Privacy Policy

Introduction

Ondřej, the solo developer behind Aethos, created this app to track matches with transparency. The core principle is simple: "Aethos works fully offline with no account. Your match data lives on your device. If you choose to create an account, you unlock optional cloud backup and social features, and this policy explains exactly what that involves."

The short version

• No account needed. The app is fully usable with no sign-in. In that mode nothing you record leaves your device except anonymous analytics.
• Accounts are optional and opt-in. Signing in with Apple or Google enables cloud backup, multi-device sync, and "The Table" social features.
• Social sharing is off by default. Even with an account, nothing is shared with friends until you turn a specific sharing toggle on.
• You can delete everything. Deleting your account in-app permanently removes your cloud data. Your local match history stays on your device.
• No ads, no tracking, no selling data. Ever.

Local data storage (default, no account)

Whether or not you sign in, Aethos stores the following locally on your device:

• Match history and game scores
• Legend and deck preferences
• App settings
• Achievement and progression data

Data resides on your phone or tablet using the platform's standard storage. Without an account, the developer cannot access this information.

Optional account (Sign in with Apple or Google)

Creating an account is entirely optional. If you choose to sign in, Aethos uses Supabase (a hosted database and authentication service, EU region) to manage your account. What is collected at sign-in:

• An account identifier and the sign-in method you used (Apple or Google).
• Your email address, as provided by Apple or Google. With Sign in with Apple you may choose Apple's private relay so the app never sees your real address.
• A username you choose (3 to 20 characters). This is public to other users so friends can find and add you. Do not use your real name if you would rather stay anonymous.

Your email is used only to identify your account and for essential account communication. It is never sold, never shared with advertisers, and is not used for marketing.

Cloud backup & sync (opt-in)

If you enable cloud backup, a copy of your match history and preferences is stored in your private Supabase vault so you can restore it or sync across your own devices:

• Synced content includes your match/game records and related preferences (for example favorite legends, rivals, and unlock progress).
• This data is tied to your account and readable only by you. Row-level security prevents any other user from accessing it.
• Data is encrypted in transit (HTTPS) and encrypted at rest on Supabase's servers.
• Cloud backup is off until you turn it on. If you never sign in, none of your match data is uploaded.

"The Table": social features (opt-in, off by default)

The Table lets you connect with friends and share your game nights. Every sharing control defaults to off; nothing below is published until you explicitly enable it.

• Friends: you can send, accept, and block friend requests. Your friend connections are stored on your account.
• Shared game-night activity: when you turn sharing on, a summary of a play session can be visible to your accepted friends. This can include the legends played, opponents, win/loss/draw results, match format, and a small display "mark" (initials, glyph, color) you set. It deliberately excludes your private notes and reflections.
• Weekly streak: optionally, a friend can see whether you played this week and your streak count.
• Photos: if you attach a photo to a game night, it is stored in a private storage bucket and is visible only to accepted friends while you are sharing activity. Photos are never public.
• GG reactions: friends can send a one-tap "GG" salute on a shared night. There are no public comments anywhere by design.
• Friend suggestions: to suggest people you may know, the app stores an approximate country and a discoverable flag. Suggestions are limited to friends-of-friends in the same country. You can turn discovery off.

Only accepted friends can see what you share, and only for the toggles you have enabled. Turning a toggle off stops future sharing; deleting the underlying data removes it.

Peer-to-peer match sharing (RiftLink)

Separately from accounts, you can share a match directly with a nearby opponent:

• Data transfers directly device-to-device.
• Nothing routes through Aethos or Supabase servers.
• Manual initiation only, and only match info (scores, legends, results) is shared.

Analytics & app improvement

PostHog, a privacy-focused analytics service, helps improve the app. Here's what's collected:

Specific data points

• Match events (start, save, manual log including Legend, tournament type, target score, win/loss)
• Story chapter unlocks and opens
• Subscription interactions (paywall views, plan taps, purchases with SKU and price — never card details)
• Onboarding steps and first saved match timing
• Session duration, app version, OS version, language, device model, crashes

A randomly generated UUID (created on first launch, stored locally) allows tracking like "this user played 12 matches" without identifying the person. This ID never connects to names, emails, Apple IDs, Google accounts, or external systems.

