Wildlane Privacy Policy

Summary

• There are no accounts, no ads and no tracking.
• Your progress is saved on your device.
• We may offer jewel packs and similar in-app purchases through the App Store or Google Play. Apple or Google process the payment; we never receive or store your full payment card number.
• When you redeem a gift code, or a promotional or access code when one is offered, our server stores the code (as a one-way hash), a random device ID created by the game, and the time, so each code can only be used as intended.
• After an online match, the game may send anonymous gameplay statistics (for example which cards and heroes were used, arena, region, and win/loss) so we can balance the game and show public aggregate stats on playwildlane.com/stats. These events do not include your name, email, or advertising ID.
• Our web host (Vercel) keeps standard request logs and, on the website, privacy-friendly cookieless visit statistics.
• We do not sell your data or share it for advertising.

Data stored on your device

The game saves your progress in your browser's or the app's local storage (localStorage): cards, decks, coins, jewels, medals, settings, language, tutorial state, the player name you choose in Settings, a list of gift codes already used on that device, and a random device ID (a string of letters and numbers generated by the game; it is not your phone's hardware or advertising ID). This data stays on your device and is not sent to us, except as described below. We do not use cookies.

Data sent to our servers

Promotional or access codes (/api/redeem). When we offer a promotional or access code and you enter it, the game sends the code and the random device ID to our server. The server checks the code against a list of one-way hashes and records the code's hash, the device ID and the time of first use, so a code works only as intended.

Gift codes (/api/gift). When you redeem a gift code, the game sends the code and the random device ID. The server records the code's hash, the device ID and the time, so each gift code can be used only once.

Anonymous match statistics (online matches). When you finish an online match, the game may send a match-end event to our servers. That event can include gameplay counters such as cards, decks and heroes used, arena, region, and whether you won or lost. It does not include your player name, email, phone number, or any advertising ID. We use these events only to balance the game and to publish aggregated, non-identifying statistics on the public meta page at https://www.playwildlane.com/stats. We do not sell this data and do not use it for advertising or cross-app tracking. Individual events are retained only as long as needed to build and refresh those aggregates; aggregated stats may be kept while the public meta page is offered.

Abuse protection. To limit brute-force guessing, your IP address is used as a short-lived rate-limit counter that is deleted automatically after about 2 minutes.

Where it is stored. These records are kept in a Redis database run by our hosting provider's storage partner (connected through Vercel). They do not contain your name, email, or contact details.

In-app purchases

In the apps we may offer jewel packs and similar purchases through the Apple App Store or Google Play. Payment is handled entirely by Apple or Google under their own terms and privacy policies. We do not receive or store your full payment card number or billing details. To unlock what you bought, purchase receipts or transaction IDs may be validated with Apple or Google. We use this information only to deliver and restore your purchases and to prevent fraud.

Friend battles (peer-to-peer)

If you choose to play a friend battle with a room code, the game connects you directly to the other player using WebRTC. To set up the connection it uses the public PeerJS signalling service (0.peerjs.com) and Google STUN servers (stun.l.google.com). These services, and the other player's device, can see your IP address, as with any direct online connection. During the battle your chosen player name and deck are sent to the other player. We do not store friend battle data, and there is no chat.

Hosting, logs and statistics

The website and API are hosted by Vercel Inc. Like any web host, Vercel automatically records technical request logs (for example IP address, browser/user agent, requested page, time) to deliver and secure the service; these are kept for a limited time under Vercel's retention rules. On the website we may use Vercel Web Analytics, which counts visits without cookies and without identifying you (it reports aggregated data such as pages viewed, referrer, country, browser and device type). The apps do not include advertising SDKs. Match statistics are sent only as described under “Data sent to our servers” above, not through third-party ad or marketing SDKs.

What we do not do

• No accounts or social sign-in, and we do not ask for your email to play.
• No advertising, no ad SDKs, no advertising ID, and no App Tracking Transparency / IDFA use.
• No storage of full payment card numbers — Apple and Google process payments.
• No location, contacts, photos, microphone or camera access.
• No selling of personal data and no cross-app tracking.

Why we use data (legal basis)

We use the data above only to run the game (deliver the game, check gift codes and promotional or access codes, run friend battles, balance gameplay, publish anonymous aggregate meta stats, and fulfil purchases) and to keep the service secure and prevent abuse. Under the EU/UK GDPR this is based on our legitimate interest in running a secure, fair game and on the performance of the service you ask for.

How long we keep it

Data on your device stays until you delete it (see below). Gift-code and access-code records are kept while those code systems are running. Anonymous match-end events are kept only as long as needed to refresh aggregates; public aggregates may remain while /stats is offered. Rate-limit counters expire after about 2 minutes. Host logs are kept under Vercel's standard retention.

Your choices and rights

Delete your local data: clear the site data in your browser, or clear the app's storage / uninstall the app. This removes your save; it cannot be recovered.

Server records: email playwildlane@gmail.com with your request. Because we do not know who you are, tell us the code you used so we can find and delete the matching record.

If you are in the EU/UK you have the right to access, correct, delete, restrict or object to processing of your personal data, and to complain to your data protection authority (in Italy: the Garante per la protezione dei dati personali, www.garanteprivacy.it).

International transfers

Vercel and its storage partners may process data in the United States and other countries. They use standard contractual safeguards for transfers from the EU/UK.

Children

Wildlane is not directed at children under 13, and we do not knowingly collect personal data from them. If you are under the age of digital consent in your country (for example 14 in Italy, up to 16 elsewhere in the EU), please play only with a parent's or guardian's permission. Parents can contact us to delete any data.

Changes

We may update this policy when Wildlane's features change. We will update the date above and, for important changes, let players know in the game or on the website.

Contact

Wildlane (Bryan Allen) · playwildlane@gmail.com