Privacy Policy – CROWNLINE

1. Introduction

CROWNLINE is a checkers game for iOS. This policy explains what information the CROWNLINE app and its online service (together, the “Service”) process, why they do it, who else is involved, and what choices you have. “We” and “us” mean the developer of CROWNLINE; how to reach us is in section 17.

In short:

You can play against the computer, and against another person on the same device, without an account. The moves of those games stay on your device.
The online features (Quick Match, private rooms, ranked games, the leaderboard, your profile and game history) require Sign in with Apple. We do not ask Apple for your name or your email address.
We use no analytics or crash-reporting software of our own, our server sets no cookies, and the app does not ask for permission to track you across other companies’ apps and websites. The only third-party software in the app is Google’s advertising and consent software (section 6).
The app shows ads from Google AdMob between games, using Google’s consent tools where the law requires them. A one-time purchase, Remove Ads, switches them off.
You can delete your account inside the app (section 11).
We do not sell personal information.

2. Information We Collect

2.1 Information you choose to provide

Display name. The nickname you choose for online play. Until you choose one, we assign a generated name. Other players can see it (section 5), so please do not use your real name or other personal information.
Reports. If you report a player, we store the reason you pick and an optional short note you type (up to 140 characters). Please do not put contact details in the note.

2.2 Information from Sign in with Apple

When you sign in, Apple gives our server a signed token that contains an identifier for you that is specific to CROWNLINE. We store that identifier. We do not request your name or your email address, and our server does not store them. Details are in section 4.

2.3 Profile and gameplay information (online features only)

A random player ID and a separate random public ID, your display name, and when your profile was created and last played.
Your rating, rank, wins, losses, draws, streaks and play time.
For each finished online game: the moves, the clock times, the result, the time control, the display names of both players as they were during the game, and the rating changes. Friendly games played in private rooms while you are signed in are recorded in the same way.

2.4 Technical information

Sign-in sessions. For each device that is signed in we keep a session record: one-way hashes of its tokens (we cannot read the tokens themselves), and when it was created, last used, expired or ended.
Short-lived game data. The code and seat tokens of an active room, your place in the Quick Match queue, and an abbreviated one-way identifier used only to count how many players are online.
Connection data. Like any internet service, our servers receive your IP address and standard request information whenever the app contacts them. Our own code uses the IP address only to limit how fast one network can send requests, and does not write it to our database. Our hosting provider may keep standard technical logs; see section 10.
Online counter. While the app is open, it contacts our server about once a minute so that it can show how many players are online. If you are not signed in, this request carries no identifier other than your IP address.
Error logs. Our server records entries about failures and security-relevant events. Our code is written so that these entries do not contain names, tokens, room codes or Apple identifiers; they may contain opaque internal identifiers such as a game or session ID.

2.5 Information that stays on your device

Your settings, such as language, sound, haptics and appearance.
Your sign-in session and, during an online game, that game’s seat token, in the iOS Keychain. These items are not synced through iCloud Keychain.
A list of players you blocked, if you use blocking, and counters used to space out ads (how many games you finished and when an ad was last shown). Neither is sent to us.
A timestamp of your last verified purchase, so that a purchase keeps working for a while without a connection.
Technical events of the game screen, written to the iOS system log on your device. We do not receive them; they leave your device only if you share a diagnostic report yourself.

2.6 Information we do not collect

We do not collect your real name, email address, phone number, postal address, precise or approximate location, contacts, photos, or camera or microphone data. The app does not read the advertising identifier (IDFA). Our server receives no advertising data. Third-party software in the app (Google’s advertising and consent software, section 6) processes some information on its own terms.

3. How We Use Information

To run the game: to sign you in and keep you signed in, match you with opponents, run online games and clocks, calculate ratings, and show leaderboards, profiles and game history.
To keep the Service safe and fair: to limit request rates, check display names against a list of unacceptable and reserved names, review reports, and detect suspicious ranked results.
To maintain the Service: to find and fix technical problems.
To show ads between games in the free version, through Google AdMob (section 6).
To meet legal obligations and to establish, exercise or defend legal claims.

We do not sell personal information and we do not build advertising profiles.

Where the GDPR or the UK GDPR applies, we rely on these legal bases: performing the contract to provide the game you asked for (account, online play, purchases); our legitimate interests in security, fraud and abuse prevention, and keeping the Service working; and your consent for ads where Google’s consent form asks for it.