Data location & retention

• Analytics events transmit to PostHog's EU servers (Frankfurt, Germany)
• Raw event data deletes after 12 months
• Analytics is not shared with anyone except PostHog acting as the data processor

Privacy protections

• Analytics uses a random ID, not personal identifiers
• Analytics is never linked to your account, email, or username
• No data sharing with advertisers
• No cross-app or cross-website tracking
• No advertising identifier use (IDFA/AAID)
• App Tracking Transparency prompt not used (the app does no tracking)

Who processes your data

Aethos relies on a small number of trusted providers, each acting only as a data processor:

• Supabase (EU region) — account authentication, cloud backup/sync, and social data, only if you create an account.
• Apple & Google — sign-in providers. When you sign in, they authenticate you and pass a token and your email (or Apple's private relay address) to the app.
• PostHog (EU region) — anonymous product and website analytics.
• Apple App Store / Google Play — subscription billing. The developer never sees your payment details.

Data is never sold, and is never shared with advertisers or for cross-app tracking.

What the app never does

• Track your location precisely (only an approximate country, and only if you opt into friend discovery)
• Access your photos, contacts, or files (a photo is uploaded only when you deliberately attach one to a game night)
• Track you across other apps or websites
• Read advertising identifiers
• Sell or share your data with advertisers
• Make anything you share public beyond your accepted friends

Subscriptions

Aethos Prime payments process through the Apple App Store or Google Play. The developer never sees payment details. Support is available through official channels.

Children & privacy

Aethos is not directed at children. The app is fully usable offline with no account and no personal information. Account creation and social features require sign-in via Apple or Google and are intended for users old enough to hold such an account and to meet the minimum age in your region (at least 13, or older where local law requires). Do not create an account or share content if you are under that age.

Website analytics (aethoscounter.com)

The marketing website uses PostHog separately from the app, with stricter settings to keep things simple under EU/UK ePrivacy rules:

• No cookies and no browser storage are written for analytics. Each page load is independent and anonymous; no persistent identifier is ever created in your browser.
• Collected per page view: visited URL, referring URL, browser, OS, approximate country (derived from IP, then the raw IP is discarded), screen size, and basic performance timings (Core Web Vitals).
• Requests are routed through aethoscounter.com itself (first-party) before reaching PostHog's EU servers (Frankfurt, Germany). Same 12-month retention as the app.
• If your browser sends "Do Not Track" or "Global Privacy Control," the site skips analytics entirely.
• No advertising, no third-party sharing, no cross-site tracking.

Account & data deletion

You are always in control of your account and cloud data. Full step-by-step instructions live on the Delete your account page.

• Delete your account in the app: open the account screen and tap Delete Account. This permanently removes your profile, cloud backup, shared activity, photos, friend connections, and social data from Supabase. It cannot be undone.
• Your local match history stays on your device after account deletion; remove it by deleting the app.
• No app handy? Email ondrejvodak@gmail.com from the address linked to your account (or with your username) and the developer will delete your account and cloud data within 30 days.
• Analytics deletion: to remove anonymous analytics, email your app's random ID and it will be deleted within 30 days.

Your rights & controls

You can:

• Use the app with no account, keeping all match data on-device
• Turn cloud backup and each social sharing toggle on or off at any time in the app
• Opt out of analytics via Settings → Privacy → Analytics
• Delete your account and cloud data as described above
• Delete local data by uninstalling the app
• Use peer-to-peer sharing without any server involvement
• Disable website analytics by enabling "Do Not Track" or "Global Privacy Control" in your browser before visiting aethoscounter.com

EU/UK users have GDPR rights regarding data access, correction, portability, and objection to processing. To exercise any of these, contact the developer below.

Changes to this policy

This policy may be updated as features change. Material changes will be reflected here with a new "Last updated" date.

Contact

Questions: ondrejvodak@gmail.com

This policy is intended to meet Apple App Store, Google Play, and EU GDPR requirements.