Bonestorm Survivors privacy policy
The short version: the game keeps your progress on your phone. It sends us only anonymous crash reports and the feedback you choose to send. There are no accounts, no ads and no tracking in the current test build.
In short
- Your game progress is saved in a file on your device. It is never uploaded.
- The game has no user accounts and does not ask for your name, email, location, contacts, camera or microphone.
- The test build contains no advertising, analytics or payment SDKs and no third-party crash-reporting service.
- When the game hits an error, it sends us a crash report with technical data (game version, phone model, operating system, what went wrong) and a random install number. No name, email or other personal data. You can switch this off in Settings.
- If you use Send feedback in Settings, we receive your message, the email address if you add one, and the same technical data.
- The in-game store and "watch an ad" buttons in the test build are placeholders. No real money is charged and no ads are shown.
- If you sign up for the beta or email us, we use your details only to send your invite and answer you.
Who is responsible
The controller responsible for any personal data connected to Bonestorm Survivors is Slonge Games, the games label of slonge solutions (Benjamin Tobler), Switzerland. You can reach us at [email protected].
We follow the Swiss Federal Act on Data Protection (nFADP / revDSG). Where the EU or UK General Data Protection Regulation (GDPR) applies to you, we follow it as well.
What stays on your phone
To play, the game stores the following on your device only, inside the app's private storage:
| What | Why |
|---|---|
| Save file (game progress) | Gold and gems, unlocked heroes, skins and worlds, hero levels and talents, quests, statistics such as best time and kills, settings, and the dates used for daily rewards. It also records which items you "bought" in the test store, so they stay unlocked. |
| Game log file | The game engine writes a local log used for debugging (for example which upgrade you picked or that a run ended). It stays on the device. The last few lines are only sent if you send us feedback (see below). |
| Install number | A random number created the first time you open the game. It is not derived from your phone, your accounts or any advertising identifier, and it is deleted with the app. It is sent with crash reports and feedback so we can tell whether several reports come from the same installation. |
| Outbox | Crash reports and feedback that could not be sent yet (for example while you are offline) wait in a small folder in the app's storage and are sent the next time a connection is available. |
| Device capabilities | When the game starts it reads your phone's memory size, processor core count and graphics chip to pick a graphics quality level. This happens on the device. The same values are included in crash reports and feedback. |
Apart from crash reports and feedback, we cannot see any of this. Deleting the app, or clearing its data in your phone's settings, permanently deletes your progress. Because nothing is stored on a server, we also cannot restore lost progress.
Crash reports
When the game runs into an error (for example a bug that stops a feature from working), it sends a short technical report to our server. Each report contains:
- the error message and the place in the game's code where it happened;
- the game version and build number;
- your phone model, operating system version, graphics chip, memory size, screen size, system language and the graphics quality level the game picked;
- where you were in the game: the screen, the world, hero and difficulty of the current run and how long you had been playing;
- the random install number and a random number for the current session;
- the country Cloudflare derives from your connection.
Reports contain no name, email address, account, location, contacts or advertising identifier. The game sends at most ten reports per session and never the same error twice.
Purpose and legal basis: to find and fix bugs in the test build. The legal basis is our legitimate interest in a game that works.
Your choice: switch Crash reports off in the game's Settings. Reports that have not been sent yet are deleted at the same time.
How it travels: the report goes to our own address on slonge.games, which is hosted by Cloudflare. Cloudflare sees your IP address to deliver the request, as for any website; we do not store it. Our server turns the report into an email to us, delivered by Resend. There is no separate database.
Retention: we keep crash report emails for as long as we need them to fix the problem, and at most 12 months.
In-game feedback
Settings has a Send feedback button. If you use it, we receive:
- what you type, and the category you pick (bug, idea, balance or other);
- your email address, only if you enter one, so we can reply;
- the same technical data as in a crash report, plus the last few lines of the game's local log (game events such as upgrades picked, no personal data).
Purpose and legal basis: to read your feedback, improve the game and, if you gave an email address, answer you. You decide to send it; the legal basis is your request and our legitimate interest in improving the game.
How it travels: like crash reports, through our server on Cloudflare and as an email to us delivered by Resend. If you gave an email address, our reply comes from our normal mailbox.
