Privacy Policy
Blaze: Vertical Descent
This policy explains how this application handles information and how to contact us about privacy.
Information we process
Blaze Vertical Descent stores your current game, settings and completed floors locally on your device. If an unreadable save needs recovery, the app can preserve a separate local copy before starting fresh. The app creates a random installation secret and stores it in the iOS Keychain. When you use cloud progress, the app sends that secret over HTTPS and sends or requests completed floors. The server stores a SHA-256 hash of the secret, the number of completed floors, and creation and update timestamps. The server does not store the secret itself. Cloudflare, our public HTTPS proxy, receives connection information such as IP addresses and processes the requests and their content, including the installation secret in transit, to forward them to our Railway-hosted backend. Railway hosts the backend and database and also receives connection and service request information. We do not request your name, email address, location, contacts or photos. We do not use advertising or analytics SDKs.
How we use information
Local data lets you resume a rescue and retain game settings. Cloud progress retains your completed floors for the same installation secret. The secret and its hash restrict access to that installation's progress. Infrastructure processes connection information to deliver and protect the service. Optional local notifications provide reminders only after you explicitly enable them.
Service providers and sharing
Cloudflare provides the public HTTPS proxy and processes requests before forwarding them to Railway, which hosts the application backend and PostgreSQL database. These infrastructure providers process the request content and connection metadata needed to operate the service. We do not sell personal data, provide advertising profiles, or share game progress with advertisers. Infrastructure providers may process service data to operate and secure hosting. Disclosure may be required by applicable law.
Data retention
Local game data remains until you remove it from your device. Keychain storage is managed by iOS and may survive uninstalling the app. Server progress remains until you use the app's cloud deletion control. We do not claim a fixed retention period for infrastructure logs or provider backups; any such records follow the provider's applicable policies and operational processes.
Deleting your information
Use the app's cloud deletion control to remove the progress row identified by your installation secret, including its stored hash and timestamps. The deletion request does not erase local game saves; remove the app and its local data from your device for those. If you upload progress again, a new server row is created. Deleting a server row does not promise immediate removal from infrastructure logs or backups. Without the installation secret, we cannot identify or retrieve an installation's progress from your name or email address.
Permissions and your choices
Notifications are optional local reminders and require explicit opt-in through the app and iOS. You can disable notifications in iOS Settings. Core gameplay works without notification permission or an internet connection. The app does not ask for tracking, location, camera, microphone, photo-library or contact access.
Your privacy rights
Depending on your location, you may have rights to access, correct, delete or restrict processing of your data and to complain to a data-protection authority. View your progress in the app, and use its cloud deletion control or remove local app data from your device. For privacy questions or rights requests, contact elric.huxley@icloud.com. Do not send your installation secret by email. Because we do not collect an account identity, we may be unable to associate an email request with a particular installation.
Security
The app uses HTTPS for deployed cloud connections. Public HTTPS terminates at Cloudflare, which proxies requests to the Railway HTTPS origin. The installation secret passes through that proxy to authorize backend requests. The installation secret is kept in the iOS Keychain; the database keeps only its SHA-256 hash. Server requests validate progress and are rate limited. Anyone who obtains the secret could access or delete the corresponding cloud progress, so keep it private. No storage or transmission method guarantees absolute security.
Children’s privacy
Blaze Vertical Descent is designed for players aged 16 and above. We do not request an age or knowingly collect a child’s name, contact details or advertising profile. The same limited installation-based progress processing applies to all players. A parent or guardian with access to the device can use the app’s deletion controls or contact elric.huxley@icloud.com with privacy concerns.
Changes to this policy
We may update this policy when the app's data practices change. The policy shown in the app and at the service's public privacy page will state its effective date. Material changes will be described before any new optional data use is enabled.