Privacy Policy

Who we are

This policy describes how data is handled in Duskfall: Last Homestead and on this website. The developer and data controller is Salim Demir, an independent developer based in Türkiye and operating under the Redem Games name. Contact: redemgames0@gmail.com. Effective date: 2 November 2026.

1. Game progress and preferences

The game stores progress, settings, coin balances, purchase records, the list of players you muted or blocked and its online identifiers on your device. Until you use a feature that needs a game account (section 2), nothing of this leaves your device except what online play sends to Photon and to other players (section 3) and, on Android, the game analytics events described in section 6. Removing the app removes local progress and coin balances; a cloud backup exists only if you link your game account to Game Center or Google Play Games (section 2).

2. Game account, cloud save and coin records

From version 0.3.0 (iOS build 24, Android version code 9) online play, account linking and purchases use a game account on our servers, which run on Cloudflare (Cloudflare Workers and D1 database). The account is created automatically the first time you use one of these features. We never ask for your name, e-mail address or phone number. We store:

• a random account ID, an 8-character Player ID, a random ID for each device signed in to the account, and keyed hashes (never the values) of each device's secret key and of your deletion code;
• the platform (iOS or Android), when the account was created and last used, and the display name last accepted for online play;
• if you link Game Center (iOS) or Google Play Games (Android): a keyed hash of the player identifier that Apple or Google confirms for you. To link, the game sends us Apple's identity-verification signature, or a one-time Google sign-in code that our server exchanges with Google once to read your Play Games player ID. Only the keyed hash is kept: your Apple ID and Google account e-mail address are never sent to us, and Google's answer to our server contains only your Play Games player ID (no gamer tag, avatar or friends list). On Android, Google Play Games itself may sign you in when the game starts, as in every game that uses it; that happens between your device and Google, and our servers learn nothing from it unless you link;
• if your account is linked: your cloud save - the game's save files (progress, coin balance and the purchase records the game keeps) and your block list, with a short summary (chapter, day) and the platform it came from;
• a coin ledger: purchases the store confirmed (product, store transaction or order number, purchase time, sandbox or production), coins and Skip to Night charges you spent (amount and what for, such as a revive), starting and bonus coins, and the purchased coins this device already had when the account was created. Each purchase is checked with Apple's signed transaction or Google's signed purchase data; a keyed hash of the transaction is kept so the same purchase can never be credited twice;
• to protect the service, requests are counted per connection: a keyed hash of the IP address and a counter are kept for up to 2 days. Cloudflare processes connection data, including IP addresses, to deliver and secure the service.

When you buy something while you have a game account, the game attaches the random account ID to the purchase (Apple's appAccountToken, Google Play's obfuscated account ID), so that the purchase is credited to the right account. We use this information only to run your account, restore your progress and coins, prevent fraud and keep online play safe. We do not sell it and do not use it for advertising.

3. Online play and voice chat

Online play uses Photon Fusion and Photon Voice, provided by Exit Games. Before Photon lets a player in, our servers check the player's game account (Photon custom authentication): Photon then receives your account ID and the display name we accepted as your player identifier, together with room information and shared gameplay state, to connect players and run sessions. A display name that breaks the community guidelines is replaced, and a banned account cannot join. Photon processes your IP address and player identifier to provide networking. Your display name, your short player ID and relevant gameplay state are visible to the other players in your room. Avoid using sensitive information in your name. Connections to our servers use HTTPS (TLS). Photon sign-in uses an encrypted connection and voice chat is encrypted in transit; the gameplay messages exchanged in a session (such as positions, actions and display names) are not encrypted.

When you switch the microphone on and allow microphone access, your voice is transmitted live through Photon to the players in your room. Neither the game nor our servers record or store voice, and reports never contain audio. You can switch the microphone off at any time or revoke microphone access in your device settings. This policy cannot guarantee that other players do not record what they hear.

4. Community guidelines, reports and moderation

Online play starts with our community guidelines, which you accept once. You can mute any player (on your device only) and block players: you no longer hear them, their rooms are hidden from your list and a room you host does not admit them. Your block list stays on your device and, with a linked account, in your cloud save. The host of a room can mute a player for the room, remove a player from it and lock the room; these decisions apply only to that room and are not stored by us.

