Terra Tempus Privacy Policy

Information we collect

• Account. Email address, display name, and a securely hashed password. If you play as a guest we create an anonymous account with a randomly generated internal identifier and a placeholder address — no real email or name is collected until you choose to save your progress, at which point that same account is upgraded in place.
• Sign in with Google or Apple. Only if you choose “Continue with Google” or “Sign in with Apple”. We receive your email address, your name if the provider shares it, and a provider account identifier, and we store that identifier so the same button signs you back in next time. We never receive your Google or Apple password.
• Gameplay. Your rounds, guesses, scores, region/era mastery, daily-challenge results, and streaks — so your progress is saved and synced across devices.
• Device & technical. Sign-in timestamps and the device user-agent for your sessions; your IP address transiently for security and rate-limiting (not stored long-term). If you submit a bug report, we attach the app version, build number, platform, OS version, and device model you provide.
• Friends and social. If you send or accept a friend invite we store the friendship (and the pending request) so the friends leaderboard works. You can remove a friend at any time.
• Visible to other players.Your display name and your scores appear on the global and friends leaderboards, which any player — including someone playing as a guest — can view. Everything else in this policy is private to your account. You can change your display name any time on your account page, or ask us to change it.
• Purchases. If you subscribe to Terra Tempus Pro we store your subscription status and the dates it runs to, plus the identifiers our billing providers use to tell us the purchase is yours. Which providers depends on where you bought it: in the app that is the store and RevenueCat; on this website it is Stripe, and we also store the Stripe customer identifier for your account and the billing address Stripe collects to work out tax. We never receive or store your card number — Apple, Google and Stripe handle the payment itself and only tell us that it succeeded.
• Push tokens. Only if you enable notifications — a device push token and your time-zone offset, used to deliver reminders at a sensible local hour. You can revoke this anytime in your device settings.
• Analytics. Privacy-first, aggregate usage analytics (no cookies, no cross-site tracking, no advertising identifiers).
• Crash diagnostics. If the app crashes or errors, we collect a diagnostic report with device/OS context to fix the problem.

How we use it

To provide and improve the game, save and sync your progress, send essential transactional email (such as password resets), deliver notifications you opt into, fix crashes, and protect the service from abuse. We do not use your gameplay or account data to train AI models.

Third parties who process data for us

We share only what each service needs to function, under their terms — never for sale:

• Sentry — crash and error diagnostics, from both the app and our servers.
• Umami — self-hosted, cookieless usage analytics, in the app and on the website.
• Expo — push-notification delivery (only if you enable notifications).
• Resend — transactional email (e.g. password resets).
• Our hosting provider — stores the application database.
• Stripe — payment processing for subscriptions bought on this website (not for app-store purchases). Stripe receives your email address, your billing address, and the card details you enter on its own checkout page, which we never see. It acts as our processor and, for anti-fraud and its own legal obligations, as an independent controller of that payment data; its privacy policy is at stripe.com/privacy. Stripe is a US company, so a website purchase involves a transfer of that data to the United States.
• RevenueCat — subscription and entitlement management. It receives your Terra Tempus user ID and your purchase status from Apple or Google so Pro unlocks on every device you sign in on; it never receives your payment-card details.
• Google and Apple— only if you choose “Continue with Google” or “Sign in with Apple”, in which case we receive the email address, name (if shared), and a provider account identifier from them to create or match your account.
• App stores — a purchase is processed by Apple or Google under their own terms; we never receive or store your full card details.

Retention & deletion

We keep your data while your account is active. You can permanently delete your account and all associated data in the app under Settings → Delete account, or by emailing hello@endpaperlabs.com. Inactive guest accounts are purged automatically.

Your rights

Depending on where you live (including under the GDPR and CCPA/CPRA), you may have the right to access, correct, export, or delete your personal data, and to object to certain processing. To exercise these rights, use in-app deletion or contact us at hello@endpaperlabs.com. We do not sell personal information.

Children

Terra Tempus is not directed to children under 13, and we do not knowingly collect personal data from them. If you believe a child has provided us data, contact us and we will delete it.

Security

Passwords are stored only as salted hashes, data is transmitted over encrypted connections, and access tokens are stored as hashes server-side. No system is perfectly secure, but we work to protect your information.

Changes

We may update this policy; material changes will be reflected by a new effective date above and, where appropriate, an in-app notice.

Contact

Endpaper Labs LLC
2108 N St, Ste N, Sacramento, CA 95816, USA
hello@endpaperlabs.com

For help with a purchase, cancelling a subscription, or deleting your account, see Support.