Privacy Policy
Quay Salvage Control
This policy explains how this application handles information and how to contact us about privacy.
Information we process
Quay Salvage Control stores game settings, the current operation, recovery history, damage events and pending score uploads locally in Core Data and device preferences. A random installation secret is kept in the iOS Keychain on this device. The app sends successful operation identifiers, contract identifiers, integrity percentages and elapsed play time to the game server. The server stores these results, their submission timestamps and a SHA-256 hash of the installation secret. The secret is sent over HTTPS for authorization but is not stored in plaintext by the application server. When the app or a browser contacts the server, Railway infrastructure also receives technical request information such as IP address, request path and timing. No name, email address, location, contacts, photographs or advertising identifier is requested by the app.
How we use information
Local data allows you to continue an interrupted operation, retain your collection and preferences, and queue results while offline. Server results provide an anonymous top-20 leaderboard for each contract. The installation secret authorizes submission and deletion of your own scores without an account. Technical request handling, bounded rate-limit counters and error identifiers support service operation, security and diagnosis. Scores are submitted by the client and are not represented as independently validated competitive results.
Service providers and sharing
The backend and its persistent storage are hosted by Railway, which processes network requests and infrastructure information to operate the service. Public leaderboards expose only integrity percentages and elapsed time for a chosen contract; they do not expose installation secrets, owner hashes, operation identifiers or timestamps. The app contains no advertising, analytics, social sign-in or email delivery SDK. We do not sell personal data. Infrastructure providers may process information under their own service terms and applicable legal obligations.
Data retention
Local progress and queued uploads remain until you reset local progress or remove the app, subject to device and operating-system storage behavior. Keychain items can persist after app removal; removal is not a reliable server-deletion method. Server scores remain until you use Delete My Server Scores or the service is discontinued. Rate-limit counters are transient and expire after their configured request window or a server restart. Application error logs contain a request identifier and error code, not score bodies or authorization tokens. Railway may maintain infrastructure logs and operational copies under its service settings and policies; no fixed infrastructure log retention period is promised here.
Deleting your information
In Settings, Delete My Server Scores removes the records belonging to this installation secret from the live server database and clears its pending upload queue after a successful response. A failed request is shown as failed and can be retried. Local collection and settings are retained unless you separately choose Reset Local Progress. Reset Local Progress clears the current round, local history and pending uploads and does not delete previously uploaded server scores. Deletion from the live database does not promise immediate erasure from SQLite journals, infrastructure logs or any provider-managed operational copies or backups; these may remain until overwritten or expired under provider controls. No application-level backup restoration or account recovery is offered. If the installation secret is lost, ownership cannot be verified through an account and scores cannot be recovered through the app.
Permissions and your choices
The app requests no camera, microphone, location, contacts, photo-library or notification permissions. Ordinary internet access is used for scores and the public policy. You can play offline, reduce network access through device controls, adjust sound and motion preferences, clear local data, or delete your own server scores. Turning off network access prevents pending uploads and server deletion until connectivity returns.
Your privacy rights
Depending on your location, you may have rights to access, correct, delete, restrict or object to processing of information relating to you, and to contact a relevant data protection authority. The in-app deletion control is the direct way to remove scores while you hold your installation secret. For privacy questions or requests contact QuintusNairne2001@icloud.com. Do not send your installation secret by email. Because no account, name or email is linked to scores, we may be unable to identify records from an email request alone.
Security
The app uses HTTPS for server communication, Keychain storage for its installation secret and server-side authorization based on the secret hash for each installation. The server validates input, limits request bodies and request rates, and restricts deletion to the authorized installation. Secrets are not embedded as shared application credentials. Device storage and hosting controls provide additional protection, but no method of transmission or storage is completely secure. Protect access to your device; loss of the installation secret can prevent access to deletion controls for previously submitted scores.
Children’s privacy
The game is designed for a general older-teen and adult audience, particularly players aged 16 and above, and is not directed at children under 13. We do not ask for a date of birth or knowingly request identifying information from children. A parent or guardian with privacy concerns may contact QuintusNairne2001@icloud.com.
Changes to this policy
This policy describes the current app and backend. Changes to data processing will be reflected on this public page with an updated effective date. Review this page when using a new version or when you have questions about current practices. The privacy contact is QuintusNairne2001@icloud.com.