Privacy Policy
Bowls de League
This policy explains how this application handles information and how to contact us about privacy.
Information we process
Bowls de League stores your active match, bowl positions, results, career points, unlock selections and achievements in an app file on your iPhone. Language, audio, vibration, notification preferences and the current win streak are stored locally in system preferences. The app automatically obtains a random installation secret and stores it in this device’s Keychain. The server stores only a hash of that secret, a random internal installation identifier, an automatically assigned anonymous bowler name, creation time, synchronized career statistics, equipment and green selections, achievement identifiers, update times and monthly league scores. Active match positions and audio preferences are not uploaded. When the app or a visitor requests this website, Railway infrastructure receives connection information such as IP address and request metadata. The application does not request a name, email address, password, location, contacts, photos or payment information. It includes no advertising or third-party analytics SDK.
How we use information
Local records let you resume a match, play offline, choose equipment and keep your progress. The installation secret authorizes access to that installation’s private progress and deletion operation. Server synchronization preserves career progress while the secret remains available, and the public monthly league compares submitted scores using anonymous bowler names. Counters are merged to avoid reducing saved progress on a retry. Connection metadata and limited in-memory request counters support service operation, abuse prevention and error diagnosis. An optional notification reminds you of the next season locally on your device.
Service providers and sharing
The backend and this public website are hosted by Railway, which processes network requests and stores the service’s persistent database volume. The public leaderboard displays anonymous bowler names, monthly points and rank to other visitors; private career progress and secret hashes are not returned by the public leaderboard. Infrastructure providers may process request metadata and operational logs to run the hosting service. The application logs only startup and non-sensitive error categories, not authorization secrets or progress bodies. There are no advertising, analytics, email-delivery or social-sign-in recipients in the app. We do not sell this game data.
Data retention
Local match and progress records remain until you delete them in the app or remove the app’s local data. Keychain items can remain after app removal depending on iOS behavior. Server installation and progress records and historical season scores are retained until an authorized deletion request; there is no automatic inactivity expiration. A new month starts a new public league view without deleting older score rows. Short request-limit counters are kept in server memory. Railway may retain infrastructure logs and backups under its own service practices; this product does not establish a fixed retention period for those provider records or configure a separate backup schedule.
Deleting your information
Use Settings, Delete all my progress while connected to the internet. After the server confirms deletion, the app removes the installation’s live server progress and all its season scores, clears the local match and career progress, removes the old Keychain secret, and obtains a new anonymous installation identity. If the request fails, local progress is retained and you can retry. Deletion removes live database rows; SQLite journal pages and any existing device or provider backups may retain residual copies until overwritten or expired through their normal lifecycle. We do not claim immediate erasure from every backup. Removing the app alone does not send a server deletion request. A lost installation secret cannot be recovered through an account, email or another-device login.
Permissions and your choices
The app asks for notification authorization only when you enable the optional new-season reminder. It schedules that reminder locally and does not register an APNs push token. You may turn it off in the app to cancel its pending reminder, or revoke notification permission in iOS Settings. Sound and vibration controls do not request sensitive permissions. Internet requests synchronize progress and retrieve the season and public league. The app requests no location, camera, microphone, contacts, photo-library or tracking authorization.
Your privacy rights
You can inspect your career statistics and selections in the app, change preferences, and delete your installation’s data using its authorized in-app action. Depending on your location, you may have rights to access, correct, erase, restrict or object to processing, or complain to a data-protection authority. Contact SigeweardPeverell@icloud.com for privacy questions or rights requests. This address is a public privacy contact only; the app has no email-sending or support-ticket feature. Because records are installation-scoped and no account or email is collected, we may be unable to identify or authorize a request about records after the installation secret is lost. Do not send your secret in email.
Security
Public app traffic uses HTTPS. A cryptographically random 32-byte installation secret is stored with a device-only Keychain accessibility setting and is sent as a bearer credential for private API operations. The server compares a SHA-256 hash and does not store the raw secret. Private progress and deletion routes require that credential; one installation cannot request another installation’s private records by supplying an identifier. Input validation, payload limits and request throttling reduce misuse. Local saves are atomic and use iOS file protection. Public leaderboard scores are client-reported recreational game results, not independently verified competition records. No method of storage or transmission is guaranteed completely secure.
Children’s privacy
The game is intended for players aged 16 and older and is not directed to children under 16. It does not ask for age or collect a child profile, and contains no advertising, accounts or purchases. If you believe a child has provided data through the game, you can use the installation’s deletion control or contact SigeweardPeverell@icloud.com. Identification of an installation without its secret may be limited.
Changes to this policy
This page describes the processing in the current app and backend. We will update it when functionality or processing changes and publish the revised effective date here. You can open the current policy at any time from the app’s Settings. Material changes will be described in an appropriate app or policy notice when required.