Privacy Policy
Wiled Fox Connections
This policy explains how this application handles information and how to contact us about privacy.
Information we process
Wiled Fox Connections stores your level progress, earned awards, planned routes, lure placements and interrupted game state in a local file on your iPhone. Language, ambience, sound, haptics and motion preferences are stored locally. For automatic backup, the app creates a random installation identifier and secret; the secret is stored in this device's Keychain. The server stores the installation identifier, a cryptographic digest of the secret, creation and update timestamps, and your backed-up progress, awards, routes and lure placements. Settings and simulation playback frames are not uploaded. Requests to the API and public website necessarily pass connection information such as IP address, request path and time to the hosting infrastructure. The app does not request your name, email address, contacts, photos or location and has no user accounts, advertising or analytics SDKs. Local operating-system diagnostic messages indicate backup success or a non-secret error category. They contain no installation secret or game payload, and the app does not upload them to an analytics service.
How we use information
Local data lets you continue unfinished plans, replay gardens and keep awards while offline. Server data provides an automatic backup for this installation and enables synchronization when a connection is available. The installation secret authorizes access to that installation's private game data. Infrastructure request information is processed to deliver, secure and operate the service. The public privacy contact is not an account or an email delivery feature.
Service providers and sharing
The backend and this public policy are hosted on Railway. Railway processes stored backup data and network or operational metadata as the infrastructure provider. Cloudflare proxies the public API and website, terminates their public HTTPS connections, and processes the requests in transit, including connection metadata, authorization headers and backup content, to deliver and protect the service. The app uses Apple's operating-system storage, networking, Keychain and audio services. There are no advertising, analytics, social sign-in, outbound email or other third-party application SDKs. We do not sell game data or send it to advertising networks. Data may be disclosed when required by applicable law. Railway and Cloudflare control their respective infrastructure logging and operational handling; this policy does not assert an unverified log retention period.
Data retention
Local progress remains until you erase it in the app or remove the app's local data. Device backups may include local files and preferences according to your Apple backup settings; the installation secret uses a ThisDeviceOnly Keychain setting and is not intended for migration to another device. Keychain items can survive removal of an app on the same device. Server backups remain until you request deletion; no automatic expiry is implemented. The application does not maintain separate historical backups. Hosting-provider snapshots or operational logs, if retained by the provider, may outlast deletion from the live database; no fixed deletion or backup-retention duration is promised. Retention of local operating-system diagnostic messages is controlled by the device operating system; no fixed period is promised.
Deleting your information
Settings includes Delete my game data. After confirmation, the app deletes this installation's live server record, invalidates its secret, removes that secret from Keychain and clears local game progress, awards and plans. An internet connection is required if an installation secret exists, so failed server deletion keeps the data and secret for retry. Preferences such as language and sound are not part of game progress and remain on the device. Deletion removes data from the live database and checkpoints obsolete database journal pages when possible, but does not promise immediate removal from provider-managed backups or infrastructure logs. Future play can create a new installation backup. Without the secret we cannot authenticate access to, recover or selectively delete an inaccessible installation by a name or email address.
Permissions and your choices
The app requests no protected device permissions. Sound, haptics, ambience and optional motion can be disabled in Settings, and the system Reduce Motion preference is respected. You can stop network access through device connectivity controls and continue playing offline; pending game changes stay local until a later connection. To remove an existing server backup, use the confirmed deletion action while online before removing the app. Device backup controls are provided by your operating system.
Your privacy rights
Depending on your location, you may have rights to access, correct or delete personal data and to raise a concern with a relevant authority. You can review your progress and plans in the app and delete the installation's game data in Settings. Privacy questions may be addressed to lorcan.dering@icloud.com. Do not send your installation secret by email. Because there is no account, name or email linked to a backup, requests concerning a particular installation may require a way to verify control of that installation and may be limited if its secret has been lost.
Security
The deployed API uses HTTPS through Cloudflare, which terminates public TLS and forwards requests to the Railway HTTPS origin. Each installation has a different randomly generated secret held in Keychain, and the server checks that secret before reading, changing or deleting private data. The server stores a SHA-256 digest rather than the raw secret, validates request bodies, limits request size and uses transactional persistent storage. The application server does not log authorization headers, secrets or game payloads. Hosting infrastructure can produce its own operational logs. No storage or transmission system is guaranteed to be completely secure, and losing this installation's secret can make its backup inaccessible.
Children’s privacy
The game is designed for players aged 14 and older and is not directed to children under 13. It does not ask for a birth date or knowingly collect names or contact details from children. If you believe a child has provided information that should be removed, contact lorcan.dering@icloud.com. The in-app deletion control is available without creating an account.
Changes to this policy
This policy may be updated when the game's processing or hosting practices change. The current policy is published at this page, and its effective date identifies the latest revision. Material changes will be reflected in the policy and, where appropriate, in an app update. Review this page to understand the current processing before using backup features.