Craft Flow
Privacy Policy
Last updated: 22 August 2026
1. Data controller
Sören Hauser
Damnright Worlds
Erna-Scheffler-Straße 8
76149 Karlsruhe
Germany
sohauser.dev@gmail.com
2. Our approach
Craft Flow contains no advertising, tracking technologies, personalised advertising or third-party usage analytics. The game does not require a separate user account and can generally be played offline.
3. Local game data
Your game save, stars, coins, boosters, workshop progress, settings, purchase entitlements and a limited diagnostic log are initially stored only in the app's protected storage on your device.
Damnright Worlds does not receive this data unless you deliberately share it with support through the system share sheet. Local data remains on the device until it is deleted in the app or the app is uninstalled.
A diagnostic report that you choose to share may include game save information, app and operating system versions, screen dimensions, error messages and recent app events. The legal basis for handling a support request is Article 6(1)(b) GDPR and, where necessary for preventing errors or misuse, Article 6(1)(f) GDPR.
4. Optional iCloud syncing
iCloud syncing is off by default. If you enable it, Craft Flow stores completed orders, progress, settings, unlocked content, purchase entitlements, economy events and a random installation or device identifier in the private CloudKit database of the signed-in Apple account. The data is not public and is not shared with other players.
This Apple service is used only at your request. The legal basis is Article 6(1)(b) GDPR. You can disable syncing at any time. “Delete iCloud copy” removes Craft Flow records from CloudKit while keeping the local game save on the device.
5. StoreKit, Game Center and reminders
Optional purchases are processed by Apple through StoreKit. Damnright Worlds does not receive complete payment information. The app processes product and transaction identifiers and the associated entitlement so that purchases can be delivered correctly and non-consumable content can be restored. The legal basis is Article 6(1)(b) GDPR.
Game Center is optional. If you enable it, Apple authenticates you and Craft Flow submits earned achievements. The app itself does not store your Game Center name or Apple ID.
Local reminders are scheduled entirely by iOS on your device. Damnright Worlds does not operate a push server and does not receive a push token.
6. App updates through Expo
When launched, the app checks Expo's update service for an approved update. Expo may process the operating system version and a random update token for this purpose. This does not create advertising or usage profiles.
The legal bases are Article 6(1)(b) GDPR for providing the app and Article 6(1)(f) GDPR for secure and reliable delivery. The provider is Expo, or 650 Industries, Inc. More information is available in Expo's privacy policy.
7. Recipients and international transfers
Apple and Expo may process technically necessary data outside the European Economic Area. According to the providers, the applicable safeguards may include adequacy decisions and standard contractual clauses.
8. Retention and deletion
- Local app data: until it is deleted in the privacy view or the app is uninstalled.
- iCloud data: until you use “Delete iCloud copy” or in accordance with the rules of your Apple account.
- Purchase entitlements: for as long as they are needed to deliver and restore purchases; Apple may retain legally required purchase records independently.
- Support emails and voluntarily shared diagnostic reports: until the request is resolved, and longer only where required by law, needed to defend legal claims or necessary to prevent misuse.
9. Your rights
Subject to the legal requirements, you have the right to access, rectify, erase or restrict the processing of personal data, to data portability and to object to processing. Consent can be withdrawn at any time with effect for the future. You also have the right to lodge a complaint with a data protection authority.
Requests can be sent to sohauser.dev@gmail.com. Craft Flow does not use solely automated decision-making that has legal or similarly significant effects.
10. Children
Craft Flow does not ask for a date of birth or contact details and does not provide public communication between players. Apple's safeguards apply to Apple IDs, Family Sharing and purchases.
11. Changes to this policy
This policy will be updated if app features, recipients or legal requirements change.