Privacy

Starfall Spire is a single-player game by Kayce Thomas. This page covers the web game, the iOS and Android apps, and emails to our support. Effective 26 September 2026.

What the game stores

Your progress, settings, backups and any licence key are saved on your device (browser local storage, or the app's own storage). So is a note of how many optional ads you've watched there, and when the game suggested the Seal or the Vault and what you answered, which the game never sends anywhere. There are no accounts, and the game sends none of this to a server unless you use the online features below. Of all this, play counts send the week you started playing and, if you said yes to counts, that you did. The apps may be included in your device's own backups (iCloud or Google).

Purchases

Purchases are optional. In the apps they go through the App Store or Google Play, and RevenueCat checks the receipts so we know which items you own. RevenueCat assigns an anonymous customer id and receives your purchase history, but not your name or payment details. On the web, purchases go through Stripe. We receive a checkout reference so we can issue your licence key, and never see your card details.

Optional ads

Ads appear only if you choose to watch one for a bonus, and never inside a Rift Trial. They are served by Google (AdMob in the apps, AdSense on the web). The first time you pick an ad, we ask for consent where the law requires it (for example in the EEA and UK), and on iOS Apple asks whether apps may track you. You can change your ad choices later from Ad privacy choices in the Tome, hide ad offers there, or skip ads entirely with the Archmage's Seal.

In the apps, Google's ad software collects your IP address, which gives a rough location, and device identifiers, including your advertising identifier (on iOS, only if you allow tracking). It also collects the ads you see, how you use the app and the ads (such as app launches, taps and video views), and performance and diagnostic data (such as launch time, hangs, battery use and crash logs). Within your consent choices, Google uses this data to show ads and measure them, for analytics, and to prevent fraud. Google's consent tool uses the rough location, and some performance and interaction data, to show the consent form that applies where you are. Once you've answered the age question, the apps start Google's ad software each time they open, unless you have the Archmage's Seal, but no ad loads until you pick one. Players under 13 get ads without the advertising identifier: see Children below.

Online features

If you back up to the cloud, link a device, or finish a weekly Rift run, the game sends data to our server (hosted by Cloudflare): a random player id, your save (for cloud backups), and for the Rift ladder your wizard name (only once you've named your wizard), your score and the inputs of that run (used to check the score). No email or account is needed.

You can report names on the ladder. A report sends our server the ladder row you reported and, once this device has a player id, that id too. Without one, the server turns the report away and the name is hidden only on your device. A report counts once the player who made it has a Rift run on the ladder, or first used cloud save or the Rift at least 3 days before, and three counted reports hide a name until a person on our team reviews it. When a person reviews one of your names, our server keeps that review: the name, the decision (it breaks a rule, it's fine, or it was restored on appeal), the rule it breaks, whether it counted as a strike, until when renames are locked, and when it was decided. While reports or a review hide your wizard name, lock your renames or ask for a name the game makes up, the Rift tab tells you why. The Fair Play rules say what each decision means.

If the game hits a programming error, it tells our server which one so we can fix it: a short code the game makes from the error, the game's version, and whether it runs on iOS, Android or the web. The error's text, your player id and your save are not sent, and the server keeps only a count for each error.

Each time you open the game, it asks our server for its current settings, like maintenance times, news and whether an update is needed, sending the game's version but no player id. The answer also says whether you're in the EEA, the UK or elsewhere, for play counts. When you open the Rift tab, it loads this week's ladder from our server, sending the game's version and, once this device has a player id (from the features above), that id too, so the ladder can mark your row, keep names you reported hidden and tell you about your own name.

Our server uses your IP address for two things. It stops any one address sending too many requests. And for play counts, it looks up the country Cloudflare gives for the address, to work out whether you're in the EEA, the UK or elsewhere. It works this out afresh each time the game checks for settings or sends a count, and doesn't save the address, the country or the result. Cloudflare keeps a log of each request for 7 days so we can fix problems, then deletes it. The log can include your IP address, a rough location worked out from it, your device type and your player id, but never your save.

Play counts

The apps count a few things anonymously, so we can see how many people keep playing and how the optional ads and the Shop are used. They count opening the game for the first time, playing on a given day, being offered an optional ad (once a day for each bonus), watching one, opening the Shop (once a day), and tapping a buy button. The two ad counts say which bonus it was, and a buy tap says which item.

Each count goes to our server with the week you started playing (its Monday, not the day), the game's version, whether it's iOS or Android, and, if you said yes to counts, that you did. No player id, device id, advertising identifier, name or save goes with it. Our server keeps each count, with its bonus or item, the week, version and platform, and when it arrived. It keeps them in Cloudflare's Workers Analytics Engine for three months, without your IP address, your country or your answer. A stored count can't be tied to another count or to you, so we can't find yours to copy or delete. Like every request, a count is in Cloudflare's 7-day log above. The web game sends no counts.

Players of every age are counted the same way: the age question plays no part. Where you are decides the rest:

Until our server has said where you are, the game counts only if you've said yes. You can say yes or no at any time with Share anonymous play counts in the Tome.

While counts are on, your device keeps when counting began, the week it sends, and which counts it has already sent (the first-time count, and today's once-a-day counts). It also keeps your answer, if you gave one. After 390 days (just under 13 months) the game stops using all of this except your answer, and starts over as if newly installed, from that week. Turning counts off forgets it all at once, except your answer.

