Privacy in
plain language.

A little trail, only with permission.

Witch Primer can be played without a login, purchases or optional analytics. Your full journey is saved on your device. The game asks before sharing broad progress; saying no leaves the adventure available.

Optional analytics, website delivery and support email are separate activities. This policy explains each below. For privacy questions or requests, contact witch-support@liminalstudios.net.

The journey on your device.

The app stores your saved journey, settings and local recovery copies on your device. These include your progress, inventory, choices and journey name. The analytics service does not receive the full save or recovery files.

An Export journey action creates a .witchjourney file at a destination you choose through Apple’s file interface. If you choose cloud storage or send the file to someone, the selected provider or recipient receives it. We do not receive an export unless you send it to support. Witch Primer does not automatically synchronise journeys between devices or with Witch Feywilds.

Local files remain until removed by you, the app’s recovery management or your device’s storage/app management. Named recovery points remain until you remove them; automatic recovery copies rotate. Device backups may retain copies under your Apple or other backup settings. See save and recovery guidance before deleting anything.

What progress sharing sends.

Sharing is off until you choose Share my progress or enable it in Settings. Existing reached areas and completed quests can be included when you opt in. The purpose is to understand where players progress or get stuck and improve quests and pacing.

• A randomly generated installation identifier, used to recognise reports from the same installation.
• A separate random verification key sent with requests; the service stores a cryptographic hash to authenticate updates and removal.
• The allowed reached-area and completed-quest identifiers reported by the app.
• App build number and platform (iOS or macOS).
• The times reports are received, including the first time a milestone is reported.

This is pseudonymous data, not guaranteed anonymous data. It is associated with the installation identifier. It is not linked to your Apple account and is not used for advertising or sold.

These reports do not include your name, email, journey name, inventory, full saved game or precise movements. Sharing uses an encrypted HTTPS connection and an ephemeral app network session without a cookie store or network cache. A failed upload does not block play.

Change your mind at any time.

Open the hat menu → Settings → Help shape the woodland, then turn off Share journey progress. This stops progress sharing and requests deletion.

If offline, the app retains the installation identifier and verification key needed to finish removal, clears its queued progress and retries when it is opened and can connect. Check for the confirmation that shared progress was removed. Closing or deleting the app before the request succeeds can prevent that retry.

On successful removal, milestone records are deleted. A limited deletion record retains the opaque installation identifier, verification hash and receipt timestamps to prevent a delayed upload recreating the data. It contains no reached areas, completed quests, build or platform and is excluded from progress reports. It is cleared by the inactivity cleanup described below.

Opting in again after successful removal creates a new identifier. Reinstallation can also create a new identifier when the previous local analytics settings are absent; restored device backups may retain those settings.

You can also contact witch-support@liminalstudios.net about access, correction or deletion. Because we do not associate installation IDs with email addresses, an email alone may not identify your analytics record. The in-app removal control is the direct authenticated route. Do not send your verification key by email.

Where shared progress goes.

Cloudflare Workers processes analytics requests and Cloudflare D1 stores the private progress records for Liminal Studios. Reports are available to the studio for the improvement purpose above. Network providers process IP addresses to deliver and protect requests; the analytics rate limiter uses the incoming IP address, but the application’s progression database does not store IP addresses.

The service runs a daily cleanup that removes participant records, associated milestones and deletion records after more than 90 days without a report or removal request. Removal occurs at the next successful scheduled cleanup, rather than at an exact second. Cloudflare infrastructure, security logs and recovery backups have their own retention and processing arrangements; the 90-day rule describes our application database, not every provider backup.

Cloudflare may process information in countries other than your own. Its processing is described in the Cloudflare Customer Data Processing Addendum and Cloudflare Privacy Policy. Our service does not add advertising networks or third-party analytics SDKs.

Visiting this field guide.

Cloudflare hosts and delivers this website over HTTPS. Normal connection and security data can include IP address, requested URL, browser or device request headers, request time and response status. This processing delivers pages, protects the service and diagnoses failures. Hosting diagnostics are enabled with query-string redaction; infrastructure records are separate from app progress analytics.

The site does not add analytics beacons, advertising, third-party fonts, embedded videos, contact forms, browser storage or tracking cookies. Its images and fonts are served from this domain. Cloudflare may use necessary security mechanisms or cookies when protecting a request. We have not set a separate fixed retention period for provider-managed hosting and security records; Cloudflare’s service settings and policies apply.

Following an external link takes you to another provider, whose policy applies there. An email link opens your chosen email service.

When you write to us.

When you email witch-support@liminalstudios.net, we and the email services involved receive your email address, the message and any attachments you choose to send, along with ordinary mail delivery information. We use these to respond, diagnose problems and manage the support conversation.

A screenshot or journey export can contain personal or detailed gameplay information. Please send only what is relevant. Support correspondence is kept to handle the request and its follow-up; there is no fixed automatic deletion timer for the mailbox. Ask us to remove correspondence you no longer want retained. Mail-provider backups and any applicable record-keeping obligations can limit immediate removal.

We do not use support messages for advertising or sell them. Access is for handling studio support. The email services you use may process messages under their own privacy terms.

Separate Apple services.

If you use a TestFlight build, Apple separately processes testing feedback and diagnostics under its own terms. Device diagnostics and backups also follow your Apple settings. See Apple’s privacy information.

We will update this page when the service changes, with the revision date above. A policy update does not turn on optional analytics; that remains your in-app choice. For any question about this policy, contact witch-support@liminalstudios.net.