Coreline — Privacy Policy
Coreline is a puzzle game. There is no account, no advertising, no analytics
and no third-party tracking of any kind. Almost everything stays on your
device. Two features talk to a server, and this policy explains exactly what
they send.
What stays on your device
Your progress is stored on your phone: cores charged, scores, best runs,
streaks, the codex, your theme and your settings. So is a small on-device
record of attempts, burnouts and rewires, which is used only to tune the
game's difficulty. None of it leaves the device unless you use one of the two
features below.
Backing up your progress
So that a lost or replaced phone does not cost you the campaign, the game
backs your progress up automatically after you charge a core. **This starts on
its own, the first time you finish a core, without asking.** You do not have to
turn it on and there is no separate account.
- It sends the progress data listed above to a server operated by the
developer. That includes the on-device difficulty record, because it travels
with your save.
- It is stored under a recovery code that the app generates for you. The
server keeps only a one-way hash of that code, never the code itself, so the
save can be returned to whoever presents the code and to nobody else.
- The recovery code is shown to you in Settings. It is the only way to restore
a save, so keep it if you want that ability.
- A save stays on the server until you ask for it to be deleted. It is
overwritten each time it is backed up, and it is not otherwise expired.
- No name, email address, phone number, contacts, location or advertising
identifier is ever sent or stored.
The Daily Core
If you play the Daily Core, the game sends that day's date, your score and how
long you took, so it can tell you how you compare with other players.
- It is sent with a pseudonymous identifier: a random value created on your
device the first time it is needed, then hashed. It is not your device ID, not
an advertising ID, and it is not linked to your backup or to you.
- It cannot be used to identify you, and it is not shared with anyone.
Things every web server sees
The server is hosted on Cloudflare. Like any server, it can see the IP address a
request comes from, and it briefly counts restore attempts per IP to stop abuse.
IP addresses are not used to build a profile and are not shared.
Deleting your data
Ask at the address below, quoting your recovery code, and the save held under it
will be deleted. Uninstalling the app removes everything held on your device,
but it does not remove a backup already on the server: that needs the request
above.
Children
Coreline collects no personal information from anyone, including children.
Changes
Any change to this policy will be published here with a new date.
Contact: jufravazto@gmail.com