Privacy Policy
Bold: Vintage Displays
This policy explains how this application handles information and how to contact us about privacy.
Information we process
Bold: Vintage Displays stores restoration strokes, fragment positions and rotations, paint choices, lighting repairs, completed sign variants and settings in a local file on your device. It creates a random installation identifier, an authorization secret and a separate encryption key in the iOS Keychain. Optional encrypted backup sends the installation identifier, authorization secret over HTTPS for verification, and an AES-GCM encrypted copy of game progress and settings to our backend. The server stores a hash of the authorization secret, the installation identifier and creation time, plus the encrypted backup, its format version and update time. The encryption key is not sent. Public website and API requests also expose ordinary network information such as IP address, request time and route to Cloudflare and Railway infrastructure. We do not request your name, email address, location, photos or contacts and do not use accounts, advertising or analytics SDKs.
How we use information
Local data allows you to pause, continue and collect restored signs. Keychain credentials authorize access only to this installation's backup. The separate encryption key protects game content before upload. Optional server backup lets this installation restore saved progress when its Keychain material remains available. Operational request identifiers and error codes are used to diagnose service failures. The public website provides product information and this privacy policy.
Service providers and sharing
The backend and PostgreSQL database are hosted by Railway, which processes encrypted backup data and infrastructure request information to operate the service. Cloudflare terminates HTTPS for the public website and API and proxies requests to the same Railway service over HTTPS. It processes network identifiers, request metadata, installation identifiers, authorization credentials in transit and encrypted request content to provide this routing and security service. The separate game encryption key is never sent to Cloudflare or Railway. The application server logs error codes and random request identifiers rather than request bodies, authorization secrets or encryption keys. Cloudflare and Railway may maintain their own infrastructure and access logs. We do not sell personal information or send game content to advertising, analytics, email or social sign-in providers. Apple provides the device operating system and Keychain; device backups are controlled by your Apple settings.
Data retention
Local progress remains until you reset it or remove the application; operating-system backup copies may be governed by your device settings. The Keychain material may survive application removal on the same device, but its availability is not guaranteed. Server encrypted progress remains until you request deletion. Installation authentication records are retained after progress deletion so that the same installation can safely save again without credential replacement. We have not configured an application-level automatic expiry or a separate application backup archive. Infrastructure logs and any provider-managed snapshots are governed by Cloudflare and Railway operational arrangements; we do not assert a fixed retention period for them. Deleted live records may persist in provider recovery copies until those copies expire under the provider's practices.
Deleting your information
Use Delete all progress in Settings to delete the server's live encrypted progress and then reset the device's progress and collection. The operation requires network access and leaves local data intact if server deletion fails. The installation identifier and secret hash remain as authorization metadata, and the device retains its Keychain credentials. Turning backup off stops new uploads but does not delete an existing backup. Removing the application removes its local container but does not itself request server deletion. You may contact AramintaTrelawney@icloud.com about deletion of remaining data. We do not ask you to send your installation secret or encryption key by email. Recovery copies, if maintained by infrastructure providers, are not individually edited and may remain until their normal expiry.
Permissions and your choices
The application does not request location, camera, microphone, photo library, contacts, tracking or notification permission. Sound, ambience and haptic switches are local settings and take effect in the application. You can turn encrypted backup off in Settings to stop future uploads. iOS settings control device-level backup and other operating-system access; changing those settings does not itself delete an existing server backup.
Your privacy rights
Depending on your location, you may have rights to access, correct, delete, restrict or object to processing and to complain to a relevant data protection authority. Contact AramintaTrelawney@icloud.com with privacy questions or rights requests. We may need enough non-secret information to identify the relevant record and verify your request. Because the service has no user accounts and cannot decrypt backups, we cannot identify a person by name, read encrypted game content or recover data when the required Keychain material is lost. The in-app reset is the direct authorized way to remove live game progress.
Security
Requests use HTTPS to Cloudflare, which terminates public TLS and forwards them over HTTPS to the pinned Railway origin. Game content remains client-encrypted across this route. Private progress endpoints require a random installation-scoped secret and validated installation identifier. The server checks the secret hash and restricts operations to that installation's record. Game content is encrypted on the client with AES-256-GCM using a separate random key stored only in the device Keychain. The server stores ciphertext, not that key. Local saves use iOS file protection and atomic replacement. No shared application credential authorizes private backups. These measures reduce risk but cannot guarantee absolute security; someone with access to an unlocked device or its secrets may access its progress.
Children’s privacy
The game is designed for a general audience interested in calm restoration, particularly players aged sixteen and older. It does not offer accounts, messaging, advertising or social features and does not knowingly request children's personal details. If you believe a child has supplied personal information to the service, contact AramintaTrelawney@icloud.com so the request can be assessed.
Changes to this policy
We may update this policy when the application, backup processing or hosting practices change. The current policy is published at this page with its effective date. Material changes will be reflected in an updated policy and, where appropriate, in the application. The privacy contact remains AramintaTrelawney@icloud.com.