Privacy Policy — Fateline

The short version

Fateline has no account and no login. It does not collect your name, email address, phone number, contacts, photos, location, or any other personal information. Your saved lives never leave your device. The only data collected is anonymous usage analytics — which screens get used and where people stop. It is always on, it is never linked to a person, and you can reset your anonymous identifier at any time from Settings.

What we do not collect

No name, email address, phone number or postal address.
No account — Fateline has no sign-up and no login of any kind.
No contacts, photos, camera, microphone, health or location data.
No advertising identifier (IDFA). Fateline contains no advertising and no ad SDK.
No third-party trackers, no data brokers, and nothing is ever sold or shared for advertising.

Purchases

If you buy anything in Fateline, Apple handles the payment — we never see your card, your Apple Account, or your name. Fateline never sees or stores your payment details; the app only asks Apple whether a purchase is currently valid, so it knows what to unlock.

To make a purchase restorable on a new device, the record of what was bought is processed by RevenueCat, which stores it against an anonymous identifier it generates itself. Fateline gives RevenueCat no user id, because it has none: the app has no accounts. This is the app's only third-party service besides the anonymous analytics described below, and it is used for purchase restoration and sales reporting only — never for advertising or tracking.

Your saved lives stay on your device

Every character, run, thread and Ledger record is stored locally on your iPhone. There is no server copy, no cloud sync and no backend. Fateline works completely offline. If you delete the app, that data is deleted with it, which is why the app offers an Export a backup option in Settings so you can keep your own copy.

Anonymous usage analytics

To understand which parts of the app are confusing or unused, Fateline records anonymous product events — for example that an onboarding screen was viewed, or that a purchase screen was shown. These events are tied to a random identifier generated on your device. That identifier is not linked to you, cannot be used to identify you, and is not shared with any advertising network.

Specifically, the analytics events include:

Which screens are viewed and completed, and where people stop.
Which onboarding answers are chosen (as anonymous categories, never free text).
Whether a purchase screen was shown, dismissed, or completed.
Coarse technical context: app version, device model, iOS version and language.

Analytics are processed by PostHog on servers in the European Union.

This collection is always on, and there is no toggle for it. Earlier versions of Fateline asked you to opt in on a screen during setup. That switch was removed in version 1.0.4, because it meant the app could only ever measure the small number of people who found and enabled it — which is not a reliable picture of where the game loses anyone. Fateline is made by one developer, and this is how they find out which screens are confusing.

What is recorded is deliberately narrow, and it is the list above: which screens get used, which buttons, which years, where people stop. Never who you are, never what your character did, never anything a person could be identified from. No name, no email, no contacts, no location, no advertising identifier, and nothing shared with any advertising network.

Children

Fateline is rated for players aged 12 and over and is not directed at children under 13. It collects no personal information from anyone, of any age.

Your rights

Because Fateline holds no personal data about you, there is nothing to request, correct or export from us — we could not find your data if you asked us to, because nothing we hold identifies you.

If you want the anonymous analytics associated with your device unlinked, use Settings › Privacy › Reset my anonymous ID. A new random identifier is generated, anything not yet sent is deleted, and everything previously recorded from this device stops being connected to it. Your saves, purchases and settings are untouched. You can also delete the app, which removes the identifier along with everything else stored on your device.

If you would rather write to us, Settings › Message the developer inside the app reaches the developer directly; see the support page.

Changes

If this policy changes, the updated version will be posted here with a new date. Material changes will also be noted in the app's release notes.