Vesperfall

Last updated 26 August 2026

Privacy

Vesperfall is one person. This page covers every game published under the Vesperfall name, and this website. Section 2 is the short version; everything after it is the detail behind that summary.

1. Scope

This Privacy Policy explains how Vesperfall (“we”, “us”, “the studio”) handles information in connection with every game we publish under the Vesperfall name — on the Apple App Store, Google Play, Steam, itch.io or any other storefront (each, a “Game”) — and with this website.

It applies to all of our Games unless a specific Game displays a different policy. Some sections concern only part of the catalogue and say so in their first line: advertising, and the consent mechanisms that go with it, exist in our mobile titles and nowhere else. If a future Game collects information in a way that is not described here, we will publish an updated policy before or when that Game is released.

2. Summary

3. No user accounts

Our Games have no registration, login or user profiles. We do not operate game servers that store your personal data, and we do not maintain a customer database. If you contact us by email we will of course see your email address and whatever you choose to write to us; see the section on data retention.

4. Data stored on your device

Our Games save data locally on your device so that the Game can work as expected. This typically includes game progress and level state, high scores and statistics, audio, language and accessibility preferences, and flags recording whether you have already seen a tutorial or a consent prompt.

This data stays on your device. We do not upload it to our own servers. It is removed when you delete the Game, except where your device or platform makes its own backup (for example iCloud or Google Play backup), which is governed by Apple’s or Google’s terms and by your own device settings.

5. Desktop titles

Our desktop Games — currently Valley of Heroes and Widow’s Reach, both unreleased — are built to the same rule as the rest of the catalogue: no accounts, no Vesperfall server to talk to, and progress, saves and settings kept on your own machine.

They carry no advertising, and therefore none of the advertising identifiers, consent prompts or tracking permissions described in the two sections that follow.

Two things are handled by the platform rather than by us. Where a title uses storefront features such as achievements, cloud saves or leaderboards, the platform operator processes that data as its own controller under its own privacy policy, and the store page for each title lists the features it uses. And where a build includes crash reporting or engine telemetry, it is named in this policy and on the store page before that title is released: a desktop Game will not ship collecting something this page has not disclosed.

6. Advertising

This section applies to our mobile Games only. Our desktop Games carry no advertising and contain no advertising SDK.

Our mobile Games may show advertising — banners, interstitials or rewarded video — delivered through Google AdMob, a service provided by Google LLC and, for users in the EEA, by Google Ireland Limited.

To serve, cap, measure and report on ads, and to detect invalid traffic and fraud, AdMob and the advertising partners in its network may collect and process information such as:

Where you have given the relevant consent or permission, this information may also be used to build interest profiles and to show you personalised advertising, including across other apps and websites. Where consent or permission is not given, advertising is limited to non-personalised or contextual ads, which still require basic technical data in order to be delivered and measured but are not used to profile you.

Google acts as an independent controller for the data it collects in this context. Its handling of that data is described in the Google Privacy Policy, in the How Google uses information from sites or apps that use our services notice, and in the AdMob and AdSense privacy information page, which also lists the ad technology providers that may receive data through Google’s platforms.

We do not receive your advertising identifier, nor any individual-level advertising data, from these partners.

7. Consent and choices

The mechanisms below exist because of advertising, so they too concern our mobile Games only.

Europe (GDPR / ePrivacy)

If you are in the European Economic Area, the United Kingdom or Switzerland, our Games present a consent message on first launch using Google’s User Messaging Platform (UMP), in line with the IAB Transparency & Consent Framework. You may accept, refuse, or make per-purpose and per-partner choices. Your choice is stored on your device and passed to the advertising SDK.

You can change or withdraw your choice at any time from the privacy or settings screen of the Game, which reopens the same consent form. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

iOS (App Tracking Transparency)

On iOS 14.5 and later, our Games use Apple’s App Tracking Transparency framework to ask your permission before accessing the Identifier for Advertisers or otherwise tracking you across apps and websites owned by other companies. If you decline, the Game works exactly as before and you will simply see non-personalised advertising. You can change this at any time in Settings → Privacy & Security → Tracking.

Device-level controls

You can also reset or delete your advertising identifier and opt out of personalised advertising from your device settings: on Android under Settings → Google → Ads, and on iOS under Settings → Privacy & Security.

