Privacy Policy
Rooftop Barber Studio
This policy explains how this application handles information and how to contact us about privacy.
Information we process
Rooftop Barber Studio stores your game progress, best order stars, unfinished haircut and undo history, language, sound and motion preferences, and saved before-and-after game artwork locally on your iPhone using SwiftData. These images show illustrated game characters, not camera photos. A random installation secret is stored in the device Keychain. The backend stores a hash of that secret, an internal installation identifier and creation time, completed order numbers and stars, and album image pairs with their identifiers, order numbers and save timestamps. Current unfinished haircuts and settings are not uploaded. When the app or a browser contacts the public service, Cloudflare receives the HTTPS request as the reverse proxy and forwards it over HTTPS to the backend hosted on Railway. These providers process request and response contents as needed to deliver the service, along with network information such as an IP address and request metadata. The service uses temporary in-memory request counters to limit abuse and produces limited operational error logs. No name, email address, password, location, contacts, advertising identifier or payment information is requested by the app.
How we use information
Local data lets you continue a haircut, undo a cut, retain settings and view your creations while offline. Server processing synchronizes completed orders and saved game artwork for this installation. The installation secret authorizes access to that installation's records without an account. Network and limited operational information supports delivery, reliability and abuse prevention. The public privacy contact email is for privacy inquiries only; the app does not send email or create support tickets. There are no advertising, analytics or social sign-in SDKs.
Service providers and sharing
The application backend and its persistent storage are hosted on Railway. Railway processes requests, infrastructure metadata and stored application data as the hosting provider. Cloudflare terminates public HTTPS and proxies requests and responses to Railway; it processes the traffic and network metadata needed to provide that routing and protection. We do not integrate advertising networks, analytics providers or an email delivery provider, and do not sell game data. Data may also be disclosed when required by applicable law. Opening this public page sends an ordinary HTTPS request to the hosting infrastructure; it does not require login or cookies. The app does not publish album works to other players.
Data retention
Local game data remains on the device until you delete individual works, erase progress in Settings, or remove the app's storage. Keychain storage is separate and may persist after app removal, so uninstalling alone is not a server deletion request. Server progress and album records are retained until you delete them through the app. There is no automatic server expiry configured. Temporary abuse counters expire after their request-limiting window; the application does not write request bodies or installation secrets to logs. Railway and Cloudflare infrastructure may retain operational logs according to their service practices, and Railway may retain storage snapshots. We do not specify a fixed provider retention period or promise immediate backup erasure.
Deleting your information
You can delete a saved work from Album, or choose Erase all progress in Settings to remove local game records and request deletion of the installation's server progress, artwork and token-hash record. Offline deletion requests remain queued on the device and are sent when a connection returns, before a replacement installation is created. Keep the app installed and reconnect to complete queued deletion. Deletion removes active database records; residual database pages, hosting logs or any infrastructure backups may remain until they are overwritten or expire under the provider's practices. We have not configured application-managed backups or a separate archive. Losing the installation secret prevents us from reliably locating or restoring your private records; there is no account or cross-device recovery.
Permissions and your choices
The app requests no camera, microphone, photo library, location, contacts or notification permissions. Game artwork is generated inside the app from bundled illustrations and your cuts. Network access is used for synchronization; the game remains playable offline. You can stop using network features by disconnecting the device, but queued deletions require a connection. Sound and motion preferences can be changed in Settings, and the app honors the system Reduce Motion setting.
Your privacy rights
Depending on where you live, you may have rights to access, correct or delete your personal data and to raise a concern with a relevant authority. You can inspect progress and album content in the app and delete data using its Settings and Album controls. For privacy questions or rights requests, contact TheodbaldCrowthorne@icloud.com. Do not send the installation secret by email. Because the service has no account or contact directory, we may be unable to identify a server record if you have lost access to the installation that owns it.
Security
The app uses HTTPS to the public Cloudflare endpoint, and Cloudflare forwards requests over HTTPS to the Railway service. The app stores its random installation secret in the iOS Keychain with this-device-only accessibility. The server stores only a cryptographic hash of that secret and checks it before accessing installation-owned progress or album records. Database queries bind the authorized installation, and request-size and rate limits constrain abuse. Anyone possessing the secret can act for that installation, so keep the device and its credentials secure. No system guarantees perfect security; there is no shared application credential embedded in the client.
Children’s privacy
This creative barber game is intended for players aged 14 and older and is not directed to children under 13. It has no accounts, chat, public gallery or advertising. If you believe a child has provided personal data to this service, contact TheodbaldCrowthorne@icloud.com so the concern can be assessed; identification may be limited by the installation-only design.
Changes to this policy
We may update this policy when the app's processing or hosting practices change. The effective date on this page identifies the current version. Material changes will be reflected in the public policy and in an app update when relevant. Please review the Privacy Policy link in Settings for the latest information.