Privacy Policy

Who we are

David Newton and Michael Treacher, in partnership as D NEWTON & M TREACHER, trading as FROTHY GAMES (ABN 87 721 170 518), operate Step Warriors from Victoria, Australia. This policy covers the iPhone and Android apps, game services and website, including the Armoury, combat simulator and email launch list. For privacy questions, requests or complaints, email stepwarriorgame@gmail.com.

Accounts and security

You can play as a guest. We store generated account and device identifiers, sign-in credentials, registered devices and sessions to recognise your account and keep it secure. We also save your characters, items, skills, achievements, settings, gameplay actions and progress, along with the terms version you accepted, when you accepted it and on which platform.

If you sign in with Apple or Google, we receive your account identifier and any name and verified email the provider supplies. Apple may supply a private relay address. We keep a credential to maintain or revoke the connection. We never receive your Apple or Google password. Your sign-in name and email are not shown to other players or added to our mailing list.

Apple App Attest and Google Play Integrity check that requests come from a legitimate app and device. We use account and device identifiers, app versions, request times, errors and gameplay diagnostics to investigate faults and abuse. Our hosting providers also process connection information, such as IP addresses.

Walking data

With your permission, iPhone reads steps from Apple Health. Android uses supported phone step-counting services and can read supported watch steps through Health Connect. We request step data, not heart rate, location or other health measurements. We do not change or delete your health records. The apps check where steps came from to avoid crediting overlapping or manually entered records.

Raw health records stay on your device. The apps send eligible step totals, their dates or reporting periods, and identifiers needed to credit them to your account. We store daily credited totals using UTC, gameplay balances and eligibility information to sync progress and prevent duplicate credit. Game totals may differ from your health app.

We use this information for walking-based gameplay, goals and the sharing features below. We do not sell it or use it for advertising or unrelated profiling. Apple, Google and your fitness-app providers handle information in their own services under their own policies.

Goals and streaks

If you set a daily goal, we save your target, home time zone, when the goal applies, whether you met it each day and your streaks. Your device checks whether you met the goal; this report does not include an exact walking total. Gameplay step totals still sync separately. Goals and streaks are private to your account.

Detailed goal results cover up to 90 days and refresh when you sync. Current and best streak summaries may remain longer. Daily gameplay step records stay for the life of your account to prevent duplicate credit.

Android step-sync diagnostics

Android automatically sends technical reports during step syncing, including background syncs, to help us investigate missing or rejected steps. These can include account and device identifiers, app and Android versions, phone make and model, permission status, Health Connect status, error categories and processing counts.

Reports can also include supported fitness-app names and versions, whether their sources are trusted, recording methods, phone or watch models, broad recording durations, exclusion reasons and record counts. They exclude step quantities, raw health record identifiers and exact record times. These reports are kept in our operational logs for 30 days.

Friends and rankings

We store your gamertag, friend requests, friendships, blocks, reports and privacy settings. Accepted friends can see game progress, including your level, fishing and foraging rankings and achievements. You can hide from friend leaderboards, remove or block players and report inappropriate names.

Reports and blocks notify us of the players involved, the reason or source of the block, and the time so we can review abuse. See the community rules or contact support for reports and appeals.

Sharing walking totals with friends is off by default. If enabled, friends can see credited steps for the current and previous UTC week and month. This setting does not control Battle Group sharing or the public Armoury. Choose a gamertag that does not reveal private information.

Battle Groups

We store group names, invitations, members and roles, schedules, seasonal characters and competition records. Members can see the roster, gamertags, credited group steps, achievement points, standings and results. Joining a group shares your group walking activity even if friend step sharing is off.

Completed replays show fighters' equipment, runes, talents, companions, combat statistics, food, actions and results to members with group access. Live standings do not show other players' current builds. Leaving a group does not erase completed results.

Public Armoury and sharing links

We automatically publish Normal Single Player builds in the public Armoury. Anyone with your exact gamertag can look up your latest published build without signing in. It shows your gamertag, public player identifier, level, appearance, equipped items, runes, talents, companion, combat statistics and update information. It excludes sign-in details, email, steps, goals, currency and unequipped inventory. Updates may take time to appear. Hiding from friend leaderboards does not make your build private.

