Privacy Policy

1. Who is responsible

There is no data protection officer. One is not required for an operation of this size.

2. What stays on the device

Everything that playing produces lives exclusively on your device: which levels you solved, how many stars you hold, your points, your daily-level streak, and your settings for sound, music, haptics and the daily reminder. Progress sits in a local database, the settings in the app's system preferences.

We run no server holding any of it. We can neither view nor restore your progress. Delete the app and it is gone.

3. What the app does not do

Alembic calls nothing on its own. There are no analytics or statistics services, no crash reporting, no advertising identifiers, no fingerprinting and no sharing with third parties. For the same reason the app's privacy manifest lists no collected data and no tracking domains; both lists are empty on purpose.

Declared in it are only two system APIs for which Apple asks a reason even when nothing leaves the device: the system's preference store for your sound and haptics choices, and the modification date of the app's own executable, which the "About Alembic" dialog shows as the build time.

Should the app ever connect to a service – a backup via iCloud, say, or a leaderboard via Game Center – this policy will be amended beforehand. Neither is built today.

The daily reminder is off until you switch it on in the options. It is a local notification: your iPhone schedules it itself at the time you pick. There is no push service and no server behind it, and nothing leaves the device for it. You can change it or switch it off in the options at any time.

4. Test versions via TestFlight

Test versions of the app are distributed via Apple's TestFlight (Apple Distribution International Ltd., Hollyhill Industrial Estate, Cork, Ireland). Under the TestFlight terms Apple collects crash reports and usage statistics from test devices. Apple makes the crash reports available to us, together with the feedback you send through TestFlight yourself, including screenshots you choose to attach.

Crash reports contain the device model, system version, app version and the technical trace of the crash. No progress is in them. We use them to fix bugs (Art. 6(1)(f) GDPR). We delete them at the latest twelve months after they arrive. If you have the app from the App Store, none of this applies to you.

5. If you write to us

In test versions the app offers, after the last level, to let the developer know. It opens your mail app with a prepared draft containing your star tally, your points and the build number. The app sends nothing on its own. You see the draft and decide whether to send it.

Mail to alembic@paloaltea.app is delivered via Cloudflare's email forwarding to an existing mailbox, where it is read and answered. We process your address and the content to handle your request (Art. 6(1)(b) and (f) GDPR). We delete the message once the matter is settled, at the latest twelve months afterwards.

6. The purchase

Alembic is a paid app without in-app purchases. Purchase and payment run through your account in Apple's App Store. We receive no payment data and no account data. Apple's privacy terms apply.

7. This website

The pages under paloaltea.app are served by Cloudflare (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA – processor under Art. 28 GDPR). To make that work, Cloudflare processes your IP address, the time, the requested address and your browser's identifier. We keep no access logs ourselves and have switched the service's logging off. The pages set no cookies. They load no fonts, scripts or images from other servers and contain no analytics tools. The legal basis is our legitimate interest in a working, secure website (Art. 6(1)(f) GDPR).

8. Your rights

You have the right to access the data we process about you, to rectification, erasure and restriction of processing, to data portability, and to object to processing based on legitimate interest. Write to alembic@paloaltea.app.

For your progress: we do not have it. Deleting it means deleting the app.

If you believe we process your data unlawfully, you can complain to a data protection supervisory authority. The authority responsible for us is the Austrian Data Protection Authority (Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, dsb.gv.at.

9. Changes

If a feature is added that sends data out, this policy is amended beforehand. The date above shows the current version.