Bone Brag: Privacy Policy
The short version
Bone Brag has no accounts, no ads, no analytics and no tracking. Your progress stays on your phone. If you play online, our server holds what it needs to run your table, in memory, for as long as the table lasts.
What stays on your device
- Your save (
save.v1.json): dice collection, loadout, rivals beaten, wins, menu picks, settings, and your online name and raccoon. - Your Ledger (
ledger.v1.json): the play statistics on the Ledger screen, meaning sessions, matches, your Ten Thousand decisions and button counters. If this file ever can't be read, the app keeps the unreadable copy beside it (ledger.v1.bad-<time>.json) rather than deleting it. - A resume token (
hb.net.token, stored in the app's own preferences): a random code that lets you return to an online table after a dropped connection.
None of this is sent to us or to anyone else, except the resume token when you play online, as described below. All of it is removed when you delete the app.
Test builds (TestFlight) also add frame rate and heat readings from your phone to the Ledger, and have an "Export playtest log" button. It makes a file from your Ledger, adding your phone's model and iOS version, and hands it to the iOS share sheet. It leaves your phone only if you choose where to send it. The App Store version has neither.
Online play
Solo play uses no network. If you choose to play online, the app connects to our server and sends:
- your name, as two positions in a fixed word list (there is no typing and no free text anywhere in the game)
- which raccoon and outfit you picked
- your moves and the fixed emotes you tap
- your resume token, if you have one
The server keeps this in memory only. It has no database and writes nothing to disk. Your seat and token last while your table is open. A dropped connection can resume for 5 minutes. A server restart clears everything. Other players at your table see your name, raccoon, outfit, moves and emotes.
Any server you connect to sees your IP address while you are connected. Ours uses it only to limit how many connections one address can open, and holds that count in memory while you are connected. Neither the game server nor our web proxy writes your address to a log. The server runs at DigitalOcean in Frankfurt, Germany.
Online play and this website reach that server through Cloudflare, which protects it from attacks and handles encryption on the way. So Cloudflare also sees your IP address and what you send while you are connected, and may keep security and network records under its own privacy policy. We don't use it to identify or track you.
What we don't do
We don't sell data, show ads, use third-party SDKs, or track you across apps and websites. The only outside service your data passes through is Cloudflare, as described above. We don't ask for your location, contacts, photos, camera or microphone.
Children
The game has no accounts, no free text and nothing a player writes that another player can read. We don't collect personal data from anyone, at any age.
Your choices
Deleting the app removes everything on your phone. Online data ends with your table, or at the latest when your token expires. We hold nothing that identifies you after that, so there is nothing for us to look up, export or delete.
Changes
We will update this page and its date when any of this changes, and say so in the app's update notes if the game starts to collect anything, for example for online leaderboards.