Your cloud data

In the apps, the Tome's Cloud save section has two buttons. Copy my cloud data gives you a copy of what our server keeps for you: your player id, cloud save and Rift runs, when you and each linked device joined, how many name reports you made and got, and the reviews of your names. Delete my cloud data deletes all of it from our server straight away, for every device linked to yours, name reports and reviews included. Your progress on the device and your purchases stay. Your other linked devices keep the old player id, and send it when they try to back up, until you tap Delete my cloud data on each of them too.

When you delete, the apps also send your RevenueCat id, so that RevenueCat's record of your purchases can go too. We use it only for that and don't keep it. If the game says to email us about your purchase history at RevenueCat, we'll have it deleted. You can also email us to copy or delete your data, and we do it within 30 days.

How long we keep it

Apart from play counts, nothing on our server expires by itself. Your cloud save stays until a newer backup replaces it or you delete it. Rift runs and the reviews of your names stay until you delete your data. A name report stays until you or the other player deletes their data, even after a person has reviewed the name: it no longer counts against the name, but it's kept so the player who made it still doesn't see the wizard they reported. A link code works for 10 minutes and is deleted the next time anyone links a device. Error counts hold nothing about you. Play counts hold no player id or IP address, and Cloudflare deletes them after three months.

Deleting takes your data off our server at once. Copies stay in our backups (a nightly copy of the database, and Cloudflare's 30-day history of it) until they expire, about 30 days later. We use the backups only to repair the database, and if we ever restore one, we delete your data from it again.

Emails to support

When you email support@starfallspire.com, Cloudflare passes it on to Zoho Desk without keeping the message itself, though it keeps a record of the sender, recipient and subject line for 31 days. Zoho Desk, from Zoho Corporation, is the help desk where we read and answer support email, and it keeps the conversation for us as our service provider: your name and email address, what you write, any attachments such as screenshots or receipts, and our replies, including a copy of your data if you asked for one.

If you add your support info from the game, your email also has your player id, your RevenueCat id, the game's version, your device and its screen size, the purchases and any gifts from us on your save, when it last backed up to the cloud, and when you copied it. The support info never includes your save. The game doesn't email us by itself: we only get what you choose to send.

An AI agent helps us turn bug reports into tickets. Once your email is in Zoho Desk, a script on our computer takes out your email address and the name Zoho Desk has for you, any other email address, any phone number of nine digits or more (such as one with its area or country code), and any player id, RevenueCat id or Google Play order number. It can miss a shorter phone number, like a local one written without its area or country code, or an address or number written in an unusual way, so it's best to leave phone numbers out: we never need yours. A different name you sign with, or anyone else's name, stays in. Then our agent, Linnet, reads the subject, what you wrote in your first five emails and your support info, but not attachments or our replies. Linnet runs on Claude, from Anthropic, which processes what it reads.

Linnet may file a ticket from your email on our ticket board in Notion, where our AI agents, which also run on Claude, work on it. The ticket can quote your subject, your support info and up to 1,200 characters of what you wrote. It points to your conversation only by Zoho Desk's numbers for it.

We keep a conversation for 12 months after it's closed, in case you write again about the same thing, and then delete it. If you'd like your emails deleted sooner, ask us. Either way, we take its quotes out of our tickets at the same time. A ticket then keeps only our own notes on the bug, with when you wrote, the game's version, your device and its screen size. Copies can stay a little longer in Notion's page history, and in the records our agents keep at Anthropic and on our computer, until those expire.

Ratings

At most once per app version, the apps may ask the App Store or Google Play to show its own rating sheet, and Rate Starfall Spire in the Tome opens the store's review page. Anything you rate or write there goes to Apple or Google under their terms, and a written review is public on the store. The game isn't told whether you rated. If you write a review, we see it as the store shows it, with the name you post under, and Google Play also shows us your device model, language, and Android and app versions.

What we don't do

No analytics of our own beyond the anonymous play counts above, no tracking by us, no selling of data, and no third-party requests except the purchase and ad services above and the store's rating sheet. The game's fonts and art ship with the game.

Children

Starfall Spire is for all ages. The first time you choose to watch an ad or name your wizard, the game asks what year you were born. It keeps only whether you are under 13, and only on your device. For players under 13, ads are requested as directed at children: no personalised ads, no advertising identifier, and neither Google's consent form nor a request to track. Google may still get the rest of the ad data above. An under-13's wizard name is picked from a list of generated names instead of typed. Play counts work the same for every age, as Play counts says. Every player's game, under-13s included, sends our server its IP address when it checks for settings, loads the Rift ladder, reports a name on the ladder, reports an error or sends a play count. Until the device has a player id (from a cloud backup, a linked device or a Rift run it sent), that address is the only personal information those requests carry; after that, loading the ladder and reporting a name also send the player id, as Online features says. We use the address only for these things: to answer the request, to stop any one address sending too many requests, to fix problems with the help of Cloudflare's 7-day log, and to look up its country, which decides whether the EEA's or the UK's rules on play counts apply. The address is never saved in our database, and neither is its country. We never use the address to identify, contact, profile or advertise to anyone, or combine it with other data. We don't knowingly collect personal information from children under 13; if you think a child has sent us some, email us and we'll delete it.

Your choices and contact

Deleting the app, or clearing the site's data in your browser, erases everything the game stored on your device. What's on our server stays until you delete it, as above. You can turn play counts on or off in the Tome at any time. For questions or requests, email support@starfallspire.com.

Back to the spire