Privacy policy
Crack the Safe works without an account and without sharing anything. Everything below is optional, and you choose it in the app.
- No tracking without asking
- No precise location
- No selling data
- No contacts or photos
If you choose “Share” on first launch
The app asks once, before anything is sent. You can share play stats, crash reports, both or neither, and change it any time in Settings → Privacy.
- Play stats: which vaults you play, how many pulls, wins and losses, hint use, app version, and a random install ID made for this purpose. It is kept apart from your account: we only note whether you’re signed in and with which provider, never which account.
- Rough location: a city and country worked out from your network address with MaxMind GeoLite2. We don’t keep the address itself in our database, and the app never asks for your device location. Cities appear in our reports only when ten or more players share one.
- Crash reports: the error, the app version and the device model, sent to our own error tracker (GlitchTip). They carry no name, no account and no install ID, and IP addresses are scrubbed. If we use an AI tool (Anthropic) to help draft a fix, it sees only the cleaned-up error, never anything about you.
If you make an account
- Sign in with Apple or Google: the ID the provider gives us and, if shared, an email address (Apple may give a private relay address).
- Email: your email address. We send a 6-digit code (through Resend) instead of using a password.
- Game data: your daily results and streak, and your lockpick balance, so they follow you to another iPhone.
You can delete your account in the app at any time. It is deleted for good, along with your results and lockpicks. Accounts unused for two years are deleted automatically.
Purchases, ads and Game Center
- Purchases go through Apple. We receive a signed receipt to credit your lockpicks or Remove Ads, never your payment details. A record of the transaction is kept for refunds and accounting, without the link to your account once the account is deleted.
- Ads (outside the daily vault) are served by Google AdMob. Before any ad, you’re asked for consent where the law requires it, and iOS asks whether apps may track you. If you say no, ads are not personalised. Remove Ads turns ads off entirely.
- Game Center is Apple’s. If you’re signed in, your weekly gold total is posted to a friends leaderboard. Apple decides who can see it under your Game Center settings.
How long we keep it
| Data | Kept for |
|---|---|
| Play events | 90 days |
| Which days an install played | 400 days |
| Install record | Until you delete it, or 400 days without play |
| Daily totals by city and country (no install ID) | Kept |
| Crash reports | 30 days |
| Account, results and lockpicks | Until you delete the account, or 2 years unused |
| Server request logs at our host (Railway), including IP address | Up to 30 days |
Your choices
- Turn sharing off in Settings → Privacy. Sending stops, and you can also delete what was already sent in one tap.
- Delete my data in Settings → Privacy removes the install’s play data from our servers and starts you fresh.
- Delete account in Settings → Account removes the account for good.
- For anything else, or to ask what we hold about you, email support@hakusoft.ai.
Who processes it
Railway (hosting, US), Resend (sign-in emails), Google AdMob (ads), Apple (purchases, Sign in with Apple, Game Center), Google (Sign in with Google), Anthropic (drafting fixes from cleaned-up crash reports). Rough location uses GeoLite2 data created by MaxMind, available from maxmind.com.
Children
Crack the Safe is rated 4+ but is not made for children, and we don’t knowingly collect data from children under 13.