Privacy

In brief

This policy covers the game Edenfalls: Outpost for iPhone and iPad. The website edenfalls.net has its own privacy policy. The game shows no banners and no ads you have to watch; only if you choose an optional video yourself does it load one from Google AdMob (see below). It contains no analytics or tracking services and no crash reporting of its own, does not track you across other companies' apps and websites, builds no profiles, and never asks for your name or email address. It only processes what its features need, and it keeps running without a connection.

Controller

Tossa · Owner: Tolga Sanli, Josef-Neuberger-Str. 2, 40625 Düsseldorf, Germany, hello@edenfalls.net. See also the legal notice.

Servers and processing on our behalf

The online features run on Supabase (Supabase Inc.), which stores and processes the data on our behalf in its EU region in Ireland (Art. 28 GDPR). Supabase is based in the USA, so access from there cannot be ruled out entirely. For that case, the EU Standard Contractual Clauses in our data processing agreement with Supabase apply.

Game account

On first launch the game creates an anonymous guest account without any action on your part. It consists of a random identifier, a friend code and the name of your outpost, which you choose in the game from a set of options. The game needs the account for cloud saves, purchases, leaderboards, the mailbox and the chat. For every sign-in session, Supabase stores the IP address and the game's technical identifier (user agent) to secure the session, and new guest accounts are limited per IP address so that nobody can create accounts in bulk. The legal basis is providing the game you use (Art. 6(1)(b) GDPR) and, for securing it, our legitimate interest in preventing abuse (Art. 6(1)(f) GDPR).

Sign in with Apple (optional)

You can link your account with Sign in with Apple to take your progress to another device. The game requests neither your name nor your email address; it only stores the identifier Apple assigns for this game. If two accounts are merged in the process, the linked account takes over progress and purchases, and the guest account is deleted. Apple processes the sign-in itself under its own responsibility (apple.com/legal/privacy). The legal basis is Art. 6(1)(b) GDPR.

Cloud saves

The game backs up your progress to the server regularly: about every five minutes, when you leave the game, and after purchases or collected mail. The save contains the state of your outpost, including the names the game generated for your contractors. With each save we store a short summary with your device model and game version, plus a random identifier for your installation, so that you can see where each save came from if two devices conflict. The legal basis is Art. 6(1)(b) GDPR.

Server time and configuration

So that progress while you are away is calculated fairly, the game asks the server for the time, and we store when your account was last active. At launch the game also loads settings and events from the server and sends its version number. The legal basis is Art. 6(1)(b) GDPR.

Leaderboards

The game submits your best results to the leaderboards automatically when you leave it. Other players see your rank, your outpost's name and your score there; for the top hundred entries, the game's interface also returns the friend code and the time. The game also submits three scores to Game Center, where they appear under your Game Center name and Apple processes them under its own responsibility. The legal basis is Art. 6(1)(b) GDPR, because the leaderboards are part of the game.

Outposts to visit

At most every 30 minutes, the game publishes a snapshot of your outpost: its name, the buildings, up to 40 contractors and their appearance, the zones explored, and game statistics such as enemies defeated, ascensions, bosses, breaches, play time and a victory. Other signed-in players can retrieve it with your friend code. It contains no information about you as a person. The legal basis is Art. 6(1)(b) GDPR.

Chat

The game has a public chat for all players. Any account can read it. You can write once you have reached Dispatch 2 in the game, chosen a chat name and accepted the chat rules. You choose the chat name yourself (3 to 16 characters); it is unique across all players and cannot be changed later. For each message we store the text, the channel, your account's identifier and the time. Other players see your messages together with your chat name and your friend code, and can visit your outpost from there (see above). So do not write anything in the chat that should not become public. A filter refuses messages and names with gross slurs, links, email addresses and phone numbers, and the number of messages and reports an account can send in a short time is limited.

We delete messages automatically after 14 days. If you report a message, we store which message it is, your account, the reason, the time and how the report was handled; reports are deleted together with their message. If three different players report the same message, it is hidden for everyone until a moderator reviews it. Moderators can delete messages, dismiss reports, clear offensive chat names and ban accounts from writing for 24 hours, 7 days or permanently; for a ban we store its length, the reason shown to you, the moderator and the time. Your chat profile (name, when you accepted the rules, the last channel you used) and any ban are kept for as long as your account exists. If you block a player, only your device remembers it; our server never learns of it.

