Privacy policy
Effective 2026-10-20. Controller: Software Notion, Kornblumenring 40, 31600 Uchte, Germany. Contact: support@software-notion.de.
Ashen Descent does not ask for your name, e-mail address, phone number, location, contacts or advertising identifier. There is no advertising, no tracking across apps or websites and no analytics SDK in our backend. You play with a pseudonymous guest profile that the game server creates for you.
What the game server stores and why
| Data | Purpose | Retention |
|---|---|---|
| Random profile identifier, generated display name, chosen avatar, palette and title, career XP | Provide your profile, cosmetics and leaderboard entries | Until you delete the profile; profiles without any activity for 730 days and without unused purchased lives are deleted automatically |
| Session records (platform ios/android, app version, creation and refresh times) and hashed refresh tokens | Keep you signed in securely, detect stolen tokens | Up to 730 days after last use; removed with the profile |
| Recovery code verifier (a keyed hash; the code itself is never stored) | Let you move your profile to another device | Until you revoke or rotate it or delete the profile |
| Wallet: daily-life usage per day, purchased-life balance, owned daily-lives passes and a ledger of every change | Enforce the daily lives and keep paid value safe | Until you delete the profile |
| Expeditions: seed, ruleset, input recording (uploaded once when the run ends), timestamps, verified score and outcome | Verify results server-side, leaderboards | Input recordings are deleted right after verification unless the run places in the top 1000 of a leaderboard; those are kept while they stay there plus 7 days, rejected runs 30 days. Run summaries until you delete the profile |
| Leaderboard entries (display name, avatar, title, score, time, level, outcome) | Daily, weekly and lifetime leaderboards visible to all players | Until you delete the profile |
| Purchase records: store (Apple/Google), store environment, transaction ID or purchase token, order ID, product, quantity, timestamps, refund state; a random purchase-binding identifier sent to the store with your purchase | Verify purchases with Apple/Google, credit lives once, unlock daily-lives passes, process refunds, prevent fraud, accounting | Kept after profile deletion without any link to your profile (see below) |
| Store notifications (refund and purchase events from Apple/Google) | Process refunds and late purchase confirmations | 90 days |
| Technical logs (request path, status, duration; no tokens, codes or purchase tokens) | Operate and secure the service | Rotated automatically (a few days) |
| IP address | Transient rate limiting against abuse; not stored in the database | Memory only, minutes |
Service providers
Purchases are processed by Apple (App Store) or Google (Google Play). To verify a purchase our server sends the transaction identifier or purchase token to Apple's App Store Server API or Google's Play Developer API and receives the purchase details. Apple and Google send us refund and purchase notifications. Their own privacy policies apply to your store account. We do not sell or share your data with anyone else.
Deletion
You can delete your profile in the app or on the deletion page. Deletion removes your profile, sessions, recovery code, wallet and ledger, expeditions and leaderboard entries immediately. Unused lives are lost and cannot be restored. Daily-lives passes stay with your store account and can be restored on a new profile. Purchase records are kept without any link to you because we need them for accounting, tax and to prevent the same purchase proof from being credited again; they contain no name or contact data. Deleted profiles stay deleted even if we restore a database backup: we keep a separate deletion journal (random profile identifiers only) for 400 days to re-apply deletions after a restore.
Export
You can download a JSON copy of your data from the app (Profile → Export data).
Your rights
Depending on where you live you may have rights to access, correct, delete or port your data and to object to processing, and you may complain to a data protection authority. Contact support@software-notion.de. Because profiles are pseudonymous, we may ask you to prove ownership with a deletion code or recovery code from the app.
Children
Ashen Descent is intended for teens and adults and is not directed at children.