Cardage Privacy Policy: iPhone app

Last updated 16 October 2026

Who makes the app

Cardage is made and sold by Burning Hope Games LLC, a Washington limited liability company ("we", "us"). Questions and requests about this policy go to support@cardage.io.

This policy covers the Cardage app for iPhone, from the App Store. Cardage on the web, at cardage.io, has sign-in and a leaderboard of its own, which the app does not, and has its own privacy policy. The Android app has its own too.

What stays on your phone

The game saves to the app's own storage on your phone, which iOS keeps from other apps. None of this is sent to us:

• your saved games, in each mode and save slot: the progress you have unlocked, and any run in progress, with a record of the choices you have made in it
• your settings, such as sound and graphics quality
• whether your Apple Account owns the full game, as the App Store last said, so the game still opens as it was without a connection
• if you have sent a wish, a random identifier, made by the app, that groups your wishes (below)

A copy of your saved games in the Keychain. The app also keeps a copy of your saved games (not your settings) in the iPhone's Keychain, the phone's own protected storage, so that deleting the app and installing it again does not lose your progress. Deleting the app erases its own storage, but iOS usually leaves what it put in the Keychain, so the game starts where you left off when you install it again. This copy is never sent to us. It goes with an encrypted backup of your phone (in iCloud or on a computer), so it can come back on a new iPhone; that backup is Apple's, under your Apple Account, and we cannot see it.

Counting runs

So we can see how much the game is played and where, the app tells the game's server, anonymously, each time a run starts, and how it ends (which ending, a fall, abandoned, or stopped where the free part of the game ends). Nothing goes with it that identifies you or your phone. The country is worked out from your internet address when the count arrives, and the address is then discarded. What is kept is only a total per day, per country. Countries are looked up with IP Geolocation by DB-IP, used under the Creative Commons Attribution 4.0 licence.

Wishes

Wishes are messages you send us from inside the game, with an optional picture, and your run if you choose to add it. They are private: only you, on your phone, and we can read your wishes and the replies to them.

• A wish is stored with the random identifier from your phone (above), and nothing else about you: not your name, your email address, your Apple Account or your Game Center profile. The identifier is made with your first wish, and only ever sent with your wishes, and with the game asking the server for our replies to them.
• Pictures, only if you pick one, are kept in private storage that only the game can read, and are deleted automatically after one year.
• Your run, only if you press "Add my run": how it began (the hero, the run's random seed, and what you had unlocked) and every choice you made in it (which room, which card, which reward), with the game's version. It lets us play your run back and see what you saw. With it go the technical details of your phone, so we can see what went wrong on it: the iOS and browser engine versions, the screen's size, the number of processor cores and the graphics chip as the browser engine reports them, whether you play by touch or with a controller, the game's graphics and sound settings, and a log of the moments the game stalled or lost its pictures, and when something was pressed. It holds nothing else about you. It is kept with the wish, in the same private storage as pictures, and deleted with the wish, or after one year at most.
• You can take back a wish, or delete any line you wrote, from inside the game. If you delete the app, you may no longer see your wishes in it; they stay with us until you ask us to delete them.

Preventing abuse

To stop anyone flooding the game with messages or counts, the server counts how often requests come from the same internet address. It stores a one-way scrambled form of the address for that count, never the address itself, and deletes it within a few hours.

Leaderboards and achievements: Game Center

The leaderboards and achievements are Apple's Game Center's. When the game starts, Game Center signs you in with your Game Center profile, if you have one or choose to make one; you can turn Game Center off in your iPhone's Settings. When you finish a run in Normal mode, the app gives your score to the Game Center leaderboards, and it tells Game Center the achievements you have earned.

Apple keeps your Game Center profile (its nickname and picture), your scores and your achievements, and shows them to other players as your Game Center settings allow, under Apple's privacy policy. We see the leaderboards as other players do. Apple does not give us your name, email address or Apple Account through Game Center.

Buying the full game

The full game is bought from the App Store, inside the app. Apple takes the payment and keeps your payment details, under Apple's privacy policy. We never see your card number.

