Privacy Policy
Blade Strike Arena
This policy explains how this application handles information and how to contact us about privacy.
Information we process
Blade Strike Arena stores game progress, throw parameters and contact results, unfinished rounds, local match player names, achievement and cosmetic unlocks, record categories, result history, language and play preferences in an application-support file on your device. Local match names are never sent to our server. When online conditions are enabled, the app requests daily challenges and championship sets. When you finish a server-issued daily challenge, it sends the challenge identifier, score and whether the goal was met. The server automatically issues a random installation secret; the app keeps it in the device-only Keychain and the server stores its cryptographic hash with creation and result receipt times. This is not an account, email address or cross-device sign-in. Railway, our hosting provider, necessarily processes network requests and connection metadata such as IP addresses, request timing and HTTP paths. Our application does not log request bodies, installation secrets or IP addresses. There are no advertising, analytics or social SDKs, tracking cookies or location collection.
How we use information
Local data makes the game work offline, restores interrupted rounds, keeps records, and provides collection and accessibility settings. Public server configurations provide daily conditions and championship sets. The installation secret authorizes storage and deletion of that installation's private daily results. Connection metadata supports delivery, rate limiting, availability and infrastructure security. We do not use this information for advertising, profiling, public leaderboards, email delivery or sale.
Service providers and sharing
The backend and public website are hosted on Railway, which processes service traffic and stores the server database on a persistent volume as infrastructure provider. Hosting infrastructure may produce operational logs containing request metadata. No other external recipient or third-party SDK is integrated. Local progress and names are not deliberately uploaded by this app; device-level backups may include local files according to your Apple device backup settings. Data may also be disclosed where required by applicable law. We do not sell or rent game data.
Data retention
Local game data remains until you reset local progress or remove the app, subject to device backup behavior. The Keychain secret is device-only, is not synchronized to other devices, and may survive app removal. Server installation hashes and daily results remain until you use Delete server data. The server does not operate an application backup job and uses a persistent Railway volume. Infrastructure log or backup retention is controlled by the hosting provider; we do not claim a fixed retention period or immediate removal from provider-managed backups. Data remaining in such infrastructure copies is subject to the provider's handling and expiry, rather than being restored as active game history by this application.
Deleting your information
Settings contains Delete server data. With a network connection and the installation secret, this deletes that installation and all associated daily results from the active database and invalidates its secret. The app removes the Keychain secret only after confirmation, so failed requests can be retried. SQLite secure deletion and a write-ahead-log checkpoint are used, but removal from infrastructure backups is not promised to be immediate. Reset local progress separately removes the active local game file contents, including saved names, rounds, records and settings; it does not delete server records. Turn off online conditions to prevent future submissions. A later online daily result can create a new empty installation. Unsent offline results are not automatically replayed. Losing the secret prevents recovery or reliable identification of its server records; we provide no account-based restore.
Permissions and your choices
The app requests no location, contacts, camera, microphone, photo library, notification or tracking permissions. Network access loads conditions and sends daily results only when online conditions are enabled. You can turn this off in Settings and continue core modes offline. Sound, music, motion and assistance can be changed in the app, and system Reduce Motion is respected. You can manage device backups and remove the app through iOS settings. Opening Privacy Policy in your browser makes an ordinary HTTPS request to the public website without requiring login or cookies.
Your privacy rights
Depending on your location, you may have rights to access, correct, delete or restrict processing of information relating to you, and to complain to your local data protection authority. Contact Holt.Carlisle@icloud.com for privacy questions or rights requests. This address is a privacy contact only; the app has no email sending or support form. Use the in-app deletion control for installation-scoped records because it proves possession of the secret. We do not ask you to send the secret by email and cannot identify anonymous installation records from a name or email alone.
Security
Production requests use HTTPS. Each installation receives its own cryptographically random secret, stored using device-only Keychain protection; only its SHA-256 hash is retained on the server. Authorization scopes mutations and deletion to that installation, and there is no public endpoint listing private results. Input validation, payload limits, request timeouts and rate limits help protect the service. Local saves are atomic. No shared application credential is embedded in the app. These measures reduce risk but cannot guarantee absolute security or data recovery.
Children’s privacy
Blade Strike Arena is designed for players aged 14 and older and is not directed to children under 13. It does not request dates of birth, contact details or social profiles. If you believe a child has provided personal information through this service, contact Holt.Carlisle@icloud.com. The in-app server deletion and local reset controls are available without an account.
Changes to this policy
We may update this policy when the game's processing or hosting changes. The effective date on this public page identifies the current version. Material processing changes will be reflected in the policy and, where appropriate, in the application before they take effect. Review this page for current practices or contact Holt.Carlisle@icloud.com with questions.