Built for play, not for tracking.

About this policy

This policy applies to Whirlwind Arena (the “App”), a four-player arcade party game for iPhone and iPad published by Haselrig Technologies LLC (“Haselrig Technologies,” “we,” “us,” or “our”). It covers the App and the online service that runs its online lobbies, Quick Match and online voice relay. Our website privacy policy applies when you visit this website or send us a message through it.

No accounts or passwords

You don’t create an account or a password to play Whirlwind Arena, and the App never asks for your real name, email address, phone number or Apple Account password. Online play uses your Game Center identity, which Apple provides when you are signed in to Game Center on your device.

Information stored on your device

The App keeps the following on your device so the game can remember your choices and progress:

• Settings, such as your sound and voice chat choices;
• Your multiplayer agreement choice—the version of the agreement you accepted, saved in the App’s local preferences so it can check whether agreement is required before multiplayer. This preference is not sent to our online service or included in the wallet’s iCloud backup;
• Your block list—the players you have blocked;
• Unsent player reports—a report that could not be sent when you made it (the reported player’s ID and display name, the reason, the lobby code and the time), kept until it is sent, for at most seven days;
• Progress, including your XP; and
• Your coin wallet—your Whirlwind Coin balance, the items you own and your purchase receipts.

This information is stored in the device Keychain and in the App’s own storage. We cannot access it. Deleting the App removes it from your device, although iOS may keep Keychain items after an app is deleted. The optional iCloud backup described below is separate.

iCloud wallet backup

If you are signed in to iCloud, the App syncs your coin wallet—balance, owned items and purchase receipts—to your private iCloud database using Apple’s CloudKit. This backs up your wallet and lets you recover it, for example on a new device signed in to the same iCloud account. Your private iCloud database belongs to your iCloud account, and Haselrig Technologies cannot access it. Apple’s privacy policy applies to iCloud.

iCloud is optional. The game works without it, and your wallet then stays on your device only. You can delete the backup on your device in Settings › [your name] › iCloud › Manage Account Storage.

Purchases

Whirlwind Coins are sold as in-app purchases through the App Store. Apple processes every payment; we never receive your payment card, billing details or other payment information. Apple gives the App a record of each transaction so it can add your coins, and that receipt is kept in your wallet on your device and in your optional iCloud backup. Purchased coins are spent only on cosmetic items.

Game Center

The App uses Apple’s Game Center to sign you in, to send and accept friend invitations, and to run Game Center matches. In a Game Center match, game data passes directly between players’ devices (peer-to-peer) or through Apple’s relay servers. Players in a match can see each other’s Game Center display names. In a match an online lobby starts, players keep the names the lobby showed. Before the App follows a Game Center invitation, it signs in to our online service to check that your account has not been removed from online play, which creates or updates your online record. Game Center is provided by Apple, and Apple’s privacy policy applies to it.

Online play and our online service

Our online service supports Online lobbies, Quick Match, player reports and the account check before Game Center invitations. It uses Cloudflare Workers, a D1 database and Durable Objects. Cloudflare operates a distributed network, and processing and storage are not restricted entirely to the United States. When you connect for Online play, the service verifies your Game Center identity using Game Center’s signature verification. It then uses the information below.

Your online record

We keep one online record per player, keyed to your Game Center team player ID. It contains:

• your Game Center team player ID and game player ID, which are identifiers Game Center provides for your account in our games;
• your Game Center display name;
• your matchmaking rating;
• the code of the most recent lobby you created, so you can return to it;
• the App version you use; and
• the date the record was created and the date you were last seen online.

In Nearby play and Game Center invitations, which do not pass through our service, the App checks other players’ names on your device against the same word list and shows “Player” and four digits in place of a name it catches.

Lobbies

While a lobby exists, the service keeps its membership and its settings, such as the lobby name, number of rounds and difficulty. This information is deleted when the lobby closes; only the code of the last lobby you created stays with your online record.

Approximate location

To sort lobbies and group Quick Match players by estimated connection quality, the service uses an approximate location that Cloudflare derives from your IP address: latitude and longitude rounded to about 0.1° (on the order of 10 kilometers), and your continent. It is held only while you have a lobby open or are searching in Quick Match, and it is deleted when the lobby or search ends. Your continent is shown to other lobby members, and players browsing open lobbies see a rough connection estimate in 20 ms steps, which shows the region a lobby’s host is in, not their town. We do not store raw IP addresses in player account or lobby records. Network-based rate limiting is described below. The App does not use your device’s Location Services.