Online features use Sign in with Apple. Apple authenticates you; we never see your Apple Account password.

The app asks Apple for no personal information (no name, no email address). Even though Apple’s token can contain other fields, our server uses only the identifier that is specific to CROWNLINE and ignores everything else.
Our server checks Apple’s signature on the token before it opens a session. It stores the identifier, the time of first and last sign-in, and links it to your player profile.
We then issue our own session tokens: a short-lived access token and a longer-lived refresh token (valid for up to 60 days). Our server stores only one-way hashes of them. On your device they are kept in the iOS Keychain.
Signing out ends the session on that device. Signing in again with the same Apple Account returns you to your profile.
If you used an early test version of the app that created an anonymous profile, that profile is linked to your Apple sign-in the first time you sign in, and the old key is removed from your device.

Apple handles information in the sign-in step under Apple’s Privacy Policy.

5. Online Multiplayer and Leaderboards

What other players can see

Signed-in players can see your display name, rating, division and ranked record (games, wins, losses, draws and win rate) in the leaderboard and on your public profile page. The page is addressed by a random public ID, not by your player ID.
Your opponent sees your display name during the game, after it, and in their game history.
There is no chat and no messaging between players.

Private rooms and matchmaking

A private room has a code that you share with a friend yourself. The code appears in the address of the requests the app sends, so it can be visible in server and network logs. Quick Match keeps a short-lived queue entry until you are matched or leave.

Reporting and blocking

Report. You can report a player’s name as offensive or inappropriate, as impersonation, or for another reason. We store the report (who reported, who was reported and the name they had at that time, the reason, the optional note, and the time) so that we can review it. We may replace an unacceptable name with a neutral one. The reported player is not told who reported them.
Block. Blocking hides a player’s name in your leaderboard view. The block list is kept only on your device and is not sent to us.

Display names are checked against a list of unacceptable names, but no filter is complete.

6. Advertising — Google AdMob

The app shows full-screen ads served by Google AdMob. Ads appear only when you leave a finished game — never during a game, a move, an online connection, a search for an opponent, a purchase or signing in. They are not shown if you have bought Remove Ads.

What Google’s software may process

The app includes Google’s Mobile Ads SDK and User Messaging Platform SDK. When ads are enabled, they may process the following under Google’s own terms and privacy policy: your IP address and an approximate location derived from it; device and app identifiers; information about the ads shown to you and your interactions with them; and technical data such as performance, crash and diagnostic data.

What the app does to limit it

Ads requested by the app are non-personalized and limited to the General content rating.
The app does not read the advertising identifier (IDFA) and does not show the App Tracking Transparency prompt.
The app does not pass your player ID, your Apple identifier or your sign-in data to the ad software, and our own server receives no advertising data.
No ad is requested until the consent state allows it (section 7).

What Google does with information is described by Google. See Google’s Privacy Policy and How Google uses information from sites or apps that use its services.

8. In-App Purchases — StoreKit 2

CROWNLINE offers one-time in-app purchases, such as Remove Ads and a Premium unlock. They are not subscriptions. Purchases are made through the App Store using Apple’s StoreKit 2.

Apple processes your payment and keeps your purchase history. We do not receive your payment details or your purchase history, and we do not store anything about your purchases on our server.
The app asks Apple on your device which purchases you own and checks Apple’s signed transaction data locally. Prices are shown as the App Store reports them for your region.
The app keeps a timestamp of the last successful check on your device so that a purchase keeps working for a while without a connection.
Restore Purchases brings your purchases back on another device that uses the same Apple Account.
Refunds and billing questions are handled by Apple.

10. Data Retention

One-time sign-in values and WebSocket tickets: Seconds to minutes.
Quick Match queue entry; online counter marker: A few minutes at most.
Active room data (room code, seat tokens, game state): While the room is in use, and removed automatically afterwards: after about 24 hours without activity, or about an hour after the game ends.
Sign-in sessions: A session expires on its own up to 60 days after it was last renewed. Ended sessions are deleted once at least 7 days have passed since they ended; our server does this when new sessions are created, not on a fixed schedule.
Account, profile and finished-game records: Until you delete your account (section 11). We do not currently delete inactive accounts automatically.
Reports you send or that name you: Kept as moderation records until we delete them; there is no automatic deletion. When an account is deleted, the notes and the name recorded in its reports are erased.
Hosting logs and backups kept by Cloudflare: For the periods set by Cloudflare’s platform and policies. Request logs may include standard request information such as the request address and IP address. We do not control these periods through the app.
Information on your device: Until you change it, sign out, or delete the app. iOS may keep Keychain items after an app is deleted; a session that is no longer valid on our server is of no use.