8. Legal bases for processing

Where the GDPR applies, we rely on the following legal bases: your consent (Article 6(1)(a)) for personalised advertising and for storing or accessing information on your device that is not strictly necessary; our legitimate interests (Article 6(1)(f)) in delivering non-personalised advertising, keeping our Games secure, preventing fraud and invalid traffic, and understanding aggregated performance; and the performance of a contract (Article 6(1)(b)) where processing is necessary to provide the Game and its features to you.

9. Purchases

Our Games may be paid, or may offer in-app purchases such as removing advertising or unlocking additional content. Every payment is processed entirely by the storefront — Apple, Google, Valve or itch.io — acting as the merchant. Payment details, billing addresses and transaction records are handled by them under their own privacy policies; we never see or store your payment information.

We receive from the store only what is needed to unlock the content on your device (a receipt or purchase token validated locally or by the store) and, separately, aggregated sales reports that do not identify individual buyers. Refunds and billing questions must be raised with the storefront you bought from.

10. Analytics

We do not embed third-party behavioural analytics SDKs whose purpose is to track individual users across our Games.

We do consult the aggregated statistics that Apple App Store Connect, Google Play Console, Google AdMob and, for desktop titles, the Steamworks and itch.io dashboards make available to every developer: install and uninstall counts, crash and stability reports, session and retention figures, revenue, and country- or device-level breakdowns. These reports are anonymous and aggregated; they do not allow us to identify you or single you out. Crash diagnostics reach us through the platforms only where you have enabled the corresponding sharing setting on your device.

Should a future Game include an additional analytics or attribution SDK, this policy will be updated to name it before that Game is published.

11. Data retention

Because we do not collect personal data ourselves, there is nothing for us to retain about you on our side. Data stored locally on your device remains for as long as the Game is installed. Data collected by Google and its advertising partners is retained according to their own schedules, described in their policies. Emails you send us are kept only as long as needed to deal with your request, and no longer than 24 months afterwards.

12. Children

Our Games are not directed at children under 13, or under the equivalent minimum age in your country (16 in some EU member states), and we do not knowingly collect personal data from children. Where a Game is listed in a family or child-directed programme on a store, advertising is configured accordingly: ads are restricted to child-appropriate, non-personalised inventory and tracking identifiers are not used for advertising purposes. If you believe a child has provided personal data to us, please contact us and we will act to have it deleted.

13. International transfers

Our advertising and store partners are global companies and may process data in countries outside your own, including the United States. Those transfers rely on the safeguards those companies put in place, such as the European Commission’s Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework. Details are given in their respective privacy policies.

14. Security

Our Games hold your data locally, protected by the sandboxing and security features of your device’s operating system. This website is served over HTTPS. No method of storage or transmission is completely secure, but the absence of any central store of user data on our side substantially limits the risk to you.

15. Your rights

If the GDPR or the UK GDPR applies to you, you have the right to request access to your personal data; to have inaccurate data corrected; to have your data erased; to have processing restricted; to object to processing based on legitimate interests, including profiling for advertising purposes; to receive your data in a portable format; to withdraw consent at any time; and to lodge a complaint with your national data protection supervisory authority.

If you are a California resident, you have equivalent rights under the CCPA/CPRA to know what personal information is collected, to request its deletion or correction, and to opt out of the “sale” or “sharing” of personal information for cross-context behavioural advertising. Declining tracking through the prompts described in section 6 is how you exercise that opt-out in our Games. We do not knowingly sell personal information, and we do not discriminate against users who exercise their rights.

You can exercise the choices that are within our reach directly in the Game: reopen the consent form, refuse tracking, or delete the Game to remove local data. For requests concerning data collected by Google or by the app stores, those companies are the controllers and their own procedures apply; we will help you direct your request if you ask us.

To contact us about any of the above, write to contact@vesperfall.net. We will reply within one month.

16. Changes to this policy

We may update this policy to reflect changes in our Games, in our partners, or in the law. The revised version is posted at this address with a new “last updated” date. Where a change is significant — for example the introduction of a new category of data collection — we will also surface it in the Game itself and, where required, ask for your consent again.

17. Contact

Vesperfall is the controller responsible for this policy.

Email: contact@vesperfall.net
Web: vesperfall.net