Terra Tempus Privacy Policy

Information we collect

• Account. Email address, display name, and a securely hashed password. If you play as a guest we create an anonymous account with a randomly generated internal identifier and a placeholder address — no real email or name is collected until you choose to save your progress, at which point that same account is upgraded in place.
• Sign in with Google or Apple. Only if you choose “Continue with Google” or “Sign in with Apple”. We receive your email address, your name if the provider shares it, and a provider account identifier, and we store that identifier so the same button signs you back in next time. We never receive your Google or Apple password.
• Gameplay. Your rounds, guesses, scores, region/era mastery, daily-challenge results, and streaks — so your progress is saved and synced across devices.
• Device & technical. Sign-in timestamps and the device user-agent for your sessions; your IP address transiently for security and rate-limiting (not stored long-term). If you submit a bug report, we attach the app version, build number, platform, OS version, and device model you provide.
• Friends and social. If you send or accept a friend invite we store the friendship (and the pending request) so the friends leaderboard works. You can remove a friend at any time.
• Visible to other players. Your display name and your scores appear on the global and friends leaderboards, which any player — including someone playing as a guest — can view. Everything else in this policy is private to your account. You can change your display name any time on your account page, or ask us to change it. If you report another player's display name to us, we store the report (the reported account, the reason you chose, and, if you were signed in, which account reported it) so we can review it.
• Purchases. If you subscribe to Terra Tempus Pro we store your subscription status and the dates it runs to, plus the identifiers our billing providers use to tell us the purchase is yours. Which providers depends on where you bought it: in the app that is the store and RevenueCat; on this website it is Stripe, and we also store the Stripe customer identifier for your account and the billing address Stripe collects to work out tax. We never receive or store your card number — Apple, Google and Stripe handle the payment itself and only tell us that it succeeded.
• Push tokens. Only if you enable notifications — a device push token and your time-zone offset, used to deliver reminders at a sensible local hour. You can revoke this anytime in your device settings.
• Analytics. Usage analytics through Umami and purchase-flow measurement through RevenueCat, as described below. We do not use advertising identifiers or cross-site tracking. Optional analytics can be turned off in the app's Settings.
• Crash diagnostics. If the app crashes or errors, we collect a diagnostic report with device/OS context to fix the problem.

How we use it

To provide and improve the game, save and sync your progress, send essential transactional email (such as password resets), deliver notifications you opt into, fix crashes, and protect the service from abuse. We do not use your gameplay or account data to train AI models.

Third parties who process data for us

We share only what each service needs to function, under their terms — never for sale:

• Sentry — crash and error diagnostics, from both the app and our servers.
• Umami — self-hosted, cookieless usage analytics, in the app and on the website.
• Expo — push-notification delivery (only if you enable notifications).
• Resend — transactional email (e.g. password resets).
• Our hosting provider — stores the application database.
• Stripe — payment processing for subscriptions bought on this website (not for app-store purchases). Stripe receives your email address, your billing address, and the card details you enter on its own checkout page, which we never see. It acts as our processor and, for anti-fraud and its own legal obligations, as an independent controller of that payment data; its privacy policy is at stripe.com/privacy. Stripe is a US company, so a website purchase involves a transfer of that data to the United States.
• RevenueCat — purchase and entitlement management. It receives your Terra Tempus user ID and your purchase status from Apple or Google so Pro unlocks on every device you sign in on; it never receives your payment-card details. When optional analytics are enabled, we also report that a native purchase screen was shown and which offering it displayed. This event is linked to your RevenueCat customer record, including for guest accounts, to measure how often viewing an offer leads to a purchase. We do not include your email, gameplay, or Umami identifiers in that event, or use it for advertising or cross-app tracking.
• Google and Apple — only if you choose “Continue with Google” or “Sign in with Apple”, in which case we receive the email address, name (if shared), and a provider account identifier from them to create or match your account.
• App stores — a purchase is processed by Apple or Google under their own terms; we never receive or store your full card details.

Your analytics choice

Website usage analytics are cookieless, and you can turn them off for this browser at any time. Turning them off also clears the first-touch referral data held for this browser. In the app, Settings controls optional usage analytics, including future RevenueCat purchase-screen events. Turning optional analytics off does not disable purchases or restores.

Retention & deletion

We keep your data while your account is active. You can permanently delete your account and all associated data in the app under Settings → Delete account, or by emailing hello@endpaperlabs.com. A guest account with no play activity and no purchases is deleted automatically about a week after it is created. Once a guest has played, that progress is kept so it can still be claimed later, until you delete it yourself in Settings or ask us to. Account deletion also requests deletion of your RevenueCat customer record, including its purchase-screen events; provider requests may take time to complete.

Your rights

Depending on where you live (including under the GDPR and CCPA/CPRA), you may have the right to access, correct, export, or delete your personal data, and to object to certain processing. A signed-in player or guest can download a machine-readable copy from the website account page. To exercise these rights, use that self-service export, in-app deletion, or contact us at hello@endpaperlabs.com. We do not sell personal information.

Children

Terra Tempus is not directed to children under 13, and we do not knowingly collect personal data from them. If you believe a child has provided us data, contact us and we will delete it.

Security

Passwords are stored only as salted hashes, data is transmitted over encrypted connections, and access tokens are stored as hashes server-side. No system is perfectly secure, but we work to protect your information.

Changes

We may update this policy; material changes will be reflected by a new effective date above and, where appropriate, an in-app notice.

Contact

Endpaper Labs LLC
2108 N St, Ste N, Sacramento, CA 95816, USA
hello@endpaperlabs.com

For help with a purchase, cancelling a subscription, or deleting your account, see Support.