This is not a finalized production privacy policy. Operator/contact details, provider configuration, audience, applicable legal bases, retention periods, and deletion operations must be confirmed before store submission. Prepared October 17, 2026; no effective date has been set.
Operator/data controller: Not yet confirmed.
Privacy contact: Not yet operational. See player support.
Information used by American Escape
Progress/settings are stored on the device. Online Guest play may use an anonymous Supabase account identifier without an email or password.
Email, account identifiers and authentication sessions support email/password sign-in and cloud recovery. Supabase Auth handles passwords and recovery tokens.
Supported cloud records include coin balance, destination ownership, inventory, scores, distance, selections, settings, Passport progress and Secret Finds. Not every local record is necessarily synchronized.
Apple/Google process supported mobile payments. Verification uses product/transaction IDs, account association and a ledger to prevent duplicate coin delivery. The game does not collect payment-card numbers.
Session credentials are cached locally to keep you signed in. Passwords and email recovery codes are not stored in the game save file. Support requests, when support opens, may include your contact address, message, and any diagnostic information you choose to provide.
Why information is used
To run the game, authenticate and recover profiles, synchronize supported progress, deliver verified purchases, prevent duplicate/fraudulent credits, process deletion requests and provide support. Applicable legal bases and region-specific disclosures remain subject to operator review.
Service providers
Supabase provides authentication, cloud storage/database services and server functions. Apple and Google provide their respective mobile purchase services. The website is prepared for Cloudflare hosting. Resend is the proposed transactional email provider, but its production configuration and delivery are not verified.
These providers may process technical connection/security information as part of their services. Actual regions, subprocessors and applicable transfer safeguards must be reviewed and listed for the deployed configuration. This policy does not invent a data-residency guarantee.
Website and tracking
This static website does not add analytics, advertising pixels, newsletter tracking, or a website account database. It does not sign players in, collect passwords, process payments, or submit deletion requests. The hosting provider may handle request/security data according to its service configuration.
The reviewed game code does not add advertising/tracking SDKs or ask for contacts, microphone or location access. Final SDKs, provider configuration, and store privacy disclosures still require release review. No “zero data collected” claim is made.
Retention and account deletion
Data is used to support accounts, saved progress and verified purchases. Specific retention periods, log/backup expiry, and any legal retention requirements have not yet been approved. They must be disclosed before this policy becomes effective.
The reviewed deletion service is not yet operational. When enabled, Profile → DELETE ACCOUNT initiates an authenticated reviewed request. The deletion page will provide an external route for people who have uninstalled the game. A queued request is not immediate deletion.
The reviewed process must erase associated personal/game data and revoke access as appropriate. Minimal financial/fraud-prevention or legally required evidence may need to be retained; its basis and duration require confirmation. Device-local files and backups need a separate reviewed cleanup procedure.
Your choices and rights
You can play as Guest, protect your profile, sign in/out and change supported settings. Depending on your location, you may have rights to access, correct, delete or otherwise control personal information. A working privacy contact and any required regional rights/regulator information must be added before publication as a final policy.
Children and audience
The intended audience, store age/content rating and any applicable children’s-account/consent rules require owner confirmation. This draft does not assert an unverified minimum age.
Security
The game uses HTTPS and account authentication. Authoritative purchase credits are verified server-side and protected by access controls. No security measure is a guarantee. Do not share passwords, recovery codes or session credentials.
Updates and contact
The effective date and material changes will be reflected in the finalized policy. Until a verified privacy/support contact is available, see player support for current status. This draft reuses the existing game privacy-policy work; it is not a substitute for operator/legal review.