The legal basis is providing the chat as part of the game (Art. 6(1)(b) GDPR) and, for the filter, the limits, reports and moderation, our legitimate interest in protecting the chat from abuse and unlawful content (Art. 6(1)(f) GDPR).

Mailbox

Through the mailbox we send messages and gifts, to all players or to individual accounts. Messages between players only exist in the chat. We store which mail you have collected. The legal basis is Art. 6(1)(b) GDPR.

Purchases

You buy the Warden's Charter through the App Store; Apple handles payment and billing, and we receive no payment details. So that the purchase is assigned to your account, the game passes your account's identifier to Apple. After the purchase, our server checks the confirmation signed by Apple and stores the product, transaction numbers, time of purchase, environment (test or live) and any revocation, so that your account keeps what you bought, including on a new device. The legal basis is Art. 6(1)(b) GDPR.

Optional videos (Google AdMob)

From Dispatch 2 on, the game offers Council supplies, a small bonus, up to three times a day. Without the Warden's Charter you can get them by watching a short video from Google AdMob; with the Charter, and whenever no video can be shown, they come without one. You never have to watch a video. Google's ad software only starts when you tap "Watch a video". If you never do, for example because you hold the Charter, no data goes to Google for ads.

When a video loads and plays, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) receives the IP address, from which a general location can be estimated, information about the device and the app (such as model, iOS version, language and app version), a device ID, information about the videos shown and your interaction (started, watched to the end, tapped), and diagnostic and performance data of the ad software. Because the game never asks for Apple's permission to track, Google does not receive the device's advertising identifier (IDFA); the device ID is then one of the "other app- or developer-bounded device identifiers" in Google's words. We have switched off the separate identifier the SDK would otherwise create for us as the publisher (the "publisher first-party ID").

In the EEA, the UK and Switzerland, Google's consent form asks at the first video whether information may be stored on or read from your device and whether ads may be personalised. You get the supplies whatever you answer. Without consent Google shows only limited ads, for which it uses no cookies and no device identifiers for advertising purposes. You can change your choice at any time under More › Settings › Privacy options (videos).

The legal basis for storing and reading information on the device and for personalised ads is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG); for limited ads it is our legitimate interest in financing the free game with optional videos and in preventing fraud (Art. 6(1)(f) GDPR). Google is itself the controller for these ads; see Google's privacy policy and policies.google.com/technologies/partner-sites. Transfers to Google LLC in the USA are covered by the EU Standard Contractual Clauses in Google's data protection terms for ads (Controller-Controller Data Protection Terms); Google lists further transfer mechanisms at business.safety.google/adsdatatransfers. From Google we only receive totals (videos shown, earnings), no data about you. The save records how many supplies you have taken today and in total.

On your device

On your device the game stores your progress, your settings, your account's sign-in data, a random identifier for your installation, the list of players you have blocked in the chat and some intermediate states for syncing. This is strictly necessary for the features you use (§ 25(2) no. 2 TDDDG). If you have chosen a video, Google's consent form also stores your decision on the device. If you have device or iCloud backups switched on, this data is included in them.

Deleting your account

You can delete your account at any time in the game, under More › Settings › Account › Delete account. We then delete your saves, snapshots, leaderboard entries, personal mail, purchases and entitlements, everything in the chat (your chat profile, your messages with the reports about them, your own reports and any ban; your chat name becomes free again), and the account itself with its sign-in sessions; a link with Sign in with Apple is also revoked with Apple. On your device the game removes your progress and starts over with a new guest account. Your purchases stay registered with Apple, and Apple manages your Game Center scores.

How long we keep data

We keep your account's data for as long as the account exists and delete it together with the account. Chat messages and the reports about them are deleted after 14 days already. Technical server logs, which include the IP address, user agent and the function called, are deleted by Supabase automatically after a few days.

Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection, and the right to lodge a complaint with a data protection supervisory authority. You can withdraw a consent at any time with effect for the future, the one for the videos under More › Settings › Privacy options (videos). An informal email to hello@edenfalls.net is enough; include the friend code from the game's settings so that we can find your account.

Last updated: 28 September 2026