Abuse prevention and rate limiting

To prevent excessive sign-in requests, the service uses your IP address for IPv4, or your network prefix for IPv6, to derive a rate-limiter identifier. It temporarily keeps request timestamps for that identifier over a one-minute sign-in window. Other limits use your online account identifier and request timestamps over windows of up to ten minutes. Rate-limiter timestamp storage is cleared after its active windows have drained. We use this information to protect the service, not for advertising or tracking.

Player reports

When you report a player, we store who made the report, the reported player’s ID and display name, the lobby code, the reason category and the time we receive the report. A report the App could not send at once is kept on your device and sent later, so we may receive it up to seven days after it was made. We use reports to review behavior under our Community Terms.

Report details may also be sent through Cloudflare’s email service to a private moderation inbox for authorized reviewers. Notifications contain the report identifier, time, reporter’s account identifier, reported player’s display name, lobby code, context and reason. They do not contain the reported player’s Game Center identifier. They do not contain voice recordings. Email copies are managed separately from the report database, as explained under retention and deletion below.

Blocks

When you block a player in online play, we store that you blocked them: your account identifier, the player’s ID and the display name you were shown, the lobby code and the time. We use this to find players many others block and to review them under our Community Terms. If several different players block the same player within a week, our private moderation inbox receives an email with that player’s display name and the number of blocks, but not their Game Center identifier. Unblocking the player deletes the record. Blocks in Nearby play stay on your device. We also use your online blocks to keep you apart from the players you blocked: Quick Match does not put you in a group with them, and they cannot join a lobby you are in.

Moderation records

If a player is removed from online play, we keep that player’s Game Center team player ID, the reason and the date, so the removal can be enforced.

Server logs and connection metadata

The backend keeps application logs on Cloudflare for up to 7 days for security and troubleshooting, such as errors and retention-task results. Automatic per-request invocation logging is disabled in our backend configuration. Cloudflare still processes request and connection metadata, including your IP address, to deliver and secure the service.

Voice chat

Voice chat is optional and off by default. When you turn it on, tap to talk is the default: your voice is sent only after you tap the talk button, until you tap it again. Hold to talk and open mic are options in Settings. The App uses the microphone only while voice chat is switched on, in multiplayer lobbies and matches, and iOS asks for your permission before the microphone is used.

• Nearby play: voice is sent directly between devices on the local network, encrypted.
• Game Center matches: voice is sent through Apple’s Game Center service.
• Online lobbies: voice is relayed in real time through our server to the other members of your lobby.

We never record, store, transcribe or monitor voice chat. For signed-in accounts, voice chat is unavailable when Game Center marks the account as underage or reports personalized communication restrictions, including applicable Screen Time limits. The App also respects multiplayer restrictions reported by Game Center. These safeguards use Apple’s account signals; we do not collect a date of birth.

Nearby play

Nearby play uses your local network and Bluetooth to find and connect to players near you, so iOS asks for Local Network and Bluetooth permission. Nearby players see your Game Center nickname, or “Player” and four digits if you are not signed in to Game Center—never your device’s name. Nearby play sends nothing to our servers.

What other players can see

When you play with other people, they can see:

• your display name;
• the character and cosmetics you choose;
• your lobby’s name and continent, and an estimated ping to it;
• a speaking indicator while you talk; and
• your voice, when voice chat is on.

What we don’t do

• We don’t show ads.
• We don’t use analytics or tracking, and we don’t track you across other companies’ apps or websites.
• The App contains no third-party SDKs.
• We don’t sell personal data or share it for advertising.
• We don’t use your data to train AI.

Character voices are AI-generated in advance. No player data is sent to AI services.

How we use information

We use the information described in this policy to run online lobbies, Quick Match and the online voice relay; sort lobbies and group Quick Match players by estimated connection quality; deliver and back up your purchases; review reports, enforce our Community Terms and keep online play safe; secure and troubleshoot our service; and comply with the law, including reporting apparent child sexual exploitation to the National Center for Missing & Exploited Children (NCMEC) and responding to valid legal process.

Where the GDPR or UK GDPR applies, we process this information to provide the features you choose to use and for our legitimate interests in keeping online play safe, secure and working. You control voice chat and microphone access through the App’s settings and iOS permissions.

