Front Page - Effective May 2026 (revised for crash reporting)
Front Page is a single-player narrative game. We believe in minimal
data collection, no live advertising identifiers in the current build, and no sale of personal
information. This page describes exactly what the app does and does
not do with your data.
What we collect
An anonymous device identifier (a random UUID generated when you
first open the app). It is never linked to your name, email, or
any account.
For each decision you make in the game: the storylet ID, the
choice you selected, and the role you were playing. This is used
only to show aggregate statistics like "X% of players made this
choice" to other players.
Anonymous gameplay analytics through PostHog, such as session
start, session complete, achievement unlocked, and share-artifact
events. These events use the random device UUID above and do not
include your name, email, precise location, advertising ID, or save
file contents.
Anonymous crash reporting
If you leave the "Send anonymous crash reports" setting on
(Settings - Privacy), the app sends crash data when something goes
wrong. This helps us fix bugs that affect real players.
What's sent: the error stack trace, the app version, the platform
(iOS/Android/web), the OS version, and a list of recent screen
names you visited (for example "play" or "settings"). Nothing
identifies you.
What's never sent: your choices, the role you were playing, the
storylet IDs you saw, your dossier, your streak, the device ID,
your IP address, your name, your email, or any payload from your
save file.
Processor: Sentry. They
receive only the data above.
Opt-out: turn off the toggle at any time in Settings - Privacy.
No further crash data is sent.
What we do not collect
Your name, email, or any account information (there are no accounts).
Your location.
Device hardware identifiers (IDFA, IDFV, IMEI, or similar).
Any data from outside the app.
Analytics or advertising identifiers.
Crash reports tied to you (we collect anonymous crash data, but never anything that identifies you).
Data stored only on your device
Your daily play streak.
Your dossier of completed runs.
Echo data from past decisions.
An offline analytics queue used only when the network is
unavailable. Queued events are scrubbed for PII before storage and
are sent only after connectivity returns.
This data never leaves your device and is deleted when you
uninstall the app.
Third-party services
We use Supabase to
aggregate anonymous choice statistics. Supabase receives only the
anonymous device ID, storylet ID, choice index, and role - nothing
that identifies you personally.
We use Sentry to receive
anonymous crash reports if you opt in. See the "Anonymous crash
reporting" section above for what's sent.
We use PostHog for
anonymous product analytics. PostHog receives the random device UUID
and event metadata such as role, storyteller, score, outcome type, or
whether a front page was shared. We scrub known PII fields before
queueing or sending analytics events.
Press Pass purchases and ads are not live in the current build. If
enabled in a future build, they will require updated store disclosures,
provider configuration, and privacy review before release. no advertising identifiers are collected in this build.
Data retention
Anonymous aggregate choice counts are retained indefinitely because
they are not linked to identity and cannot be attributed to an
individual. Local data is deleted when you uninstall the app.
Your rights
Because we do not collect identifying information and there are no
user accounts, there is no personal data to request or delete. To
remove all local data, uninstall the app.
Changes to this policy
If this policy changes, the effective date above will be updated
and the current version will always be at this URL.