Who we are
Stepfarer is made by BricksInPockets, who is responsible for your data. Write to support@coupecreative.com about anything in this policy.
What we collect
Your Google account ID
You sign in with Google. Google tells the game a number that stands for your Google account, and we keep that number so the same account always opens the same game. Google's sign-in also passes your name and email address to the app; the server ignores them and never stores them.
Your game save
Your progress: skills and levels, items and gems, where you are in the world, the route you're walking and the step totals the game keeps. We store your latest save and the five before it, so a bad sync can be undone, along with which kind of device saved it (watch or phone) and when.
Sign-in sessions
For each watch or phone you sign in on: whether it's a watch or a phone, when it signed in, and a scrambled (hashed) copy of its sign-in token.
Purchases
When you buy gems, Google Play gives us an order number and a purchase token. We keep the order number, the pack, the gems added, the dates and a hashed copy of the token, and your history of gem purchases and refunds.
Steps
The app reads your watch's or phone's step counter, with the Physical activity permission you grant. Steps become progress in your save; we don't upload a timeline of your walking, and the game never reads your location.
Server logs
Each time the app or this website talks to our server, Cloudflare, who hosts it, records the request with its IP address and time. We use these logs to keep the service running and secure, and we use IP addresses for a few seconds to slow down repeated sign-in attempts.
Why we use it
To run the game you asked for: keeping your progress safe, moving it between your watch and phone, and crediting what you buy. This is necessary to provide the game (the contract between us). We use server logs and slow down repeated sign-in attempts because we have a legitimate interest in keeping the service secure.
Who else handles it
- Google runs the sign-in and Google Play payments, under Google's privacy policy.
- Cloudflare hosts our server and database, in Western Europe, under Cloudflare's privacy policy.
We don't sell your data or share it with anyone else, and the game shows no ads.
How long we keep it
- Your account, save and purchase history: until you delete your account.
- Older saves: the five most recent are kept; older ones are deleted as new ones arrive.
- Sign-in sessions: they expire after 60 days without use and are deleted a week later.
- Server logs: up to 7 days.
Deleting your account
In the app, go to More, then Delete account. Without the app, sign in on stepfarer.com/delete-account. Both delete your account, every copy of your save, your sessions and your gem history straight away. Gems and anything bought with them are lost.
Purchase records stay, with the link to your account removed, so a purchase can never be credited twice. A save on your watch or phone stays there until you uninstall the app or clear its data.
Your rights
You can ask for a copy of your data, ask us to correct or delete it, or object to how we use it. Email us and we'll answer within a month. You can also complain to the data protection authority where you live; in the UK that's the Information Commissioner's Office (ico.org.uk).
Children
Stepfarer isn't meant for children under 13. If you think a child under 13 has signed in, email us and we'll delete the account.
Changes
When this policy changes, we'll update the date at the top. If a change affects what we collect, the app will tell you before it applies.