Privacy Policy
Gem Maker’s Desk
This policy explains how this application handles information and how to contact us about privacy.
Information we process
Gem Maker’s Desk stores your active stone, cut planes, polish values, level completion, saved gemstone attempts, dates and preferences locally on your device. Optional cloud synchronization is off by default. When enabled, it sends progress and collection metadata, including stone parameters, cuts and polish, to our server. No images, contacts, precise location or account details are requested. A random installation secret is generated on your device and stored in the iOS Keychain; the server stores only a SHA-256 hash as the data namespace. Our public endpoints pass through Cloudflare, which terminates HTTPS and forwards requests to the Railway-hosted service. Cloudflare and Railway also receive ordinary network information such as IP address, request time, route and connection details when the app or a browser makes a request, including visits to this policy.
How we use information
Local game data allows offline play, automatic resumption, level progression and your personal collection. Optional synchronization stores and retrieves metadata belonging to the same installation secret. The secret authorizes access and deletion; it is not an account and cannot recover data on another device after the secret is lost. Network and operational information is used to deliver the service, maintain availability and investigate failures. We do not use advertising or analytics SDKs and do not send marketing email.
Service providers and sharing
Cloudflare provides the public HTTPS reverse proxy and processes requests, including optional synchronization metadata, installation bearer credentials in transit, IP addresses and connection information, to forward them to our service. The backend runs on Railway and uses a persistent Railway volume for its SQLite database. Railway and its infrastructure providers process hosting, connection and operational information to provide this service. The app uses Apple system frameworks for rendering, local storage, Keychain, sound and networking; it includes no third-party tracking SDK. We do not sell personal data or share game metadata with advertisers. Infrastructure logs may be available to Cloudflare, Railway and the service operator for operations. We cannot state a fixed provider log-retention period.
Data retention
Game data remains on your device until you erase it in Settings or remove the app, subject to iOS storage and backup behavior. Keychain storage is device-only and may persist after app removal; reinstalling does not promise recovery. Synchronized metadata remains in the service database until deletion is requested using the installation secret. No automatic expiration period is configured. The application does not create its own cloud backups of the server database or configure a backup schedule. Provider infrastructure copies or logs may persist according to provider practices; deletion from the live database does not promise immediate erasure of every infrastructure copy.
Deleting your information
Settings provides separate controls to erase local progress and collection, or delete this installation’s cloud data. Cloud deletion requires connectivity and the installation secret, reports a failure if the request cannot complete, and disables synchronization to avoid uploading the local copy again. It leaves local gems intact. Erasing local progress disables synchronization and does not automatically delete the server copy. If you enable synchronization again, retained server data may return. For complete removal, delete cloud data first and then erase local progress. If the installation secret is lost, we cannot identify or restore that anonymous namespace through an account. Privacy questions and deletion concerns can be sent to FrithugythCavendry@icloud.com; do not send your installation secret.
Permissions and your choices
The app does not request location, camera, photos, microphone, contacts, notifications or tracking permission. Sound and haptic preferences can be changed in Settings. Optional network synchronization can be turned off at any time; this stops future automatic synchronization but does not delete existing server data. Use the cloud-deletion control to remove it. System-level restrictions and removal of the app are managed through iOS Settings.
Your privacy rights
Depending on your jurisdiction, you may have rights to access, correct, delete or restrict processing of personal information. You can inspect game records in the app and delete local or synchronized data through Settings. Contact FrithugythCavendry@icloud.com for privacy questions or to exercise applicable rights. We may need information sufficient to understand the request, but no user account or email-based recovery system exists. You may also contact your competent data-protection authority where applicable.
Security
Production connections use HTTPS. Cloudflare terminates public HTTPS and proxies requests to the Railway service over HTTPS. Private sync endpoints require the installation-specific bearer secret, and storage is separated by its cryptographic hash. The secret is generated with the system secure random generator and stored as a device-only Keychain item; no shared installation credential is embedded in the app. Request sizes, document shapes and timestamps are validated. Public home, health and privacy pages require no login or cookies. No security method is absolute; protect access to your device and do not disclose the installation secret.
Children’s privacy
Gem Maker’s Desk is a calm mineral-cutting game intended for a general older-teen and adult audience, including players aged 16 and above. It does not ask for age or knowingly solicit children’s contact details. If you believe a child has provided personal information through the service, contact FrithugythCavendry@icloud.com so we can assess available deletion options without an account system.
Changes to this policy
We may update this policy when the game or its processing changes. The current policy and its effective date will be published at this address and remain linked from the app’s Settings. Material changes will be described in an updated policy. Please review it when using optional synchronization.