Privacy Policy
Extreme Swing Rescue
This policy explains how this application handles information and how to contact us about privacy.
Information we process
Extreme Swing Rescue stores your mission progress, saved round, attempts and replay information, game settings, and synchronization queue on your device. An automatically generated random installation secret is kept in the iOS Keychain. When you connect to the service, the app sends that secret to provision an installation and to authorize its requests. The server stores a one-way hash of the secret, a random installation identifier, creation and update timestamps, completed missions, best mission times and maximum rope tension, and submitted mission records with a retry identifier. The service creates an anonymous Rescue callsign for public records rather than requesting your name. Your IP address and ordinary request metadata are necessarily processed by the hosting infrastructure. There are no user accounts, email or password collection, advertising identifiers, location requests, or analytics SDKs.
How we use information
On-device data lets you continue a round, replay attempts, retain your settings, and play without a connection. The installation credential authorizes access to your own synchronized progress and deletion requests. Server progress supports synchronization for the same installation; it does not provide an account or recovery on another device after loss of the secret. Submitted scores support a public mission leaderboard. Request metadata and temporary rate-limit counters protect the service, diagnose generic errors, and deliver the website and API.
Service providers and sharing
The backend and this public website run on Railway. Railway processes network requests and stores application data on the service's persistent volume as the hosting provider. A public leaderboard displays mission number, time, rope tension, and a generated anonymous callsign to anyone requesting that mission's records; it does not expose your installation secret or full installation identifier. The application does not send data to advertising networks, analytics services, email providers, social sign-in services, or map providers. Application code logs startup and generic error request identifiers without request bodies or authorization headers. Railway may process infrastructure connection and operational logs under its own hosting practices.
Data retention
Local progress, settings, and queued operations remain until you reset them or remove the app's local data. The app keeps the most recent 100 attempts and their replay information, with additional unsent results retained until they are synchronized. iOS Keychain items can persist after uninstalling the app. The server keeps installation progress and each installation's best submitted record per mission until an authorized deletion request is completed; there is no automatic expiry configured. Rate-limit counters are held in server memory for short request windows. This application does not configure scheduled database backups or a fixed retention period for hosting logs. If hosting snapshots or backups exist, their retention and removal are controlled by the hosting provider rather than the application, and deleting active records does not promise immediate removal from such copies.
Deleting your information
Use Delete all data in the app's settings to erase local game data and request deletion of your installation's server records. Server deletion removes the installation, its private progress, and its leaderboard records. If you are offline, the pending deletion credential is retained securely so the request can be retried; remote deletion is not complete until the service confirms it. The old credential is removed after that confirmation. You may contact raileighton@icloud.com with privacy or deletion questions. Do not send your installation secret by email. If the secret is lost, the service has no account identity with which to authorize access or reliably identify your installation for deletion. Copies already obtained by other viewers of public leaderboard data cannot be recalled by the app.
Permissions and your choices
The app does not request access to your location, contacts, camera, microphone, photos, calendar, or notifications. Network communication uses the system internet connection and does not require an additional app permission. You can stop network transmission by disabling connectivity or discontinuing use; local gameplay remains available while offline. Sound, language, control sensitivity, and reduced motion are controlled through the app and system settings. Revoking connectivity does not itself delete server records; use the deletion control when a connection is available.
Your privacy rights
You can view your local progress and attempts, change game settings, and reset your installation through the app. Depending on your location, you may have rights to access, correct, delete, restrict, or object to processing of personal information, and to complain to a relevant data protection authority. Send privacy requests to raileighton@icloud.com. We may need enough non-secret information to understand and verify a request, but the service does not maintain an account or identity directory. A lost installation secret limits our ability to identify and authorize access to the corresponding records. This contact address is for privacy questions; the app does not include a messaging or support-ticket system.
Security
The deployed app communicates with the service over HTTPS. The installation secret is randomly generated and stored in the iOS Keychain; only its SHA-256 hash is stored in the application database. Private progress and deletion operations require the matching installation credential, and one installation cannot read or modify another installation's private progress. Database statements use bound parameters, inputs and payload sizes are validated, and API requests are rate limited. Public pages and leaderboards are intentionally accessible without a credential. These measures reduce risk but cannot guarantee that a device, network service, or stored data will never be compromised. Keep your device secure and never share the installation secret.
Children’s privacy
Extreme Swing Rescue is designed for players aged 14 and older and is not directed to children under 13. The app does not request an age, real name, contact information, or a social profile. Public records use automatically generated callsigns. If you believe a child's personal information has been provided to this service, contact raileighton@icloud.com so the concern can be assessed and any identifiable application records addressed.
Changes to this policy
This policy may be updated when the app's processing or hosting practices change. The current policy is published on this page with its effective date. Material changes will be reflected in the policy and, where appropriate, in the app or its release information. You can revisit the Privacy Policy link in the app's settings to read the current version. Contact raileighton@icloud.com with questions about a change.