Last updated: [EFFECTIVE DATE] · Applies to the MoonWarp game on all platforms.
This policy describes what MoonWarp collects, why it exists, and what you can do about it. It is written to match what the software actually does rather than to cover every thing it might one day do.
The short version. You can play the entire single-player game without an account and without sending us anything. An account is needed only for online play, and then we hold your email address, a display name, and the games you have played. We do not sell your data, we show no advertising, and there are no third-party tracking or advertising SDKs in the game.
Single player, the tutorial and the weekly challenge run entirely on your device. Your saved games, replays and settings are stored locally in the application's own storage area. They are not uploaded, and deleting the app deletes them.
An account is required for live multiplayer. Creating one collects:
| What | Why |
|---|---|
| Email address | To identify your account, confirm that the address is yours, and let you reset your password. |
| Display name, and the name you enter at sign-up | So other players can tell who they are playing against. |
| An account identifier from our sign-in provider | To link your sign-in to your game profile. |
| Games you play: results, scores, and the state of each game | So a game can be resumed, rejoined, replayed, and scored. |
| Friends you add, and requests you send or receive | To provide the friends list. |
We never receive your password. Sign-in is handled by our identity provider (Supabase). Your password is sent from the game to that provider over an encrypted connection and is verified there. What reaches our game server is a short-lived access token, which the server checks with the provider before it will let you in. Our own database has no column holding your password.
An online game is stored on our server as a series of snapshots and the list of moves that produced them. This is what makes it possible to rejoin a game in progress, to hand a turn between devices, and to watch a replay afterwards. It contains the game — units, cities, territory, moves — and the display names of the players in it.
If you play through Apple Game Center, Apple identifies you to the game and to the other players by the name you have chosen with Apple. Turn-based matches, their game data and any scores you submit to leaderboards are held by Apple under Apple's privacy policy, not by us. You can play the rest of the game without using Game Center.
The game may send anonymous technical information — for example crashes, errors, timings, device model and operating system version, and which features are used — so we can find faults and understand what needs work. Where this is collected it is not linked to your account, your email address or your name, and it is used in aggregate.
It does not include the contents of your messages, your location, your contacts, or any advertising identifier. There are no third-party advertising or tracking SDKs in the game.
The game has a screen that lets you send us a debug log when something has gone wrong. This only ever happens when you choose it. The log describes what the game was doing and may include your display name and the game you were in.
We use a small number of service providers to run the game. They act on our instructions and only for the purposes below.
| Provider | What they handle |
|---|---|
| Supabase | Sign-in: your email address and password. |
| Resend | Sending account emails: your email address. |
| Apple | Game Center matches, leaderboards and notifications, if you use them. |
We do not sell personal data, and we do not share it for advertising.
Account details are kept while your account exists. Finished games and their replays are kept so you can look back at them. If you delete your account we delete your account record and your personal details; games you played in may remain in other players' game histories, because those games are theirs too — where that happens your entry appears under a removed-player placeholder rather than your name.
Email [YOUR CONTACT EMAIL] from the address on the account and we will delete it. You can also ask for a copy of what we hold about you, or ask us to correct it. We will respond within 30 days.
Deleting the app removes everything held on your device, including single-player saves and replays, but does not by itself delete an online account.
MoonWarp is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has created an account, contact us at [YOUR CONTACT EMAIL] and we will remove it.
Traffic between the game and our servers is encrypted, as is traffic to our sign-in provider. Passwords are held by that provider and hashed there. No system is perfectly secure, and we do not claim otherwise — if we become aware of a breach affecting your data we will tell you.
Depending on where you live you may have the right to access, correct, export or delete the personal data we hold, to object to some processing, or to complain to your data protection authority. Contact [YOUR CONTACT EMAIL] to exercise any of these.
If this policy changes we will update the date at the top of this page. Where a change materially affects what we collect or why, we will say so in the game as well.
[YOUR LEGAL NAME OR COMPANY]
[YOUR CONTACT EMAIL]