Privacy Policy
Quick Orbit Explorer
This policy explains how this application handles information and how to contact us about privacy.
Information we process
Quick Orbit Explorer stores mission stars, discovered surface regions, the current flight, the pre-impulse undo state, preferences and unsent mission results locally on your device. Optional synchronization and mission records are enabled by default and can be disabled in Settings. When enabled, the app creates a random installation identifier and a random installation secret stored in the device-only iOS Keychain. It sends that identifier, mission identifiers, remaining fuel, elapsed mission time, stars and discovered regions to the backend. The server stores only a bcrypt hash of the secret, installation creation time, score submission times and progress update times. It does not receive your local flight position or audio preferences. The app does not request your name, email, contacts, location, photos, microphone or advertising identifier. Railway infrastructure receives network requests, which may include IP addresses, request times, paths and connection metadata, including when you visit this policy.
How we use information
Local data lets you continue a paused flight, undo an impulse, preserve discoveries, apply preferences and play offline. Installation credentials authorize access to your own server progress and deletion. Server snapshots synchronize progress for the same installation; they are not an account or a way to restore data on another device after losing the secret. Scores provide optional per-mission rankings. Request bounds and operational error records help keep the service available and diagnose failures. We do not use data for advertising or cross-app tracking.
Service providers and sharing
The backend and PostgreSQL database are hosted on Railway, which processes application data and infrastructure connection information to provide hosting. The service uses the pg database driver and bcryptjs hashing library on the server; the iOS app contains no third-party analytics or advertising SDKs. Other installations can view the top mission scores, ranks, remaining fuel, elapsed time and stars. They do not receive installation identifiers, secrets or private progress snapshots. The leaderboard marks your own result only within your authenticated response. We do not sell personal data or send it to marketing, messaging or analytics providers. Information may be disclosed if legally required.
Data retention
Local progress, preferences and queued results remain until reset, app removal or device storage removal. iOS Keychain credentials can remain after app removal; use the in-app deletion action before uninstalling if you want server deletion. Server installation records, score history and the latest merged progress snapshot remain until you delete installation data. We have not configured an automatic expiry period for these records. The application logs only limited operational failure codes and random request identifiers, not credentials or request bodies. Railway may maintain infrastructure logs and operational copies under its own service controls; this policy does not promise a fixed retention period for those records.
Deleting your information
Use Settings, Delete all data, and confirm to delete the installation record, its scores and progress from the active database, then clear local game data, queued results and the Keychain installation secret. When credentials exist, a working connection is required; if deletion fails, the app retains data and the secret so you can retry instead of claiming deletion succeeded. Disabling synchronization stops new optional requests but does not erase data already stored on the server. Removing the app alone does not request server deletion. If the installation secret is lost, the app cannot authenticate deletion or recover server progress. Deletion removes live database rows through cascade relationships; it does not selectively rewrite any infrastructure logs or pre-existing operational backups, which may persist under hosting controls. No specific backup expiry is promised.
Permissions and your choices
The app requests no camera, microphone, photo library, contacts, location or notification permission. Audio playback uses local generated sound and music without recording. You can disable sound, music, motion and optional synchronization in Settings, and iOS Reduce Motion is respected. Network access uses HTTPS and does not require a separate iOS permission prompt. You may stop using optional networking by switching off synchronization; stored server data can be removed through the separate deletion action.
Your privacy rights
For questions about this policy or privacy rights, contact henrietta.thorne@icloud.com. Depending on your location, you may have rights to access, correct, delete, restrict or object to processing, or complain to a competent authority. The app provides access to progress and installation-authorized deletion without an account. We may need enough information to identify the relevant installation when responding to a request; do not email your secret. Because we do not collect names or email addresses in the app, we cannot reliably find or recover an installation by a person’s name or email.
Security
The client uses HTTPS for service requests, device-only Keychain storage for its random secret and atomic local save writes. The backend verifies installation credentials with bcrypt, isolates progress by installation, validates bounded inputs and uses parameterized SQL and database constraints. Raw secrets are used for authorization but are not stored in the database or application logs. The database is reached by the backend using server-side configuration. These measures reduce risk but cannot guarantee absolute security, and anyone holding an installation secret could act for that installation.
Children’s privacy
Quick Orbit Explorer is designed for space-puzzle players aged 12 and above, rather than specifically for young children. There are no accounts, chat, advertising, purchases or requests for a child’s contact information. Optional networking still processes the installation and gameplay data described above. A parent or guardian can disable synchronization and delete data through Settings, and may contact the privacy address with concerns.
Changes to this policy
We may update this policy when the application or its processing changes. The current policy is published at this page with its effective date. Material changes will be reflected in the policy and, where appropriate, the application. Contact henrietta.thorne@icloud.com with questions about an update.