentication credentials. The authentication token is stored in the device Keychain.
• Game progress, battle results, skill and equipment choices, virtual currency and item balances, action history, and recovery backups.
• Product IDs, transaction IDs, purchase, renewal and refund status, and the associated account for in-app purchase verification. We do not receive payment card details.
• If you choose Sign in with Apple, the user identifier provided by Apple and an encrypted token needed to maintain authentication.
• If you enable “Share usage data,” we store milestones from launch through first battle, boss battle, shop view, purchase and entitlement delivery, product ID, elapsed time, app version, language, and country or region with your account ID. When this setting is off, these analytics events are not sent. Turning it off stops future sends.
• Your email address and message if you contact support.
• Network information such as IP address processed by our delivery provider when you access the site or API.

2. How we use data

We use data to authenticate accounts, settle game state and rewards, restore data, investigate abuse and faults, respond to support requests, and operate the service securely. If you choose to share usage data, we use it to improve onboarding, retention and purchasing flows and to investigate faults. We do not use it for ad targeting.

3. Storage and service providers

We use Cloudflare to host the game server and this site. If you choose Sign in with Apple, we use Apple for authentication. We use email to respond to support requests. We do not sell the data we collect for advertising. Disclosure may be required by law.

4. Retention and deletion

We keep game data, usage data you chose to share, and recovery backups while your account is active. Confirming account deletion in the app removes authentication details, game and usage data, purchase entitlement records, Apple account links, and recovery backups. If processing fails, the server retries every minute and the app shows that deletion is pending. To prevent a deleted account from being recreated or reactivated by a purchase notification, we retain a minimal deletion record containing the old account ID and credential hash while the service operates. Apple's billing records and network logs retained by providers such as Cloudflare are outside the app's account deletion process. See the account deletion guide.

5. This website

We do not run an input form, advertising tag, or independent analytics script on this website. Cloudflare may process network information for delivery and security when you view pages.

6. Contact and changes

For questions about your data, contact info@astroft.com. We update this page and its revision date when our operations or features change.