Privacy Policy
Alpine High Peak
This policy explains how this application handles information and how to contact us about privacy.
Information we process
Alpine High Peak stores campaign stars, best move counts, the current round and its undo/checkpoint state, daily-route cache, local daily scores, queued online results and sound, music, vibration and motion preferences on your device. The app creates a random installation UUID in the iOS Keychain. For an online daily score or deletion request it sends that secret over HTTPS. The backend stores only its SHA-256 hash with route date, moves, stars and an update timestamp. Public daily wall layouts are stored in PostgreSQL. Hosting receives network requests, including IP addresses and request metadata. There are no accounts, names, location records, contact lists, uploaded files, advertising identifiers or analytics SDKs.
How we use information
Device storage lets you resume an ascent, play the campaign offline, keep earned stars and apply your settings. The public service provides one route for each UTC date. Installation-scoped scores support retry-safe saving and possible future anonymous aggregate statistics; no public statistics dashboard is currently provided. The installation secret authorizes score changes and deletion for this installation. Temporary hashed connection-address and token rate-limit buckets help protect the API from excessive requests.
Service providers and sharing
The application backend and PostgreSQL database are hosted by Railway, which processes requests and infrastructure metadata to operate the service. The app does not send data to advertising, analytics, social-login, email or messaging providers. Operational server errors contain a request identifier and generic error code rather than installation secrets or score payloads. Railway may maintain infrastructure logs; this application does not control or promise a specific retention period for those logs. We do not sell your information.
Data retention
Local saves remain until you remove app data or overwrite progress through normal play. Only the current fetched daily wall is cached, while local daily best scores and pending submissions remain in the save file. The Keychain secret may remain after app removal under iOS behavior. Server scores remain until you request their deletion; there is no automatic expiry schedule. Public daily wall layouts remain available. Rate-limit counters use one-minute buckets in bounded process memory and are reset as the process restarts. Infrastructure-log retention is governed by the hosting provider, with no specific duration promised here. If a local save cannot be decoded, the app preserves its original bytes in a protected local file before allowing a new save. That recovery copy remains on the device until app data is removed; it is not uploaded.
Deleting your information
In Settings, Delete My Server Results removes all active database score rows matching this installation secret. A successful response also clears queued local submissions, while leaving local campaign progress and daily best scores unchanged. If offline, deletion is not reported as complete; retry when connected. Removing local app data removes the local save, but does not itself delete server scores or necessarily erase the Keychain item. Delete server results before losing access to the secret. We cannot recover or identify your old scores after that secret is lost. The backend does not implement a separate backup or archival copy of server scores. Hosting-managed backups, if present, may retain earlier copies under provider controls and are not individually rewritten by this deletion endpoint; we do not assert a backup retention duration.
Permissions and your choices
The game requests no location, camera, microphone, photos, contacts or notification permissions. Audio and optional haptic feedback are controlled in Settings, and music is disabled by default. System Reduce Motion is respected, and the app also offers its own Reduce Motion setting. You can use the campaign offline without making daily-route requests. iOS device controls and removal of app data can restrict continued use.
Your privacy rights
You can delete installation-scoped server scores within Settings without creating an account. For privacy questions or requests, contact Aldous807Torrance@icloud.com. This address is a public privacy contact; the app has no email-sending or support-ticket feature. Depending on your location, applicable law may give you access, correction, deletion, objection or other rights. We may need enough information to locate the relevant data without asking you to publish your installation secret. No cross-device account recovery is offered.
Security
Public API traffic uses HTTPS. The random installation secret is stored in the iOS Keychain with device-only accessibility; it is not a shared credential embedded in the app. The server validates the secret format, hashes it, and uses that hash to scope writes and deletion. Database access stays on the server, queries are parameterized, score inputs are bounded and request sizes and rates are limited. Local save writes are atomic and use iOS file protection. No system can guarantee absolute security; keep your device and installation secret secure.
Children’s privacy
Alpine High Peak is designed for puzzle players aged 12 and older. It has no accounts, chat, advertisements or purchases and does not ask children to provide personal contact details. If you believe personal information from a child has been supplied to this service inappropriately, contact Aldous807Torrance@icloud.com so the concern can be reviewed.
Changes to this policy
This policy describes the implemented app and backend as of its effective date. We will update this public page and its effective date when processing practices change. Review the Privacy Policy link in Settings for the current version. Material changes will be communicated as appropriate to the change and applicable requirements.