Privacy policy

1. Who we are and what this policy covers

This privacy policy explains how i2p30m (“we”, “us”) handles information in the app Alibi Files (the “App”) and on this website.

We are the data controller for the processing described here. You can reach us at any time at support@[your-domain].

Our approach is simple: no accounts, no ads, no tracking. The App does not know who you are, and we have designed it so that nothing it sends can be linked to you.

2. Who the App is for

The App is a logic game with a crime theme, intended for players aged 16 and over. It is not directed at children, and we do not knowingly collect personal information from anyone – of any age. There is no sign-up, no chat, no social features and no content you create that leaves the device.

3. Information that stays on your device

To work, the App saves a few things locally on your device. They are never sent to us:

• your progress – solved cases, stars, times, the case you are in the middle of, and your daily-case streak;
• your settings – language, sound, timer, tutorial and the statistics switch;
• how many hints you have used today, and which content you have unlocked (a local copy of your purchases, so the App works offline);
• simple counters used to decide when to suggest a store rating, so we don’t ask too often.

You can delete this with Settings → About → Reset progress, or by uninstalling the App.

4. Anonymous gameplay statistics (TelemetryDeck)

To learn which cases are too hard, where the tutorial loses people and whether the store screen makes sense, the App sends anonymous usage signals to TelemetryDeck GmbH (Germany), our processor. For example: tutorial started or finished, case started or solved (with the case number, board size, time, stars, hints and mistakes), a hint used, the daily hint limit reached, the store screen opened, a purchase started, completed or failed.

Each signal also carries the App version, the operating system and its version, the device model, the language and a session number. Instead of an identifier, TelemetryDeck receives a salted hash of a random number created by the App when it was installed. TelemetryDeck stores no IP addresses and no raw identifiers, and neither it nor we can link the signals to a person or a device.

You can switch this off at any time: Settings → About → “Anonymous statistics and crash reports”. Statistics stop immediately.

5. Crash reports (Sentry)

When the App crashes or hits an error, it sends a crash report to Sentry (Functional Software, Inc.), our processor, using its EU data region (Germany). A report contains the error and where in the code it happened, the App and system version, the device model, free memory, language, the screens visited and buttons tapped just before the error, and a random installation number created by the crash reporter. A small share of sessions also sends performance timings (how long screens take to load).

Reports contain no name, e-mail, advertising identifier or IP address: the App is configured not to send personal data, and IP storage is switched off on our Sentry project.

The same switch – Settings → About → “Anonymous statistics and crash reports” – turns crash reports off from the next time you start the App.

6. Purchases and RevenueCat

The App is free to download and offers optional in-app purchases.

Payments are handled entirely by Apple (App Store) or Google (Google Play). We never see your name, e-mail address, card or billing address. Apple and Google act as independent controllers: Apple Privacy Policy, Google Privacy Policy.

Purchase verification. To check that a purchase is valid and to let you restore it on another device, the App uses RevenueCat, Inc. (USA) as our processor. The App contacts RevenueCat only when you open the store screen. RevenueCat receives a random, anonymous app user ID created on the device; the store receipt and transaction details (product, date, price, currency, store country); and technical connection data (IP address, platform, system, App and SDK version). We have configured RevenueCat not to collect device or advertising identifiers, we send it no attributes about you, and its in-app messages and diagnostics are switched off.

Ratings. After you have solved a few cases with three stars, the App may ask the system to show Apple’s or Google’s own rating dialog (at most three times, months apart). The App itself sends nothing; a rating you leave is handled by the store.

7. What we never do

• No advertising and no advertising SDKs.
• No advertising identifiers – the App never asks for tracking permission, and on Android the AD_ID permission is removed.
• No accounts, no profiles, no tracking across apps or websites, no sale or sharing of personal data.
• No location, camera, microphone, photos or contacts.

8. When you contact us

If you e-mail us, we receive your e-mail address, your message and anything you attach (for example a screenshot or an order number). We use it only to answer you and to fix what you report, and keep the conversation for up to 24 months after the last message, unless we need it longer to establish or defend legal claims. Our e-mail provider stores messages on our behalf as a processor.

9. This website

This website uses no cookies, no analytics, no advertising and no third-party scripts. Fonts and images are served from our own domain, and there are no forms.

The site is hosted by Vercel Inc. (USA), which processes technical data such as your IP address, browser, the page requested and the time, to deliver the site and protect it against abuse. These logs are kept for a short period set by Vercel and we do not use them to identify visitors.

10. Legal bases (GDPR)

Storing statistics and crash data that are strictly anonymous on your device and reading it back is limited to what is needed for these purposes; the switch in Settings lets you refuse it at any time.

11. Recipients and international transfers

We share data only with the processors named above – TelemetryDeck (statistics, EU), Sentry (crash reports, EU data region), RevenueCat (purchases), Vercel (website) and our e-mail provider – each bound by a data processing agreement. Apple and Google process purchase data as independent controllers. We never sell data.

RevenueCat, Vercel and Sentry’s parent company are based in the United States. Where personal data may leave the European Economic Area or the United Kingdom, the transfer is covered by the EU⁠–⁠U.S. Data Privacy Framework (where the recipient is certified) or the European Commission’s Standard Contractual Clauses.

12. How long we keep data

• On-device data: until you reset progress or uninstall the App.
• Anonymous statistics: for as long as they help us improve the game, and no longer than 24 months.
• Crash reports: deleted automatically after Sentry’s retention period (at most 90 days).
• Purchase records at RevenueCat: for as long as the App is available, so you can restore purchases, or until you ask us to delete them.
• Support e-mails: up to 24 months after the last message.

13. Your rights

Depending on where you live, you have the right to access your personal data, to have it corrected or deleted, to restrict or object to its processing, and to data portability. Write to support@[your-domain]; we reply within one month.

Because the App is anonymous, we usually cannot tell which statistics or crash reports are yours – that is the point. You can stop them at any time with the switch in Settings. To delete purchase records, send us the order number from your store receipt (Apple “Order ID”, or Google Play “GPA.…”). Deleting them does not cancel your purchase: “Restore purchases” will unlock it again later.

You can also lodge a complaint with a data protection authority – in Poland the President of the Personal Data Protection Office (Prezes UODO, ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl), or the authority where you live or work.

If you live in California or another U.S. state with a consumer privacy law: we do not sell or share personal information for cross-context behavioural advertising, and we do not use sensitive personal information.

14. Security

We collect as little as possible. All connections from the App and to this website are encrypted (HTTPS/TLS), and only the processors listed above can access the limited data they handle for us.

15. Changes to this policy

If we change how the App handles data, we will update this page and the date at the top before the change takes effect, and mention significant changes in the App’s update notes.

16. Contact

i2p30m
E-mail: support@[your-domain]

17. App details

For app-review teams and the curious: