Privacy Policy

Information we process

Why land Friendly stores game progress, earned level stars, onboarding status, tool placements and preferences on your device so the game works offline. Preferences include language, sound, music, haptics and your optional sync and reminder choices. An installation secret is generated randomly and stored in the device Keychain; it is not your name, email address or an advertising identifier.

Optional online sync is off by default. When you enable it, the app sends level stars and onboarding status to our Railway-hosted service using the installation secret as a bearer credential. The server stores a SHA-256 hash of that secret with your progress, rather than the secret itself. While sync is enabled, the app may also send a level number, attempt count and elapsed play time without an installation credential. The server combines those values into per-level totals and does not store individual gameplay events or link those totals to an installation.

Connecting to the service or opening the public website also exposes network information, such as your IP address and request timing, to Cloudflare, which proxies the public HTTPS connection, and to the Railway hosting infrastructure. Our application does not intentionally log credentials, progress bodies, installation hashes or IP addresses. Infrastructure logging is separate. The app does not ask for an account, name, email, contacts, location, photos or payment information, and includes no advertising or third-party analytics SDK.

How we use information

Local information is used to resume the game, remember your choices, unlock levels and keep earned stars. Optional server progress is used to merge the best star result for each level and completed onboarding for the same installation credential. This is installation-based sync; we do not provide an account or a cross-device credential recovery service.

Per-level aggregate attempts and elapsed seconds help understand how the puzzles are played. They are not used to build advertising profiles. Technical startup and generic error information helps operate the service and investigate failures. Local reminders are scheduled on the device only after your permission and choice; there is no marketing messaging service.

Service providers and sharing

Cloudflare receives public API and website requests as the HTTPS proxy and processes connection information and request contents to forward them to our service. Railway hosts the backend, public home and privacy page, and persistent SQLite storage. It processes information needed to receive HTTPS requests, run the application and provide infrastructure services, including its own technical logs. Network operators and your device platform also process information needed to carry your connection or deliver local device features.

There are no advertising networks, external analytics recipients, email delivery services or public progress listings integrated into this product. We do not sell your progress or use it for targeted advertising. We may disclose information if legally required or when necessary to protect the service and users. An external browser or mail application you choose to open operates under its own provider's practices.

Data retention

Local progress remains on the device until you reset game progress in the app, remove its local storage or uninstall, subject to device and operating-system backup behavior. Preferences remain until you change them, remove the app’s ordinary local storage or uninstall. A Keychain item can remain after an app is removed, depending on the operating system.

Synced progress remains in the persistent server database until you delete that installation's server progress or the service is discontinued. Turning sync off stops new optional game submissions but does not itself remove an existing server copy. Per-level aggregate totals have no installation reference and remain until removed as part of service maintenance. We have not configured a fixed automatic expiry period for these records.

The application does not configure a fixed retention schedule for Cloudflare's or Railway's infrastructure logs or backups, and we do not claim a duration for them. Logical deletion removes the active progress row. SQLite journals, volume snapshots or provider backups may retain earlier data until overwritten or expired under their actual operation. No guaranteed immediate physical erasure from all backup copies is promised.

Deleting your information

Use the server-progress deletion control in the app's settings to send an authenticated deletion request for this installation. An online connection and the installation secret are needed. A successful response means the active server progress row was deleted. If the request fails, the app shows a failure and you can retry. Local reset and server deletion are separate choices. If you enable sync again with existing local progress, that progress can be uploaded again.

You can reset local game progress in settings and remove the application to remove its ordinary local storage, subject to operating-system backup behavior. Anonymous aggregate totals cannot be selectively removed because the server does not retain a link from those totals to an installation. For privacy questions or deletion assistance, write to jago.merriweather@icloud.com. Do not email your installation secret. Because there are no accounts or email-to-progress records, we may be unable to identify a server row from an email address alone.

Permissions and your choices

Optional sync is disabled by default and can be changed in settings. The full puzzle game works offline. Disabling sync stops optional progress and gameplay aggregate submissions; opening the privacy page still makes an ordinary website request. The operating system may use a network connection independently of this app.

Local notifications are optional. The app asks the operating system for permission only when you choose reminders. You can turn reminders off in the app and revoke notification permission in iOS Settings. Notification scheduling occurs on the device, without a remote push-token or messaging provider. Language, sound, music and haptic choices are local preferences. The game does not require camera, microphone, contacts, photo-library or location access.

Your privacy rights

Depending on where you live, you may have rights to access, correct or delete personal information, restrict processing, object to certain processing, withdraw consent or complain to a relevant data protection authority. Contact jago.merriweather@icloud.com to ask about these rights. We will consider requests under the law that applies to you and may need information sufficient to verify the request without exposing another person's data.

The app provides your current progress locally and merges better star results when optional sync is enabled. You can disable optional sync and reminders at any time. Withdrawing an optional choice affects future activity; it does not automatically delete earlier server progress. Use the separate server-deletion control for that purpose. We do not infer your identity from a name or email because those fields are not part of game sync.

Security

The public service uses HTTPS, terminated by Cloudflare, which forwards requests over HTTPS to the Railway service. The installation credential is kept in the device Keychain and only its hash is stored with server progress. Authenticated requests can access only the row identified by that credential; there is no public progress lookup or list. The server validates levels, star counts and aggregate values, limits request sizes and applies bounded request handling.

Treat the installation secret as private: anyone who obtains it could read, merge or delete that installation's server progress. There is no password recovery mechanism. The backend stores data on a persistent Railway volume and does not intentionally write sensitive request contents to its application logs. These measures reduce risk but do not guarantee absolute security, uninterrupted availability or recovery of lost device data. Temporary in-memory rate-limit buckets use hashed installation credentials for private progress requests and hashed source network addresses for anonymous aggregate submissions; these buckets expire after one minute and are not written to the database.

Children’s privacy

Why land Friendly is a casual puzzle game that younger players may use. It does not ask for a player's age, real name, email, contacts, precise location or advertising identifier, and has no advertising, purchases, public profiles, chat or social sharing service. The game can be played fully offline without enabling sync or reminders.

Parents and guardians should help younger players decide whether to enable optional online sync or local notifications. If you believe a child has provided information that should be removed, contact jago.merriweather@icloud.com or use the installation's server-deletion control. The absence of an account means an email address alone does not identify stored progress. We do not claim to know a player's age or to have verified parental consent.

Changes to this policy

We may update this policy when the game's features, service operation or applicable obligations change. The effective date at the top identifies the current published text. The public policy is available at https://why-land-friendly.cyou/privacy and through the app's settings.

If a future change introduces materially different optional processing, the app and policy should explain that change before the new choice is used. This policy describes the current local game, optional installation-based progress service, anonymous level totals and optional local notifications. Contact jago.merriweather@icloud.com with questions about the policy or a change.