Oortfall Privacy Policy
Last updated: 26 September 2026
In short: Oortfall has no accounts, no ads and no advertising ID, and it does not track you across other apps or websites.
If you allow it, the game sends two kinds of anonymous report through Google Firebase: crash reports and usage analytics. They help us fix bugs and improve the game.
Nothing is sent until you choose, and you can switch either report off at any time under Privacy on the title screen.
Who we are
Oortfall is made by Giftivest Ltd, a company registered in England and Wales (company number 16197030) with its registered office at 128 City Road, London EC1V 2NX, United Kingdom. Giftivest Ltd is the “data controller” for the information described below.
Contact us about privacy at privacy@oortfall.com, or through the form at oortfall.com/support.
What stays on your device
Your saved match, campaign progress, Service Record, settings and privacy choices are stored only on your device. We never receive them. Deleting the app deletes them.
What is sent, and only if you allow it
Crash reports (Firebase Crashlytics)
If the game crashes, a report is sent the next time it starts. The report contains:
- what the code was doing at the moment of the crash (a stack trace);
- the device model and orientation;
- the iOS and app versions;
- free memory and storage;
- the time of the crash;
- a random installation identifier, which lets us tell whether one crash hit one player or many.
Usage analytics (Firebase Analytics)
Analytics records events such as the game being opened, screens viewed, and session start and length. It also records:
- the device model;
- the iOS and app versions;
- your language;
- an approximate country or region, worked out from your IP address. The address itself is not stored with the data;
- a random app-instance identifier.
The game uses the version of Analytics without advertising features. It does not collect:
- the advertising identifier (IDFA);
- the vendor identifier (IDFV);
- your name, email, contacts, photos or precise location.
Every advertising signal is marked as denied, and the data is not used for ads.
Separately, each time it starts, the game downloads a small settings file from oortfall.com with balance updates (unit costs, match rules) and title-screen notices. The request carries no identifier and no cookie, and nothing about you or how you play. Like any web request, it reaches our web host (Google Firebase Hosting) from your IP address, which the host uses only to deliver the file.
Contacting us through the website
If you use the contact form at oortfall.com/support, we store what you send (your email address, your message, and the optional name and device) in Google Cloud Firestore, in Google's London region, and a notification containing it is posted to our team's Google Chat (Google Workspace). We use it only to reply and to fix what you report, and we delete it within 12 months. Our legal basis is legitimate interest in answering you. The website uses no analytics or advertising trackers. To keep out automated spam, the contact form is protected by Google reCAPTCHA Enterprise (through Firebase App Check): it checks signals from your browser for signs of automation and may set a security cookie, and Google's Privacy Policy applies. No other page sets cookies.
Why we use it, and our legal basis
We use the reports only to find and fix crashes and to understand which parts of the game are played, so we can improve it.
Under UK and EU data-protection law, our legal basis is your consent. That is why both reports are off until you choose.
Who processes it
The reports are processed for us by Google, through Firebase, under Google’s data-processing terms (Firebase data processing terms, Privacy and Security in Firebase).
Google may process the data outside the UK and EU, including in the United States. Where it does, the transfer is protected by standard contractual clauses and Google’s certification under the EU–US Data Privacy Framework and its UK extension.
We do not sell, rent or share the data with anyone else.
How long it is kept
| Crash reports | Deleted by Crashlytics after 90 days. |
|---|---|
| Analytics events | Kept for 2 months at user level, after which only aggregated totals remain. |
Your choices and rights
- Change your mind at any time: title screen → Privacy. Switching analytics off stops it immediately and resets the analytics data held on the device. Switching crash reports off deletes any reports still waiting on the device and stops crash reporting from the next time the game starts.
- You have the right to:
- ask for access to data about you;
- ask for it to be corrected or erased;
- object to or restrict its processing;
- withdraw consent.
- The reports are anonymous and not linked to an account, so we usually cannot pick out one player’s data. Switching the reports off and deleting the app removes everything held on your device. For anything else, contact us at privacy@oortfall.com and we will help where we can.
- You can complain to a data-protection authority. In the UK that is the Information Commissioner’s Office (ico.org.uk); in the EU, it is your country’s authority.
Children
Oortfall has no accounts or chat and asks for no personal information.
The anonymous reports above are sent only with the player’s consent. If you are a parent and have questions, contact us at privacy@oortfall.com.
Changes to this policy
If we change what is collected, we will update this page. We will also ask again in the game before sending anything new.