When you report a player, we receive your account ID, the reported player's account ID and display name, the room code, the reason you chose, your optional description, your platform, the app version and the time. The developer reviews reports. Possible actions are a warning, a temporary or permanent ban from online play, or deleting the account. We keep a record of each moderation decision (action, reason, time, the report it answers). The reported player is not told who reported them.

5. Advertising and privacy choices

The game includes optional rewarded ads and automatic interstitial ads. An active ad-free subscription removes automatic interstitial ads; rewarded ads remain optional. On Android (from version 0.3.1), automatic interstitial ads appear after every 4 minutes of active single-player play and never during an online game; a short notice comes first and the game is paused while the ad is shown. On iPhone and iPad (version 0.3.0) they appear only at natural breaks, at least 5 minutes of active play apart.

The advertising service on both Android and iOS is Google AdMob, with Google User Messaging Platform (UMP) for consent and privacy choices. Where ads are served, Google’s SDK may process IP addresses, device identifiers, advertising interactions, usage and diagnostic information to deliver and measure ads. An IP address may be used to estimate general location. Processing depends on the app version, ad configuration and your privacy choices. The game checks consent information before requesting ads and offers the available privacy controls through Settings / About where supported.

On iOS, after the consent step the game asks once for Apple's App Tracking Transparency permission. Only if you allow tracking can Google use your device's advertising identifier (IDFA) for personalised ads and ad measurement; if you do not, ads are still shown without the IDFA. You can change this at any time in iOS Settings › Privacy & Security › Tracking. On Android, Google may use the Android advertising ID according to your consent choices and your device's ads settings, where you can reset or delete it. See the provider information below for further details.

Advertising diagnostics can include app launch timing, hangs, energy usage and other performance information. Google may associate performance, advertising and interaction data with your device for advertising and analytics, even when you have not registered an account. UMP also processes approximate location, interaction and performance information to provide consent functionality.

6. Game analytics (Android)

On Android (from version 0.3.1) the game uses Google Analytics for Firebase to learn how it is played, to improve it and to measure our advertising. It records events such as starting or continuing a game, chapters started and completed, nights survived, deaths and their cause, the menus, shops and offers opened, purchases (product, the store's price and currency, the store order number) and ads watched. With them go a random app-instance ID created by Firebase, the device model and Android version, the app version, and the approximate country or region derived from your IP address.

Where the law requires consent (the EEA, the UK and Switzerland), nothing is collected unless you allow it in Google's consent form; you can change your choice in Settings › About. If you allow personalised advertising, Google may also use the Android advertising ID to measure our ad campaigns. We never send your name, e-mail address, account ID or Player ID to Google Analytics. Google keeps this event and user data for at most 14 months; aggregated reports without personal data may be kept longer. The iPhone and iPad version does not use Firebase.

7. Purchases

Purchases are processed through Unity In-App Purchasing and your platform store, including Apple StoreKit on iOS. The game uses purchase and entitlement information, product details and transaction identifiers to deliver purchases and prevent duplicate grants. It stores relevant purchase records locally and, with a game account, in the coin ledger (section 2), so that purchased coins can be restored and refunded purchases removed. Your platform store handles your payment-card details. You can manage subscriptions through the store where you purchased them; deleting the game does not cancel a subscription.

Local purchase records are not the only purchase-related data processing. Unity IAP 5.4.3 can transmit purchase-flow events, product and transaction identifiers, vendor or installation identifiers, and device and operating-system information to Unity for the purchasing service, transaction reporting, reliability and analytics. On iOS, a vendor identifier (IDFV) is different from the advertising identifier (IDFA). These records can be associated with your device. Your payment-card details are handled by the platform store rather than collected by the game.

8. Support and this website

When you contact redemgames0@gmail.com, Redem Games receives your email address, message and any attachments you choose to send. These are used to answer your request and investigate the issue. Support email is hosted by Gmail. Do not send passwords, full payment-card details or unrelated personal information.

This website is available at redemgames.netlify.app and is hosted by Netlify. Technical connection information is processed to deliver website content and help operate and secure the hosting service. Netlify’s own services may process device and usage information as described in its Privacy Statement. We do not add advertising or analytics tools to the site’s source. Hosting-platform features and external links may involve additional processing; we do not claim that visiting the site results in no data collection or cookies.

