Privacy Policy
Gambit Dome Pinball
This policy explains how this application handles information and how to contact us about privacy.
Information we process
Gambit Dome Pinball stores table constructions, saved variants, challenge progress, the current draft and a paused round in a file on your iPhone. Language, sound, vibration settings and a cached challenge catalogue are stored locally. An automatically issued random installation secret is stored in the device Keychain; the service stores a cryptographic hash of that secret and an internal installation identifier and creation time. When synchronization runs, the backend receives your project names, component types, positions and angles, target sequences and personal challenge results, including score, completed goals and duration. Saving a custom workshop table sends the recorded ball positions, contact sequence and timing for validation. The replay is processed for validation and is not saved by the backend; the resulting table is saved. Requests to the API, public home page and privacy page also reach the hosting infrastructure, which receives connection information such as IP address, request path and time. There are no user accounts, contact forms, advertising identifiers or analytics SDKs.
How we use information
Local storage lets you build, play offline, review attempts and reopen constructions. Server storage synchronizes the projects and personal progress associated with the current installation secret. The public catalogue supplies built-in game contracts and is cached for offline use. Replay geometry validation checks that an uploaded custom-table attempt records its targets in order and reaches the receiver; it is not a competitive anti-cheat system. Installation authorization protects private projects and enables deletion. Hosting request and error information is used to operate and troubleshoot the service. No data is used for advertising or email delivery.
Service providers and sharing
The backend and public pages run on Railway, which processes network traffic and hosts the SQLite database on a persistent service volume. Railway and its infrastructure providers receive data needed to provide hosting, including technical connection and infrastructure log information. The app has no third-party analytics, advertising, social sign-in or messaging SDK. Saved tables are private to the installation and are not placed in a public player catalogue. We do not sell personal information. Data may also be disclosed when required by applicable law.
Data retention
Local constructions and settings remain on the device until removed or until app data is removed by the operating system. Keychain storage can survive app removal according to iOS behavior. Server installation records, saved projects and personal progress remain until deleted using the installation secret. A project's saved version replaces its previous version. Replay evidence is handled in request memory for validation rather than retained in the application database. The application has no configured analytics archive or app-managed backup schedule. Railway may retain operational logs or infrastructure copies according to its own service practices; this policy does not assert a fixed provider retention period. Deleting active records does not promise immediate erasure from any residual provider backup or infrastructure copy.
Deleting your information
Delete a saved project in Saved Projects to remove it locally and queue its server deletion; an offline deletion is retried during synchronization. Settings provides Delete all my data, which deletes this installation's server record, projects and progress and then clears local game data and the Keychain secret after the server confirms deletion or confirms that the installation secret is no longer valid. A network failure is shown and does not claim server deletion succeeded. You can separately remove the app's local data through iOS. There is no account recovery or cross-device sign-in. If the device or secret is lost, the app cannot identify or restore that installation's private server data. Contact the privacy address for assistance with data questions, without sending your installation secret. Active database deletion is separate from any provider-controlled residual backup retention described above.
Permissions and your choices
The app does not request camera, microphone, location, contacts, photo library, tracking or notification permissions. Sound and vibration can be disabled in Settings. No geographic map SDK is used. Network access is used for catalogue retrieval, synchronization, workshop validation and the public privacy page. You can stop using online features by disconnecting the device; local built-in play and stored constructions remain available. Removing the app stops its requests, but does not itself request server deletion.
Your privacy rights
Depending on where you live, you may have rights to access, correct, delete, restrict or object to processing of your personal information, and to complain to your local data protection authority. You can inspect and edit your own constructions and delete installation data in the app. Questions or rights requests may be sent to InglebyOakenshaw@icloud.com. This address is a public privacy contact, not an in-app email delivery service. We may need sufficient information to establish that a request relates to your installation, and we cannot promise recovery without the installation secret. Do not send that secret by email.
Security
The production app communicates with the service over HTTPS. A separate high-entropy secret is automatically issued for each installation, stored in the device-only Keychain and sent as a bearer credential. The database stores its hash rather than the secret, and server queries scope private resources to the authorized installation. Inputs and request sizes are bounded. There is no shared client credential, password system or public access to saved projects. These measures reduce risk but no device, network or hosting service can be guaranteed completely secure.
Children’s privacy
The game is designed for a general adult puzzle-game audience, including players aged 18 to 35. It has no gambling, purchases, advertising, public profiles or player messaging. We do not knowingly solicit personal information from children. If you believe a child has provided information requiring removal, contact InglebyOakenshaw@icloud.com. The installation identifier and hosting traffic described in this policy can still be processed whenever the app is used.
Changes to this policy
This policy may change when the application's processing or hosting changes. The current policy is available through Settings and at this public privacy address, with its effective date shown above. Material changes will be reflected in the app or policy page as appropriate. The policy will be updated to describe actual practices rather than assuming that future features already exist.