StateFlo ("the app", "we") is primarily a single-player strategy game with optional online features: a public leaderboard and an in-game licence-plate exchange, where players register, buy and sell virtual plates for in-game currency. We collect the minimum data needed to run these features and to operate auto-renewable subscriptions. We do not sell your data and we do not run advertising.
Data we process
Leaderboard profile. A callsign and flag you choose yourself, your score, a few derived game statistics (rating, GDP, state power, reserves, territory, drones, days), your in-game garage (the virtual vehicles you own and the plates on them), and the medals you have earned. All of this appears on the public leaderboard and in the player card.
Anonymous player ID. A random identifier generated on your device and stored in the iOS Keychain. It is not linked to your name, email, or Apple ID.
Subscription status. Whether your "President's Club" subscription is active, used to unlock features and show a profile frame. Payment is processed by Apple; we never receive your card details.
Purchase receipt. The Apple-signed transaction receipt (JWS) is sent to our server so that limited-edition item runs are verified cryptographically rather than on the app's word. The receipt contains purchase details and no payment information.
Push notification token. If you allow notifications, the device identifier issued by Apple is stored on our server so we can notify you about the plate market. You can turn this off in your device settings.
App integrity. We use Apple App Attest to confirm that a score was submitted by a genuine, unmodified copy of the game. This protects the leaderboard from cheating.
Plate exchange. When you register, list, buy, sell or make an offer on a plate, we store the plate text, your anonymous player ID and callsign, the vehicle the plate is attached to, and pending in-game payouts. This keeps plates unique worldwide and delivers the trade to the other player. All amounts are in-game currency; no real money changes hands between players.
Where data is stored
Leaderboard and plate-exchange records are processed by our server (a Cloudflare Worker) and stored in its database (Cloudflare D1) and in Apple CloudKit. Your game progress itself stays on your device (and in your private iCloud, if enabled). We do not maintain accounts with passwords.
Subscription
"President's Club" is an auto-renewable subscription (monthly or yearly). Billing, renewals and cancellation are handled entirely by Apple through your Apple ID. Manage or cancel at any time: Settings → Apple ID → Subscriptions.
Who data is shared with
Only Apple (CloudKit, App Store) and Cloudflare (our server), strictly so the service can work. No data is sold or used for advertising.
Your rights
You can change your callsign and flag in the app at any time. You can delete your account together with all online records (leaderboard row, plates, offers, medals) from inside the app: Settings → Delete account. Removing the app stops all further data collection.
Children
The app is not directed at children under 13 and does not knowingly collect personal data from them.