Privacy Policy
Box Vault Decoder
This policy explains how this application handles information and how to contact us about privacy.
Information we process
Box Vault Decoder stores puzzle progress, earned collection items and preferences on your device. The app uses an installation credential to associate optional server backup and collection snapshots with this installation. The server receives game-progress and collection JSON snapshots and their update times when you use synchronization; preferences remain on your device. Synchronization is initially enabled and can be disabled using the app control. It stores a SHA-256 hash of the credential and the installation creation time, rather than storing the original credential. Your device stores its credential securely in the Keychain. There is no account registration, email login, advertising identifier, advertising SDK or analytics SDK. Requests to our API and public policy website also disclose ordinary network information, such as an IP address and request time, to Cloudflare and the Railway hosting infrastructure. Requests also include an application user-agent identifying the app version and iOS platform.
How we use information
Local information allows you to continue puzzles, keep earned items, retain your settings and reopen saved progress. Server snapshots support the app's backup and collection synchronization features for the installation holding the matching credential. The credential is used to authorize access and separate installations. Update times resolve synchronization conflicts. Technical request handling, short-lived in-memory rate limits and generic error request identifiers help operate, protect and troubleshoot the service. We do not use your game state for advertising or sell it.
Service providers and sharing
Cloudflare provides the public HTTPS proxy for the API and this policy website and processes requests, including their headers and content, to deliver them to our Railway origin. The API and policy files are hosted on Railway, which processes server-stored data and network requests as our hosting provider. Cloudflare, Railway and their infrastructure providers may process technical connection or operational log information as part of providing hosting. The application server does not deliberately log game-state bodies, credentials or IP addresses; its error logs contain generated request identifiers and generic error codes. We do not integrate advertising, analytics, email delivery or external account SDKs. We may disclose information when legally required or when necessary to protect the service and its users. We do not promise that infrastructure logs or operator backups have the same deletion lifecycle as the live application database.
Data retention
Device data remains until you reset it, remove it through the app's available controls or remove the app, subject to device and operating-system backup behavior. Server snapshots remain until they are replaced by newer snapshots or deleted through the app's server-data deletion control or an authorized privacy request. The hashed installation identity and its creation time can remain after deleting snapshots so the same installation can create a fresh backup. We do not set a fixed automatic expiry for these records. The service does not implement a separate scheduled backup system. Hosting logs and any infrastructure snapshots or backups follow the provider's configuration and lifecycle; we do not claim a retention period that has not been established.
Deleting your information
The app's server-data deletion action removes both the backup snapshot and collection snapshot associated with the current installation from the live database. The app disables synchronization when server-data deletion is requested and queues that deletion if the network is unavailable. Its full reset also clears local game state and preferences while keeping the credential needed to authorize deletion. Deletion takes effect on the server once that request succeeds; re-enabling synchronization can create a fresh server snapshot. Deleting the app alone does not send a server deletion request, and Keychain or operating-system backups may retain information according to your device settings. Server deletion does not necessarily immediately remove copies in infrastructure snapshots or backups, if present. For privacy questions or deletion assistance, contact AelfherePeverell@icloud.com. Because there is no email-based account, we may need information that proves control of the relevant installation before acting; do not email your secret credential.
Permissions and your choices
The core puzzle and backup features do not require access to your contacts, location, microphone, camera or photo library. You control the device's network access and the app's synchronization and reset controls; the app does not request a separate network permission. If you stop using backup, local game features can continue with the state already stored on the device. Disabling network access does not delete snapshots already stored on the server; use the deletion control when you want them removed. Device-level backup and any permissions managed by iOS can be changed in the operating system's settings.
Your privacy rights
Depending on where you live, you may have rights to access, correct, delete or restrict processing of your information and to make a complaint to a relevant privacy authority. Contact AelfherePeverell@icloud.com to ask about your information or exercise applicable rights. We may need to confirm that a request concerns an installation you control, because the service has no account name or email address that identifies your stored game state. We will consider requests under the laws that apply to the request. You can also use the app's local and server deletion controls directly.
Security
Public production requests use HTTPS. Cloudflare terminates public HTTPS and forwards requests over HTTPS to the Railway origin; both infrastructure providers process request content in order to deliver the service. The app uses an installation-scoped bearer credential, and the backend stores its SHA-256 hash for authorization. Possession of the original credential allows access to the corresponding snapshots, so keep it private. The service validates JSON input, limits body sizes and request rates, separates records by installation and uses SQLite transactions to apply timestamp conflict rules. Stored snapshots are not end-to-end encrypted; the hosting service and authorized operators may have access when needed to operate the service. No storage or transmission method can guarantee absolute security, and we do not claim security certifications.
Children’s privacy
Box Vault Decoder is a mechanical puzzle game intended for adults aged 18 and over and is not designed to request children's personal information or create child profiles. It has no account form, chat, advertising SDK or email registration. A child who uses the game may still generate local progress and, if synchronization is used, installation-associated server snapshots and network requests. A parent or guardian who believes information should be removed can use the app's deletion controls or contact AelfherePeverell@icloud.com for help.
Changes to this policy
We may update this policy when the app's features, data handling, hosting arrangements or legal requirements change. The effective date at the top identifies this version. The current policy is available through the app's Privacy Policy link and this public page. If a change requires a separate notice or choice under applicable law, we will provide it through an appropriate available channel. Contact AelfherePeverell@icloud.com with questions about this policy.