FORWARD BASTION

Privacy policy

Controller and contact

Scharmach Consulting Paweł Scharmach, Rokocin 4D, 83-200 Starogard Gdański, Polska / Poland. NIP / VAT UE: PL5922107884. Contact: biuro@scharmach.pl.

Account and game saves

Sign in with Apple is optional. We use the Apple account identifier to establish a player identifier and manage sessions. The game does not receive your Apple password. The token used to revoke Apple access is encrypted. Your account stores a callsign, campaign progress, equipment configuration, the active mission, command history and scores. Your callsign and scores may appear on leaderboards visible to other players. Account features, rankings and purchases require sign-in.

Apple purchases

Additional content is sold as one-time purchases, not subscriptions. Apple processes payments; we do not receive card details. We process transaction identifiers, products, status, payment environment, verification times and an account-binding identifier. Our server verifies ownership with Apple. Automated verification may deny access if a transaction is revoked or cannot be confirmed. Contact us if you encounter an error.

Gameplay data and statistics

We record operation starts and outcomes, completed waves, scores, returns to the menu and store visits, linked to the player identifier and event time. These records support saves, score verification, difficulty analysis and improvements to the game. We do not use an advertising device identifier or track activity across apps. We do not sell player data.

Data on your device

Language, settings and local progress are stored on your device. The sign-in session is stored in the system Keychain. The app also uses a cache. Deleting the app may remove guest progress; first ensure that your progress is saved to your game account.

Purposes and legal bases

Accounts, progress saves, rankings, purchase verification and restoration, and service-related support are provided to perform our contract with you (GDPR Article 6(1)(b)). Security, abuse prevention, analysis of game operation and difficulty, and legal claims rely on our legitimate interests (Article 6(1)(f)). Records required by law are retained to meet legal obligations (Article 6(1)(c)). Providing account data is voluntary but necessary for account-dependent features.

Retention and account deletion

Account data, progress and gameplay events are retained while you use the account. Choose Account → Delete game account in the menu. After Apple access is successfully revoked, we remove the account, sessions, callsign, runs, scores, mission reports and store visits from the active database. Limited purchase evidence and account links remain to restore one-time content and prevent reassignment to another person. These records are not automatically removed with account deletion; their continued necessity is assessed when handling entitlements or data requests. Deleting the account does not refund an Apple purchase. It also does not immediately remove local copies on other devices or the hosting provider’s infrastructure backups.

Support correspondence

A support request gives us your email address, message and attachments. Ordinary support correspondence is kept for 12 months after the case closes. Ongoing complaints, disputes or legal duties may require longer retention of relevant records. Never send passwords, sign-in codes or payment-card details.

Providers and technical data

Render hosts the game server and database. Apple handles sign-in and payments. IQ PL Sp. z o.o. hosts biuro@scharmach.pl. Connections involve technical information such as IP addresses; the app also uses these transiently to limit login abuse. Provider logs and infrastructure backups follow the providers’ retention cycles. Apple independently determines its account and billing practices.

International processing

Apple and Render services may involve processing outside the European Economic Area. Transfers are subject to applicable safeguards, such as adequacy decisions or standard contractual clauses, depending on the recipient and transfer. Contact us for information about these safeguards and a copy where applicable. We do not claim that all processing takes place exclusively in the EU.

Your rights

You may request access, correction, deletion, restriction and, where GDPR provides, portability of your data. You may object to processing based on legitimate interests, including gameplay analysis, for reasons relating to your situation. You may complain to the Polish supervisory authority (UODO) or another competent authority. We may request information necessary to verify that a request concerns your account. We do not make decisions with legal or similarly significant effects on you solely through profiling.

Changes

We publish the current policy here and update it when processing practices materially change. Version: 17 September 2026.

Forward Bastion · Scharmach Consulting