The app asks the App Store only whether your Apple Account owns the full game, and, when you press Restore purchase, to bring back a purchase you made before. It sends nothing about the purchase anywhere else.

Apple tells us how many copies were sold, where (by country or region), and for how much, so we can be paid and keep our accounts. It does not tell us who bought them. We keep only what tax and accounting law requires us to keep about our sales.

What Apple tells us about the app

If you have chosen to share analytics with app developers on your iPhone (Settings, Privacy & Security, Analytics & Improvements), Apple also tells us when the app crashed, and how much it is used, in totals. It tells us nothing about who you are.

The services the game runs on

These companies serve the game. They see your internet address and the ordinary details of each request, as any website does, and keep their own records under their own policies:

• Google Firebase: the game's server, which takes the counts and the wishes, its database, and the private storage for wishes' pictures and runs. Firebase privacy
• Cloudflare: the game's larger pictures, fetched when the camera comes close; and email to cardage.io addresses. Cloudflare privacy policy
• Apple: the app itself, the purchase of the full game, and Game Center. Apple's privacy policy

Your data may be stored and processed in the United States and other countries where these companies operate.

What the app does not do

• No accounts of our own. The leaderboards and achievements are Game Center's.
• No ads, no ad networks, and no advertising identifier.
• No analytics beyond the anonymous count of runs, and no tracking.
• No access to your location, contacts, microphone, photos or files. A picture goes with a wish only if you choose one yourself: one you pick from your photos, which shows the app only that picture, or one you take with the camera, which iOS asks your permission for first.
• No selling or sharing of your information for marketing, with anyone.

Keeping it safe

Everything the app sends, to the game's server and to Apple, goes over encrypted connections. Wishes, their pictures and runs are kept in storage that only the game's server can read, and the counts hold nothing about anyone. Your saved game does not leave your phone, except in your phone's own backup (above).

If you write to us

If you write to support@cardage.io, we keep your email address and what you wrote, to answer you, until you ask us to delete them. Email to cardage.io addresses is passed on to us by Cloudflare.

How long things are kept

• What the app keeps on your phone: until you erase it in the game, or delete the app. The copy in the Keychain: until you erase it in the game (below).
• The counts of runs: as totals per day and country, which identify no one.
• Wishes and replies: until you delete them, or ask for them to be deleted. Pictures and runs sent with wishes: one year at most.
• The scrambled addresses used to prevent abuse: a few hours.
• Your Game Center profile, scores and achievements: kept by Apple, under your Game Center settings.
• Your purchase: Apple keeps its record of it, under its own policies. We keep what tax and accounting law requires, for as long as it requires.
• Emails you send us: until you ask us to delete them.

Deleting your data

The app has no accounts of its own, so there is no account to delete. To delete your saved games, both in the app's storage and in the Keychain, use Erase everything in the game's options. That erases them for good. Deleting the app alone leaves the Keychain's copy, so that installing it again brings your progress back. Neither takes away the full game: that belongs to your Apple Account, and the app finds it again on the App Store.

Your wishes you can take back from inside the game. To have them deleted after you have lost sight of them, write to support@cardage.io and say roughly when you sent them and what they said, so we can find them. Your Game Center profile, scores and achievements you can delete in your iPhone's Settings (Game Center) or at privacy.apple.com.

What a request does not delete: the counts of runs, which are totals per day and country and identify no one; and the record of a purchase, which Apple keeps under its own policies, and we keep for as long as tax and accounting law requires. The scrambled addresses used to prevent abuse are deleted on their own within a few hours.

Your rights

You can write to support@cardage.io with any question about your data, or to have your wishes or any email you sent us deleted. Depending on where you live, you may have further rights under local law, and you may complain to your local data protection authority.

Children

Cardage is not directed at children under 13, and does not knowingly collect information from them. If you believe a child under 13 has sent a wish, write to support@cardage.io and it will be deleted.

Changes to this policy

If what the app does with your information changes, this page will be updated before the app is, and the date at the top changed.