How long we keep information

• Online record: until you delete it, or automatically after 12 months without online activity.
• Lobby membership, lobby settings and approximate location: deleted when the lobby closes or the Quick Match search ends.
• Player reports and blocks in the database: deleted after 12 months.
• Report email notifications: kept in the private moderation inbox while needed for report review, follow-up or related moderation action. Automatic database deletion does not remove email copies; contact us to request their review or deletion.
• Rate-limiter timestamps: cleared after active windows drain; the current sign-in window is one minute and account-based windows are up to ten minutes.
• Records under a legal preservation hold: when a report is referred to NCMEC or law enforcement asks us to preserve records, the reports and blocks about that player and their online record are kept for as long as the law requires (usually one year), even if the account is deleted, and then deleted.
• Moderation records: kept as long as needed to enforce a removal.
• Backend application logs: up to 7 days.
• Information on your device: until you delete the App; iOS may keep Keychain items after deletion.
• iCloud wallet backup: until you delete it from your iCloud storage.

Deleting your data and opting out

In the App

Open Settings and choose Delete Online Data. This removes your online record from our service and clears your identity from reports you filed and players you blocked in the database. Any reports still waiting on your device are sent first and treated the same way; any that cannot be sent are removed from your device. Deletion works even if your account has been removed from online play. Reports filed about you, and any moderation record, are kept for the retention periods above. This action does not delete moderation email copies or your locally saved multiplayer agreement choice. To request review or deletion of email copies, use the privacy request form below. If you play online again, a new online record is created. If your online record is under a legal preservation hold, it is removed from online play at once but kept, separately, until the hold ends.

Through our contact form

Use our privacy request form, choose “Privacy request,” and enter “Whirlwind Arena” as the app. This also works if you can no longer sign in to Game Center. We may need to verify your request before we act on it.

Opting out

You can limit what the App uses at any time:

• keep voice chat off, or deny microphone permission in Settings › Privacy & Security › Microphone;
• don’t use Online play; or
• sign out of Game Center.

Children

Whirlwind Arena is not directed to children under 13. Voice chat needs a signed-in Game Center account: the App keeps voice off when nobody is signed in, when Game Center marks the account as underage, and when it reports communication restrictions, and it respects the multiplayer restrictions Game Center reports. An account Game Center marks as underage cannot use online lobbies or Quick Match and is not signed in to our online service, except to deliver a report it makes about another player; its blocks stay on its device. The App does not independently verify age or collect a date of birth. A parent or guardian can ask us to delete a child’s online data through our privacy request form.

Your privacy rights

Depending on where you live—for example, under the GDPR or UK GDPR, or the California Consumer Privacy Act as amended by the CPRA—you may have the right to access, delete or correct personal information we hold about you, to receive a copy of it, and to object to or restrict how we use it. Submit requests through our privacy request form. We respond within 30 days, and we will not discriminate against you for exercising these rights.

If the GDPR or UK GDPR applies to you, you may also complain to your local data-protection authority or, in the United Kingdom, the Information Commissioner’s Office. We do not sell personal information or share it for cross-context behavioral advertising.

International transfers

Haselrig Technologies LLC is based in the United States. Our providers operate distributed infrastructure, so information used for Online play, reports and moderation notifications may be processed or stored in the United States and other countries where they operate. The service does not guarantee processing or storage exclusively in the United States. Using these features may involve transfers outside your country of residence.

Security

We protect online play with TLS encryption in transit, signed short-lived session tokens and verification of Game Center identity signatures. There are no passwords for us to store, because the App never uses one. No method of transmission or storage is completely secure, but we work to protect the information we handle.

Service providers

We rely on three companies to provide the App’s services:

• Apple provides the App Store, Game Center and iCloud. See Apple’s privacy policy.
• Cloudflare hosts our online service, relays online lobby voice and keeps the request logs described above. See Cloudflare’s privacy policy.
• Google hosts the private moderation inbox (Gmail) that receives report notifications. See Google’s privacy policy.

We share information with these providers only so they can provide those services, and each of them is required to give it the same or equal protection as this policy describes.

Changes to this policy

If we change how the App handles information, we will post the updated policy on this page with a new effective date.

Contact us

For privacy questions, deletion help or other requests, use our privacy request form and choose “Privacy request,” with “Whirlwind Arena” as the app.

Haselrig Technologies LLC
United States