Public gamertag searches exclude Hardcore and Battle Group builds. You can create a sharing link for a selected character. Anyone with the link can view or import that build. New links expire after 30 minutes; older links may work until revoked. Contact us for help revoking a link. Revoking access or deleting your account cannot remove copies other people have saved.

Notifications

We use Apple Push Notification service and Firebase Cloud Messaging to send game alerts. We store the delivery token and its account, device installation and platform details. Notifications may show gamertags and group names on your lock screen, depending on your settings.

You can turn notification display off in device settings. On Android, Firebase may create an installation identifier and delivery token, and the app may register it with us, before you allow notifications. Turning off display does not remove these registrations. We use Firebase for messaging, not analytics or advertising.

Website and email list

If you join our launch list on either website, we send your email and signup form location to Brevo to manage the list and send launch news. You can unsubscribe through our emails or by contacting us. If you email support, we use your address and message to respond. Please do not send passwords, sign-in codes or health records.

Our websites use hosting request data for reliability and security. They do not use advertising cookies or third-party analytics. The Step Warriors website saves simulator settings and recent Armoury searches in your browser, and simulator reports for the browser session. You can clear recent warriors in the Armoury or use your browser's site-data controls.

Simulations run in your browser. Looking up a live build sends the gamertag or sharing code to our website and game services. Simulator share links contain build settings that anyone with the link can view. Deleting your account does not clear copies saved in browsers.

Where information is stored and shared

Microsoft Azure hosts our game accounts, progress, database, Armoury builds and operational logs in the United Arab Emirates (UAE North region). Amazon Web Services hosts our websites. Brevo handles launch-list contacts. Apple and Google process information for sign-in, app verification, step services and notifications. These providers may process information outside your country.

We use secure connections and access controls to protect information, though no service can guarantee complete security. Access is limited to running, supporting and protecting the service. We may disclose information to meet legal obligations, address abuse or security incidents, or protect legal rights. We do not sell personal information or provide health data to advertisers or data brokers.

Read our providers' privacy information: Microsoft, Amazon Web Services, Apple, Google, Firebase and Brevo.

How long we keep information

We generally keep account, sign-in, gameplay and daily step records for as long as your account exists. Social and group records remain as needed for those features and completed competition results. Detailed goal results cover up to 90 days. Seasonal replays and group characters are scheduled for deletion 30 days after the season ends; group and result records may stay longer. Game operational logs, including Android step-sync reports, are kept for 30 days.

We keep launch-list details while needed to manage your subscription, including limited records to honour unsubscribes. Support messages stay as long as needed to handle your request. Some records may be kept for security, legal obligations or disputes. Backups and other provider records follow their own retention schedules, so deletion is not immediate everywhere.

Your choices and account deletion

You can revoke health, physical activity and background step permissions in device settings. This limits future access but does not erase steps already credited. App and device settings let you control friend step sharing, leaderboard visibility, social connections and notifications. Contact us to revoke a build-sharing link. Local data and credentials may remain on your device; some iPhone credentials follow your iCloud Keychain settings.

To delete a guest or signed-in account, open the account card on Choose Your Game, select Delete account and follow the confirmation. Signing out or uninstalling does not delete your account. See our account deletion instructions for help, including how to request deletion without the app.

Account access ends when deletion is accepted. We remove characters, inventory, steps, streaks, social links, notification registrations, the public Armoury build and sign-in information, and revoke the connected sign-in credential. Deletion can take time; the account screen shows its status. Shared results may keep an anonymous deleted-player entry. Replays containing the deleted warrior are removed.

We keep minimal records of random identifiers to prevent old saves or requests from recreating a deleted account. Security logs and backups expire on their normal schedules. Deletion does not remove your Apple or Google account, health-provider records, separate email subscription or copies saved in browsers.

Privacy requests and complaints

Email stepwarriorgame@gmail.com to request access, a copy, correction or deletion of your information, or to make a privacy complaint. Include enough detail to find your account or subscription. We may ask for proof of ownership and will explain any limits, such as legal requirements or another person's privacy. Parents and guardians can contact us about a child's information. Depending on where you live, you may also have rights to object to or restrict processing, or contact your privacy regulator.

Changes to this policy

We update the date above when this policy changes. We will notify you of material changes through the website or app and ask for any consent needed.