Privacy Policy
Queen’s Flair
This policy explains how this application handles information and how to contact us about privacy.
Information we process
Queen’s Flair stores story progress, completed actions and episodes, visited rooms, unlocked illustrations, journal observations and their dates on your iPhone using local app storage. Language, sound and accessibility preferences are also stored locally. The game works offline and cloud copying is off by default. When you enable cloud copying or explicitly restore or delete a cloud copy, the app creates a random installation UUID and a cryptographically random secret in the iOS Keychain. The server receives the UUID, story snapshot and update time; it stores a SHA-256 hash of the secret for authorization. Preferences and audio are not uploaded. HTTP hosting also receives connection information such as IP address, request time, requested route and technical client headers. No account, name, email address, location, contacts, photos or payment information is requested by the app.
How we use information
Local data lets the hotel remember your actions, resume your story and apply your chosen settings. Optional server storage keeps a private copy for the same installation and supports restoring or deleting that copy while the installation secret remains available. The game does not offer account-based transfer to a new device or recovery after loss of the secret. Technical requests, rate limits and service logs support security, reliability and error diagnosis. We do not use the data for advertising or analytics.
Service providers and sharing
Public API and website requests pass through Cloudflare, which terminates public HTTPS and proxies the requests to the pinned Railway service origin. Cloudflare processes request contents, connection metadata and technical headers to deliver and protect this traffic. The backend is hosted by Railway, which processes requests and stores the database on a persistent Railway volume as infrastructure provider. Railway may process connection metadata and infrastructure logs in operating the service. Application logs contain a random request identifier, route category, HTTP method, status and duration; the application does not intentionally log authorization secrets or story contents. No advertising, analytics, social sign-in, messaging or payment SDK is included. Data is not sold. Information may be disclosed when required by applicable law.
Data retention
Local story and settings remain until you reset the story, remove the app or otherwise erase its storage. Keychain credentials can persist independently of ordinary app storage and use a device-only accessibility class. The latest cloud snapshot and installation authorization record remain until you use Delete cloud progress or request deletion through the privacy contact. Repeated saves replace the prior logical snapshot. We do not specify a fixed retention duration for Cloudflare or Railway infrastructure logs because no such duration has been verified for this deployment. No application-managed backup schedule is configured. Infrastructure storage or backup copies, if retained by the hosting provider, follow its operational lifecycle and are not guaranteed to disappear immediately when the live record is deleted.
Deleting your information
In Settings, Delete cloud progress turns cloud copying off and deletes both the live progress snapshot and its installation authorization record. Local progress remains so the story can still be played offline. Enabling copying again creates a new authorized server record using this installation’s credential. Reset local story requires confirmation, erases the local story and turns cloud copying off, but does not delete a previously stored cloud copy; use Delete cloud progress for that. Removing the app may not remove its Keychain item. You can request assistance with privacy or deletion at CenbeorhtBellamere@icloud.com. Do not send your installation secret; without that secret we cannot promise restoration or identify a particular anonymous installation solely from your name or email.
Permissions and your choices
The app requests no camera, microphone, photo library, contacts, location, tracking or notification permission. Music and sound play locally. Internet access is used only for optional cloud operations and opening the public privacy page. You can stop automatic cloud requests by turning off Optional cloud copy in Settings. Turning it off does not itself delete an existing server copy. Device accessibility, audio and network settings can also be changed in iOS Settings.
Your privacy rights
Depending on where you live, you may have rights to access, correct, delete, restrict or object to processing of your personal data, or complain to your local privacy regulator. You can inspect and change the local story through the game, restore this installation’s stored snapshot, and delete its server copy in Settings. For privacy questions or rights requests contact CenbeorhtBellamere@icloud.com. We may need enough non-secret information to understand a request and verify control of the relevant installation; we do not require creation of an account.
Security
Public client/server communication uses HTTPS terminated by Cloudflare, which proxies requests to the HTTPS Railway service origin. Each installation uses its own random secret stored in Keychain; the server compares hashed secrets and checks authorization before reading, writing or deleting progress. The server validates request sizes and JSON structure, limits requests and stores updates atomically in SQLite on its persistent volume. No shared server credential is embedded in the app. These measures reduce risk but cannot guarantee absolute security. Anyone who obtains an installation secret could access that installation’s copy, so it should not be shared.
Children’s privacy
Queen’s Flair is a narrative game intended for adults and a general older audience, primarily ages 18 to 35. It is not designed to collect personal information from children. There is no registration, chat, user-generated content or advertising. If you believe a child has submitted personal information through the service, contact CenbeorhtBellamere@icloud.com so the concern can be investigated.
Changes to this policy
This policy describes the current app and backend. We will update this public page and its effective date when our processing practices change. Material changes affecting optional cloud copying will be reflected in the app or this page as appropriate. The current policy is available from Settings and at https://queen-s-flair.fun/privacy without login or cookies.