Privacy Policy
Leo Valley Lucky
This policy explains how this application handles information and how to contact us about privacy.
Information we process
Leo Valley Lucky stores campaign scores, delivered lantern counts, decorative selections, language, sound, assistance and reminder preferences, a suspended round, cached daily routes and pending daily results locally in the app’s private storage. A random installation secret is created automatically and stored in the device Keychain. When you request the daily route or open this website, our Railway-hosted server receives network requests, including network addresses and ordinary HTTP metadata. Successful server daily deliveries send the UTC day, rules version, number of lanterns and round duration with the installation secret over HTTPS. The server stores only a cryptographic hash of that secret, creation and update timestamps, and the best result for each day. We do not ask for a name, email address, password, location, contacts, photos or payment details. There are no accounts, advertising or third-party analytics SDKs.
How we use information
Local information lets the game resume rounds, unlock campaign routes and decorations, apply your choices and work offline. The server provides the shared daily route and records an installation’s best daily result for delivery statistics. Installation authorization permits saving and deleting only that installation’s information. Network metadata supports request delivery, service security and diagnosing operational failures. Optional reminders are scheduled on your device, not sent by a marketing service.
Service providers and sharing
Railway operates the backend infrastructure and therefore processes requests and may retain infrastructure or access logs, including network metadata. The app does not send gameplay information to advertising, analytics, social-login or email-delivery providers. We do not publish individual results, provide a public lookup of installation records, or sell personal information. We may disclose information when required by applicable law. The privacy contact address is balfour.kershaw@icloud.com; contacting it is outside the app and is handled by the email services used by the sender and recipient.
Data retention
Local progress and preferences remain until you reset progress, remove the app’s local data or remove the app. The Keychain secret may remain after uninstalling, subject to iOS behavior, and is device-bound. Server installation hashes and daily best results are retained until the installation requests deletion. Pending results remain locally until a successful upload or deletion of server data from Settings. Rate-limit addresses and hashes are held in server memory only and are cleared after expiry, within about ninety seconds. We have not established a fixed retention period for Railway’s own infrastructure logs and do not claim one. No application-level backup schedule is configured; infrastructure backup or recovery copies, if present, follow the hosting provider’s practices rather than an invented app retention period. If a save can be read as bytes but cannot be decoded, the app preserves a private local recovery copy before permitting a fresh save. These recovery copies remain on the device until Reset local progress removes them or the app’s sandbox is removed. If the original cannot be read or copied, automatic writes are blocked until an explicit reset or a successful later launch.
Deleting your information
Settings offers Delete server data. It makes an authenticated HTTPS request using the installation secret and removes that installation’s server record and associated results, while retaining local campaign progress. Pending uploads are cleared only after the deletion succeeds. Failure is shown and can be retried; the app does not report an unsuccessful deletion as complete. The server uses secure SQLite deletion and checkpoints its write-ahead log. Deletion from the live database does not assert immediate removal from unknown hosting logs or any infrastructure recovery copies. Reset local progress separately clears campaign scores, collection and the suspended round. Removing the app removes its sandbox according to iOS behavior. If the installation secret is lost, there is no login or cross-device recovery and we cannot reliably identify earlier records as yours. Reset local progress also removes private local recovery copies of unreadable saves. Daily results older than the server’s current or previous UTC day remain as local progress and are not uploaded; expired pending uploads are removed so new results can sync.
Permissions and your choices
The only optional user permission is local notifications for a daily reminder, requested when you turn that setting on. You may turn reminders off in the app or withdraw notification permission in iOS Settings; gameplay remains available. The app does not request location, camera, microphone, contacts, photo-library or tracking permission. Sound playback and HTTPS networking do not require a separate user permission. The system Reduce Motion preference changes decorative movement without affecting the game rules.
Your privacy rights
You can inspect and reset local progress, change preferences and request deletion of your installation’s server information in Settings. Depending on your jurisdiction, you may have rights to access, correction, deletion, restriction, objection or a complaint to an appropriate authority. Questions about this policy or a privacy request can be sent to balfour.kershaw@icloud.com. Please do not send your installation secret; without a reliable way to link a record to you, we may be unable to retrieve it. This policy does not promise account recovery or data transfer between devices.
Security
Public communication uses HTTPS. The installation secret is random, stored in Keychain with device-only accessibility and sent as an authorization header; no shared client credential is embedded. The server stores a SHA-256 hash rather than the raw secret, validates result fields, limits payload size and request rates, and scopes deletion to the authenticated hash. App logs do not intentionally include authorization secrets or result payloads. Local saves are written atomically. No system is completely secure, and we do not claim a certification or guarantee against every risk.
Children’s privacy
The game is intended for players of all ages, including children, and has no advertising, purchases, chat, account creation or public player profiles. Its server receives only the limited installation and daily-game information described here. A parent or guardian can disable reminders, use offline campaign play, reset local progress or delete the installation’s server data from Settings. If you believe a child supplied personal information outside the intended processing, contact balfour.kershaw@icloud.com.
Changes to this policy
We may update this policy when the game, its data processing or hosting practices change. The current policy is published at this page with its effective date. Material changes will be reflected in the app’s linked policy and, where appropriate, communicated in the app. This version describes the processing implemented as of its effective date.