Retention: at most 12 months, or as long as a conversation with you is ongoing. Ask us and we delete it sooner.
What we do not collect
The current test build does not collect, transmit or share:
- your name, email address, phone number or any account details;
- advertising identifiers (IDFA, Google Advertising ID) or hardware device identifiers (the install number above is random and not tied to your phone);
- location, contacts, photos, camera or microphone data;
- analytics, usage tracking or performance data (crash reports and feedback are described above);
- payment information.
The game is built with the Unity engine. Unity's own cloud services (Unity Analytics, Unity Ads, Unity IAP, Cloud Diagnostics and performance reporting) and the engine's hardware statistics are switched off in this build. We do not use cookies or similar technologies in the game.
TestFlight and Google Play
Test builds are distributed through Apple TestFlight and Google Play testing tracks. To send you an invite we need the email address of your Apple ID or Google account, which you give us yourself through the beta signup form or by email. Apple and Google process data about the installation (for example device model, OS version, crash logs and any feedback you submit through TestFlight) under their own privacy policies, and may share crash reports and feedback with us as the developer. We use that only to fix problems in the game.
Beta signup form
When you sign up for the beta on our website, we collect:
- your email address (the Apple ID or Google account you want the invite sent to);
- your platform (iPhone or Android) and, if you enter it, your phone model;
- technical context sent with the form: the page you signed up on, the referring page and campaign tags (UTM parameters) if present, and the country Cloudflare derives from your connection.
Purpose: to send you a TestFlight or Google Play testing invite and occasional beta updates for Bonestorm Survivors. The legal basis is your consent, given with the checkbox on the form. We do not use the data for advertising and never sell it.
Processors: the website is hosted by Cloudflare, which also runs Turnstile, a privacy-friendly check that the form is filled in by a person and not a bot. Resend delivers the confirmation email to you and the signup notification to us. The signup is then kept as an email in our mailbox; we do not keep a separate database.
Retention: until the beta ends or you ask us to remove you, and at most 12 months after the beta ends.
Withdrawing: reply to the confirmation email or write to [email protected] and we will delete your signup. To leave the test itself, you can also remove yourself in TestFlight or leave the Google Play testing program at any time.
When you write to us
If you email [email protected] (for help, a bug report or a beta invite), we receive your email address, your message and anything you attach, such as screenshots. We use it only to answer you and, for bug reports, to fix the game. The legal basis is our legitimate interest in answering requests and, for beta invites, taking the steps you asked for.
Mail to our domain is forwarded to our mailbox by our email provider. We keep correspondence for as long as needed to handle your request and delete it at the latest two years after the conversation ends, unless you ask us to delete it sooner. We never sell it or use it for marketing.
Children
Bonestorm Survivors contains cartoon fantasy violence and is not directed at children under 13. The game does not knowingly collect personal data from anyone, including children. If you believe a child has sent us personal data by email, contact us and we will delete it.
Your rights
Under the nFADP and, where it applies, the GDPR, you can ask us for access to the personal data we hold about you, have it corrected or deleted, restrict or object to its processing, and receive it in a portable format. In practice, the only personal data we may hold is the email correspondence you started and feedback you sent with your email address. Crash reports only carry the random install number; if you want reports from your installation deleted, tell us roughly when and on which phone they were sent.
To use these rights, write to [email protected]. You may also complain to a supervisory authority: in Switzerland the Federal Data Protection and Information Commissioner (FDPIC), or the data protection authority in your EU country of residence.
Before we add analytics, ads or purchases
The game has places prepared for analytics, rewarded ads and in-app purchases, but in this build they are local stand-ins that send nothing. Before any version that uses a real analytics, advertising, third-party crash-reporting or payment service is released, we will update this policy to name each provider, the data it receives, why, and the legal basis, and we will ask for your consent in the game where the law requires it (for example Apple's App Tracking Transparency prompt, or a consent prompt in the EU, UK and Switzerland).
We will change the effective date at the top of this page whenever we update it. Material changes will also be announced in the release notes of the build that introduces them.
Contact
Slonge Games, a label of slonge solutions (Benjamin Tobler), Switzerland
slonge.ch · [email protected]
Looking for the website's privacy notice? It is on the studio privacy page.