Privacy Policy
Rainbound Hotel Escape
This policy explains how this application handles information and how to contact us about privacy.
Information we process
Rainbound Hotel Escape stores game progress, room and object positions, water levels, inventory, completed zones, language, sound, vibration, hint preferences and optional reminder settings locally on your device. If you choose private backup, the app automatically obtains a random installation identifier and secret. The identifier, a hash of the secret, and creation time are stored on the server. The device keeps the secret and a separate encryption key in its Keychain. Only an encrypted progress snapshot, its schema version and update time are uploaded. We do not request a name, email address or account. Public version and website requests also reach our hosting infrastructure, which processes technical connection data such as IP addresses, timestamps and HTTP request information.
How we use information
Local data lets you resume the six-zone adventure offline and retain your preferences. Optional server storage lets this same installation save and restore an encrypted backup. The server checks an installation-specific secret to prevent access by other installations. The public content-version endpoint supplies zone text updates. An optional local notification reminds you to continue; its content is scheduled on your device and is not sent to a messaging provider. Temporary server rate-limit information helps protect service availability.
Service providers and sharing
The backend and PostgreSQL database are hosted on Railway. Railway and its infrastructure providers process server storage and technical traffic data as needed to operate hosting. The application includes no advertising, analytics, social sign-in or third-party messaging SDKs. Backup encryption happens on your device; the backup encryption key is not uploaded. Apple provides iOS, Keychain and the local notification system. Opening the public policy sends an ordinary web request to the host. We do not sell your information or send it to advertising networks.
Data retention
Local progress and preferences remain until you reset them, remove the app or erase device data, subject to iOS backup settings. Installation credentials and encryption keys use device-only Keychain storage and can persist according to iOS Keychain behavior. Server snapshots remain until replaced or deleted. The installation identifier, secret hash and creation time remain until you delete the server backup; there is no automatic expiry. Temporary in-memory rate-limit entries expire and are cleaned on later requests. Railway infrastructure logs and backups follow the provider's applicable retention; we do not assert a fixed period that we cannot verify. Deleted or superseded data may remain in provider backups until those backups expire.
Deleting your information
In Settings, Delete server backup immediately removes this installation's encrypted snapshot, random identifier, secret hash and creation time from the live database and leaves local progress unchanged. The app discards its corresponding authorization credential; a later optional backup obtains a new private installation. Restart episode resets only the current zone; Play again after the ending starts a new local adventure. Removing the app removes its local application files, but iOS Keychain entries may persist. To request deletion of remaining installation metadata or ask about data, contact osbert.wetherell@icloud.com. Do not send us your secret or encryption key. If the secret or device-only encryption key is lost, we cannot recover or decrypt that backup. Historic provider backup copies cannot necessarily be erased individually and remain subject to the provider's lifecycle.
Permissions and your choices
No camera, microphone, photo library, location or contacts permission is used. Notifications are optional and are requested only when you enable a reminder in Settings. You can cancel the scheduled reminder with that switch and withdraw notification permission in iOS Settings. The adventure works without notification permission or an internet connection. Optional backup, restore, deletion and content-version requests use the network.
Your privacy rights
You can inspect and change local preferences, restart an episode, and manage the optional server snapshot in the app. Depending on your location, applicable law may give you rights to access, correct, delete, restrict or object to processing, or request a copy of personal data. Send privacy questions and rights requests to osbert.wetherell@icloud.com. We may need information sufficient to identify the relevant installation without asking for its secret. You may also contact your local data protection authority where applicable.
Security
The app encrypts snapshots with AES-GCM using a random device-only Keychain key before uploading them over HTTPS. Each installation has a separate random authorization secret; the server stores its cryptographic hash and verifies it for progress requests. Database access is restricted to the backend. Request validation, payload limits, timeouts and rate limits reduce misuse. The application server does not deliberately log request bodies, authorization headers or progress contents; hosting infrastructure may keep technical access logs. Local files use iOS data protection. No storage or transmission system can guarantee absolute security.
Children’s privacy
This atmospheric puzzle adventure is intended for a general teen and adult audience, approximately age 16 and above, and is not directed to children. We do not intentionally request children's identity or contact information. A parent or guardian who believes a child has provided personal information may contact osbert.wetherell@icloud.com.
Changes to this policy
We may update this policy when the app, hosting or data practices change. The current version is published at this public Privacy Policy page with its effective date. Material changes will be described in the updated policy and, where appropriate, in the application. You can review this page at any time from Settings.