Privacy Policy
Wider - Frost Ricochet
This policy explains how this application handles information and how to contact us about privacy.
Information we process
Wider - Frost Ricochet stores campaign stars, stamps, best throws, fish counts, completion dates, preferences and an unfinished campaign round locally on your iPhone. It also caches the most recently downloaded public Daily Route. Using Daily Route creates a random installation identifier and a random secret; the secret is stored in this device's Keychain and the server stores only a bcrypt hash of it. The server stores the installation identifier, credential hash, creation time, daily arena layouts, and your best daily bounce count, throw count and result time. Launch vectors are sent to validate a score but are not stored in the score table. The app does not ask for your name, email address, contacts or location. Railway infrastructure receives network requests, which can include IP addresses, request times, paths and technical connection information.
How we use information
Local data keeps your offline campaign, collection, records, settings and saved round working. The public route cache lets you practice when disconnected. The installation credential authorizes access to your own Daily Route scores without an account. The backend replays submitted launches to validate the result, keeps your best score and produces an anonymous leaderboard. Technical request information supports operation, security and troubleshooting. Optional local notifications remind you to open the app; notification text is scheduled on your iPhone and no remote push token is used.
Service providers and sharing
The Daily Route backend and PostgreSQL database are hosted by Railway, which processes network traffic and stored backend data as hosting infrastructure. The public leaderboard displays rank, bounce count, throw count and result time, without displaying installation identifiers or secrets. The iOS app includes no advertising, analytics or social sign-in SDK. We do not sell personal information. Apple provides iOS, Keychain, system notifications and any device backup services you choose to enable; local app files may be included in device backups according to your device settings.
Data retention
Local progress and settings remain until you reset progress, remove the app or remove them through device storage controls. The cached route is replaced when a new route is downloaded. The Keychain credential can remain after app removal on the same device; it is marked for this device only and is not a cross-device recovery method. Daily scores remain in the database until you delete them through Settings. Deleting scores does not delete the installation credential record, which remains to authorize later requests. There is no scheduled automatic expiry for scores or installation records. Railway infrastructure logs and any provider backups follow the hosting configuration and provider operations; this product does not specify a guaranteed retention period for those copies.
Deleting your information
Settings provides Reset campaign progress, which removes local campaign results, stamps and the saved campaign round after confirmation. Delete my server scores separately removes all Daily Route score rows authorized by this installation's Keychain secret; it does not reset your local campaign or remove the credential record. Removal from the live database does not guarantee immediate removal from any existing infrastructure backup copies, which may remain until those copies expire or are replaced under provider operations. If you lose the installation secret, the app cannot recover or transfer your score ownership. For a privacy request, contact isakovaviktoriia3@gmail.com; do not send your secret.
Permissions and your choices
Notifications are optional and requested only when you turn on Evening reminder in Settings. You can turn the reminder off in the app or withdraw notification permission in iPhone Settings. The campaign and Daily Route do not require notification permission. The app does not request camera, microphone, photo library, contacts, tracking or location permissions. Internet access is needed only for public Daily Route content, scores and the online privacy page. Sound and haptic feedback can be disabled in the app.
Your privacy rights
Depending on where you live, you may have rights to ask about, access, correct or delete information associated with your installation and to object to or restrict certain processing. Use the in-app score deletion control where possible. Send privacy questions or requests to isakovaviktoriia3@gmail.com. We may need enough non-secret information to locate relevant data and verify that a request concerns your installation. We cannot promise identification or recovery when the installation key is lost. You may also contact the relevant data protection authority where applicable.
Security
Daily Route uses HTTPS. The random installation secret is stored in Keychain and sent only to authorize that installation's requests; the backend verifies its bcrypt hash before returning a private best score or modifying scores. Database credentials remain on the backend. Score validation is performed on the server and requests are bounded and rate limited. Local progress uses atomic file writes. These measures reduce risk but no device, network or hosting service can guarantee absolute security. Do not share your installation credential.
Children’s privacy
This casual puzzle game is intended for players aged ten and older. It has no accounts, chat, advertising, purchases or public profile names. Daily Route nevertheless processes a random installation identifier and network request information as described above. Parents or guardians can keep play offline, disable reminders, and delete scores through the app. If you believe a child has provided additional personal information, contact isakovaviktoriia3@gmail.com so the concern can be reviewed.
Changes to this policy
This policy may change when the app's actual processing or hosting changes. The updated policy will be published at this address with a new effective date. Material changes will be described with the relevant app update or policy notice. The effective date above identifies the current version.