9. Retention, service providers and transfers

We use game and connection information to operate gameplay and online services, purchase information to deliver entitlements and prevent duplicate grants, and support correspondence to answer requests and investigate issues. Where consent is required for optional advertising processing, your choices are handled through the available privacy controls.

Local game data remains on your device and in backups you control until it is removed or overwritten. Support correspondence is kept for as long as needed to resolve the request and related follow-up, and for any longer period needed to meet legal obligations, resolve a dispute or protect against fraud. These purposes, the status of the request and applicable obligations determine the retention period; there is no single retention period for every record.

Photon, Google, Unity, Netlify and platform stores have their own operational and legal retention requirements. Google Analytics for Firebase (Android) keeps event and user data for at most 14 months (section 6). Their records are not necessarily removed when you delete the game or close a support request. They may process information outside your country. Their applicable policies and agreements describe their processing locations, retention practices and transfer safeguards. Contact us if you need assistance with a request concerning data used for this game; we do not promise immediate deletion of independently held provider records.

Retention on our servers

• Game account, cloud save and coin ledger: until you delete the account; an account not used for 2 years is deleted with its data.
• Reports: 6 months after they were reviewed; a report that was never reviewed, 12 months.
• Moderation decisions: 12 months, and longer only while a ban they made is still running. A running ban stays on the keyed hash of the linked Game Center or Play Games identity after the account is deleted, until the ban ends.
• Warnings shown to a player: 90 days after they were shown.
• Deletion requests sent through the web form: the contact e-mail address and message 30 days after the request was handled.
• Keyed hashes of IP addresses (request limits): up to 2 days. Log of moderator actions: 2 years.
• Keyed hashes of store transactions already credited: kept without any account, so one purchase can never be credited twice.

10. Your choices and requests

You can leave online sessions, turn off voice chat, manage microphone permission in device settings, use available advertising privacy controls and manage subscriptions through your platform store. For privacy questions or requests to access, correct or delete data, email redemgames0@gmail.com and describe your request. We may need information to locate the relevant records and verify the request; do not send passwords or full payment-card details. Depending on your location and applicable law, additional rights may include objection, restriction, portability, withdrawal of consent and a complaint to a supervisory authority. We cannot delete records held independently by a platform store or service provider on your behalf in every circumstance.

Delete your account

You can delete your game account and its data at any time:

• in the game: Settings › Account › Delete account (the deletion happens at once);
• on the web, without the game: https://duskfall-api.duskfall-api.workers.dev/account/delete - with your Player ID and deletion code (both shown in Settings › Account) the account is deleted at once; without them, send a request with an e-mail address and we handle it within 30 days.

Deleted: the account, its Player ID and devices, the Game Center / Google Play Games link, the cloud save and the coin ledger. Kept for the periods above: reports and moderation decisions (your name is removed from them), a running ban on the linked identity, and keyed hashes of credited transactions. Your progress on your device stays until you remove the game. Deleting the account does not cancel the weekly ad-free subscription: Apple or Google keep charging until you cancel it in your App Store or Google Play account.

11. Audience and updates

Duskfall: Last Homestead is intended for players aged 13 and older, including teenagers. It is not intended for children under 13. This intended audience does not replace the age rating assigned by a platform store or local requirements, which may be stricter.

The game includes zombie combat, online sessions, optional voice chat, advertising and in-app purchases. Players under the age of majority should involve a parent or guardian when deciding whether to use online communication or make purchases. The intended minimum age is not a claim that the game verifies every player’s age or has a parental-consent system. Privacy and consent requirements for teenagers can vary by country.

If you are a parent or guardian and believe a child under 13 has provided personal information through the game or support, contact redemgames0@gmail.com. We will review the request, determine what records we control and take appropriate steps, including deletion where applicable. Do not include unnecessary information about the child.

We may update this policy when the game, website or data processing changes. The effective date above will be updated when a revised policy takes effect.

Provider information

Netlify Privacy Statement · Google Privacy Policy · Google partner data use · Firebase privacy information · Photon privacy information · Unity player privacy · Apple Privacy Policy · Cloudflare Privacy Policy