11. Account and Data Deletion

How to delete your account

In the app, open Settings → Account → Delete Account. The app explains what will happen and asks you to confirm. If you signed in with Apple, it then asks you to confirm with Apple using the normal Sign in with Apple sheet, which asks for no personal data. If a ranked game is in progress, the account cannot be deleted until it ends. Only after our server confirms the deletion does the app remove your session from the device. If the server cannot delete right now (for example, there is no connection), nothing is deleted and you can try again.

What happens on our server

The profile can no longer be signed in to, and the link between your Apple identifier and the profile is removed. Signing in again with the same Apple Account creates a new, empty account.
All your sessions end.
Your display name is replaced by a neutral placeholder, your public ID is replaced by a new random one, your rating and statistics are reset, and you no longer appear on the leaderboard.
In the game records that your opponents see, your name becomes “Deleted player”.
In reports, the notes you wrote and the names recorded about you are erased.

What is kept, and why

Records of finished games (result, moves, rating changes) stay in your opponents’ histories, because they are your opponents’ records; they no longer carry your name. An empty technical profile row with a random ID remains because those records refer to it. This is anonymization of your data, not erasure of every trace of the game. Copies in hosting logs and backups may remain for the period described in section 10.

Removing CROWNLINE from your Apple Account

Where the confirmation with Apple is available and you complete it, our server also asks Apple to revoke the Sign in with Apple link, so CROWNLINE disappears from the list of apps that use your Apple Account. We do not store any Apple token for this. If you decline the confirmation, or Apple cannot be reached, your CROWNLINE data is still deleted, and you can remove the entry yourself: open the iPhone’s Settings, tap your name, find Sign in with Apple, and choose CROWNLINE.

What deletion does not do

It does not cancel or refund purchases, which belong to your Apple Account. It does not erase the settings, block list and ad counters kept only on your device; those go when you delete the app. Deleting the app alone does not delete the information on our server.

If you cannot use the app, you can ask us to delete your data by email (section 17). We may ask you to prove that you control the account, for example by signing in to the app.

12. Children’s Privacy

CROWNLINE is a general-audience game. It is not directed to children under 13 (or under the minimum age set by the law where you live), and we do not knowingly collect personal information from them. The online features require an Apple Account, and the only information about a player we keep is the pseudonymous data described in this policy.

If you believe a child has given us personal information, contact us (section 17) and we will delete it.

13. International Data Processing

Apple, Cloudflare and Google operate worldwide. Information about you may therefore be processed and stored on servers in countries other than the one you live in, including countries whose data-protection laws differ from yours. Each of these providers describes the safeguards it uses for such transfers in its own privacy policy, linked in section 9.

14. Security

Traffic between the app and our server is encrypted (HTTPS and secure WebSocket).
Session tokens are stored on our server only as one-way hashes, and on your device in the iOS Keychain.
Our server verifies Apple’s signature on the sign-in token before opening a session.
Requests are rate-limited, and private-room seat tokens are random and unguessable.

No system is perfectly secure, and we cannot guarantee absolute security.

15. Your Privacy Rights

Depending on where you live (for example under the GDPR, the UK GDPR, or US state privacy laws), you may have the right to:

know what personal information we hold about you and receive a copy;
have inaccurate information corrected;
have your information deleted;
object to or ask us to restrict certain processing;
receive your information in a portable format;
withdraw consent you gave (for ads, in Settings → Privacy Options), without affecting processing done before;
complain to your data-protection authority; and
not be treated unfavourably for using these rights.

You can delete your account yourself in the app (section 11). For other requests, contact us (section 17). Because we hold only pseudonymous data, we may need to ask you to show that you control the account before we act on a request. We respond within the time required by the law that applies to you. We do not sell personal information.

16. Changes to This Policy

We may update this policy when the Service changes or the law requires it. The current version is always published at this address and shows the date it was last updated. If a change is material, we will say so at the top of this page.

17. Contact Us

For questions about this policy, to exercise your privacy rights, or to ask for your data to be deleted, write to us:

Email: prikozhd@gmail.com

Please do not send passwords or other sensitive information by email.