Privacy Policy

This policy explains, in plain language, what information Escape the Avalanche Deux (the “Game”) uses, why, and the choices you have. The Game is made by Patrick Booth PA (“we”, “us”). It also covers the original Escape the Avalanche and this website.

The short version

• You can play without giving us any personal information. No email, real name, phone number or location is needed to play.
• Your progress is saved on your device. An account is optional and only needs an email address (or Sign in with Apple / Google) so you can keep your progress if you change phones.
• There are no ads, we don’t sell or share your data, and we don’t use tracking or analytics tools.
• You can delete your account and all of its data at any time from inside the Game.

1. What we collect

When you play as a guest (no account)

• A username you choose. On first launch you pick a username (3–16 letters, numbers or underscores). We check it is unique and run it through a kid-friendly filter so names stay appropriate. Please don’t use your real name.
• A random device ID. The Game creates a random ID so your username stays reserved for your device. It is not your phone’s advertising ID or serial number.
• Game progress. Scores, lifetime points, rescues, unlocks, achievements and settings are stored on your device. When you are online, runs you finish may be sent to our server to update your lifetime points and scores.

If you choose to create an account

• Email address (if you use email). We send a 6-digit sign-in code to it. There are no passwords.
• Apple or Google sign-in. If you use Sign in with Apple (iOS) or Sign in with Google (Android), we receive a sign-in token from Apple or Google that tells us a unique account identifier and, if you allow it, your email address (Apple may give us a private relay address instead). We never see your Apple or Google password.

Things we keep briefly for safety

• To stop abuse we count requests per IP address for rate limiting. These counters are deleted within a day.
• Our hosting provider (Cloudflare) may keep short technical logs (such as IP address and time of a request) to run and protect the service.

We do not collect your name, address, phone number, contacts, photos, precise location, or advertising identifiers.

2. How we use it

• To save your progress, award lifetime points and unlocks, and show leaderboards.
• To sign you in and keep you signed in on your device, and to send sign-in codes by email.
• To keep usernames appropriate and stop cheating or abuse (for example, a run can count for at most 20,000 points).
• To answer you if you contact us.

We don’t send marketing emails. The only emails we send are the sign-in or verification codes you ask for.

3. What other people can see

Leaderboards show only your username and scores, and only for players who have created an account. Your email address is never shown to other players.

4. Who helps us run the Game

We use a few service providers only to run the Game. They process data for us and not for their own advertising:

• Cloudflare (Workers) – runs our game server.
• Neon – hosts our database (usernames, accounts, scores, points, unlocks).
• Resend – sends sign-in code emails from noreply@avalanche.sitebloc.com.
• Apple and Google – only if you choose their sign-in. On iOS, Apple Game Center may also show achievements; that is handled by Apple under Apple’s privacy policy.
• Vercel and GitHub Pages – host this website and the web version of the Game.

We do not sell, rent or share your personal information with anyone for advertising. We may disclose information if the law requires it.

5. How long we keep it

• Accounts are kept until you delete them.
• Guest usernames with no email or sign-in attached are deleted automatically after 12 months without activity, so the name becomes free again. Progress saved on your device is not affected.
• Scores: old scores are trimmed regularly; we keep top scores, each player’s best scores and recent runs. Your lifetime points are not affected by this trimming.
• Sign-in codes expire after 15 minutes and are stored only in scrambled (hashed) form.

6. Signing in and out

Once you sign in you stay signed in on that device until you sign out or delete your account, so you only need a new code when you change devices. Sign-in tokens are stored on your device and kept only in hashed form on our server.

7. Deleting your data

Players can delete their account in Options, which removes their data. In the Game, go to Options → Account → Delete account and tap Delete to confirm. This permanently deletes everything we hold about you on our server: your username, email and linked Apple/Google sign-ins, scores, lifetime points, unlocks and sessions. The username becomes available to others. It cannot be undone. You can also ask us by email (see Delete Account). Uninstalling the Game removes the progress stored on your device.

8. Children

The Game is made to be family-friendly, and no personal information is needed to play. Anyone can play as a guest without an account and without giving any personal information. Accounts (email, Apple or Google sign-in) are only for players aged 13 or older. We don’t knowingly collect personal information from children under 13. If you are a parent and think your child under 13 created an account, contact us and we will delete it.

9. Security

Data is sent over encrypted connections (HTTPS). Sign-in codes and session tokens are stored hashed. No system is perfectly secure, but we work to protect your information and keep only what the Game needs.

10. Your rights

Depending on where you live, you may have rights to access, correct, export or delete your information. You can see your username and progress in the Game, change your email in Options, and delete everything with Delete Account. For anything else, email us.

11. Changes

If we change this policy we will update the date above, and for important changes we will let you know in the Game or on this website.

12. Contact

Questions or requests: escapetheavalanchedeux@gmail.com