Cardage Privacy Policy: Android app

Last updated 8 October 2026

Who makes the app

Cardage is made and sold by Burning Hope Games LLC, a Washington limited liability company ("we", "us"). Questions and requests about this policy go to support@cardage.io.

This policy covers the Cardage app for Android, from Google Play. Cardage on the web, at cardage.io, has sign-in and a leaderboard of its own, which the app does not, and has its own privacy policy.

What stays on your phone

The game saves to the app's own storage on your phone, which Android keeps from other apps. None of this is sent to us:

• your saved games, in each mode and save slot: the progress you have unlocked, and any run in progress, with a record of the choices you have made in it
• your settings, such as sound and graphics quality
• whether your Google account owns the full game, as Google Play last said, so the game still opens as it was without a connection
• if you have sent a wish, a random identifier, made by the app, that groups your wishes (below)

Uninstalling the app, or clearing its storage in your phone's settings, erases all of it.

If your phone's backup is turned on, Android may copy the app's storage into your Google account's backup, as it does for most apps, so it can come back on a new phone. That copy is kept by Google, under your Google account. We cannot see it.

Counting runs

So we can see how much the game is played and where, the app tells the game's server, anonymously, each time a run starts, and how it ends (which ending, a fall, abandoned, or stopped at the end of the demo). Nothing goes with it that identifies you or your phone. The country is worked out from your internet address when the count arrives, and the address is then discarded. What is kept is only a total per day, per country. Countries are looked up with IP Geolocation by DB-IP, used under the Creative Commons Attribution 4.0 licence.

Wishes

Wishes are messages you send us from inside the game, with an optional picture, and your run if you choose to add it. They are private: only you, on your phone, and we can read your wishes and the replies to them.

• A wish is stored with the random identifier from your phone (above), and nothing else about you: not your name, your email address or your Play Games profile. The identifier is made with your first wish, and only ever sent with your wishes, and with the game asking the server for our replies to them.
• Pictures, only if you pick one, are kept in private storage that only the game can read, and are deleted automatically after one year.
• Your run, only if you press "Add my run": how it began (the hero, the run's random seed, and what you had unlocked) and every choice you made in it (which room, which card, which reward), with the game's version. It lets us play your run back and see what you saw. With it go the technical details of your phone, so we can see what went wrong on it: the Android and browser engine versions, the phone's model as its browser engine reports it, the screen's size, the memory, the number of processor cores and the graphics chip, whether you play by touch or with a controller, the game's graphics and sound settings, and a log of the moments the game stalled or lost its pictures, and when something was pressed. It holds nothing else about you. It is kept with the wish, in the same private storage as pictures, and deleted with the wish, or after one year at most.
• You can take back a wish, or delete any line you wrote, from inside the game. If you uninstall the app or clear its storage, you can no longer see your wishes in it; they stay with us until you ask us to delete them.

Preventing abuse

To stop anyone flooding the game with messages or counts, the server counts how often requests come from the same internet address. It stores a one-way scrambled form of the address for that count, never the address itself, and deletes it within a few hours.

Leaderboards and achievements: Google Play Games

The leaderboards and achievements are Google Play Games'. When the game starts, Play Games signs you in with your Play Games profile, if you have one or choose to make one; you can turn that off in Play Games. When you finish a run in Normal mode, the app gives your score to the Play Games leaderboards, and it tells Play Games the achievements you have earned.

Google keeps your Play Games profile (its name and picture), your scores and your achievements, and shows them to other players as your Play Games settings allow, under Google's privacy policy. Google also collects information about how Play Games runs on your phone, to keep it working. We see the leaderboards as other players do. Google does not give us your name or email address through Play Games.

Buying the full game

The full game is bought from Google Play, inside the app. Google takes the payment and keeps your payment details, under Google's privacy policy. We never see your card number.

The app asks Google Play only whether your Google account owns the full game, and confirms each purchase to Google Play, as Google requires. It sends nothing about the purchase anywhere else.

Google shows us each order in its Play Console: the order number, what was bought, the price, the tax and fees, the date, and where it was bought (the country, and in some places the state or postal code). It also lets us find an order by the email address of the Google account that bought it, so we can help with a purchase, or refund it, when you ask. These records are kept by Google. We keep only what tax and accounting law requires us to keep about our sales.

What Google tells us about the app

If you have chosen to share usage and diagnostics with Google on your phone, Google Play also tells us when the app crashed or froze, with the phone's model and Android version. It tells us nothing about who you are.

The services the game runs on

These companies serve the game. They see your internet address and the ordinary details of each request, as any website does, and keep their own records under their own policies:

• Google Firebase: the game's server, which takes the counts and the wishes, its database, and the private storage for wishes' pictures and runs. Firebase privacy
• Google Play: the app itself, the purchase of the full game, and Play Games. Google privacy policy
• Cloudflare: email to cardage.io addresses. Cloudflare privacy policy

Your data may be stored and processed in the United States and other countries where these companies operate.

What the app does not do

• No accounts of our own. The leaderboards and achievements are Google Play Games'.
• No ads, no ad networks, and no advertising ID.
• No analytics beyond the anonymous count of runs, and no tracking.
• No access to your location, contacts, camera, microphone, photos or files. It asks Android only to go online and to use Google Play's billing. A picture goes with a wish only if you pick it yourself.
• No selling or sharing of your information for marketing, with anyone.

Keeping it safe

Everything the app sends, to the game's server and to Google, goes over encrypted connections. Wishes, their pictures and runs are kept in storage that only the game's server can read, and the counts hold nothing about anyone. Your saved game does not leave your phone, except in Android's own backup (above).

If you write to us

If you write to support@cardage.io, we keep your email address and what you wrote, to answer you, until you ask us to delete them. Email to cardage.io addresses is passed on to us by Cloudflare.

How long things are kept

• What the app keeps on your phone: until you clear the app's storage or uninstall it.
• The counts of runs: as totals per day and country, which identify no one.
• Wishes and replies: until you delete them, or ask for them to be deleted. Pictures and runs sent with wishes: one year at most.
• The scrambled addresses used to prevent abuse: a few hours.
• Your Play Games profile, scores and achievements: kept by Google, under your Play Games settings.
• Your purchase: Google keeps its record of it, under its own policies. We keep what tax and accounting law requires, for as long as it requires.
• Emails you send us: until you ask us to delete them.

Deleting your data

The app has no accounts of its own, so there is no account to delete. To delete everything the app has kept on your phone, uninstall it, or clear its storage in your phone's settings for the app (Storage, then Clear storage or Clear data). That erases your saved games for good. It does not take away the full game: that belongs to your Google account, and the app finds it again on Google Play.

Your wishes you can take back from inside the game. To have them deleted after you have lost sight of them, write to support@cardage.io and say roughly when you sent them and what they said, so we can find them. Your Play Games profile, scores and achievements you can delete in the Play Games app or your Google Account.

Your rights

You can write to support@cardage.io with any question about your data, or to have your wishes or any email you sent us deleted. Depending on where you live, you may have further rights under local law, and you may complain to your local data protection authority.

Children

Cardage is not directed at children under 13, and does not knowingly collect information from them. If you believe a child under 13 has sent a wish, write to support@cardage.io and it will be deleted.

Changes to this policy

If what the app does with your information changes, this page will be updated before the app is, and the date at the top changed.