Privacy
Policy

1. Controller

Managing Director: Mithat Arda
Email: info@playfalcon.app

2. The short version

• No Falcon account, name, email address, login, or social profile is required to play.
• Campaign progress, settings, weapons, currency, and prepared mission files remain on your device.
• The current public release profile contains no advertising SDK, in-app purchase service, first-party gameplay analytics, or cross-app tracking.
• Optimized releases contact Cloudflare to securely deliver mission files. This necessarily processes network data such as an IP address and request metadata.
• The website uses no cookies, advertising pixels, third-party fonts, or client-side analytics.
• If you email support, we use the message and contact details only to answer, secure the service, and meet legal obligations.
• We do not sell personal information or share it for cross-context behavioural advertising.

3. Data we handle

3.1 Local game data

Falcon stores campaign progress, stars, earned currency, weapon unlocks and upgrades, accessibility choices, audio and haptic settings, privacy settings, mission readiness, and other game preferences in the app sandbox on your device. Prepared mission bundles are stored in a bounded least-recently-used cache so they can be replayed without downloading them each time.

Drylabs does not receive this local save. Deleting Falcon normally deletes the save, settings, and downloaded mission cache. The current release has no account-based cloud save, so Drylabs cannot restore deleted local progress.

3.2 Mission and update delivery

Optimized releases download authenticated game content from content.playfalcon.app, hosted with Cloudflare Workers and Cloudflare R2. Cloudflare and our delivery service process information needed to route, secure, cache, and complete each request. Depending on the network and platform, this can include:

• IP address, request time, requested content path, request method, response status, byte range, and transfer volume;
• transport and protocol details, limited device or app network headers, and approximate region inferred for routing;
• security, abuse-prevention, cache, reliability, and error information.

The content request does not include your name, email address, campaign save, advertising ID, contact list, precise GPS location, or a Falcon account identifier. Content URLs are release-scoped and mission files are verified before use.

3.3 Website

This website is delivered through Cloudflare. When you request a page, Cloudflare necessarily processes an IP address, requested URL, timestamp, protocol and routing information, response status, and security signals. Drylabs does not place cookies, use browser local storage, run client-side analytics, load third-party fonts, or embed advertising trackers on this site.

3.4 Player support and privacy requests

If you contact info@playfalcon.app, we process your email address, message, attachments, technical details you provide, our replies, and the request history. Cloudflare Email Routing forwards the message to a Gmail inbox operated by Google. Please do not send passwords, access tokens, advertising identifiers, payment credentials, or full purchase receipts.

3.5 Apple and Google stores

Apple or Google independently processes information when you browse, download, install, update, review, or obtain store support for Falcon. Drylabs receives only the store information made available to developers, such as aggregate distribution data and review communications. The current release does not use an in-app purchase service. The stores' own privacy notices govern their independent processing.

3.6 Permissions and sensors

The current release does not request access to contacts, photos, microphone, camera, health data, or precise GPS location. It does not request App Tracking Transparency permission because it does not track users across companies' apps or websites.

4. Purposes and legal bases

Providing network data is technically necessary to retrieve online content. Providing support information is voluntary, but we may be unable to investigate without enough non-secret detail to identify the issue. We do not use consent as a legal basis for advertising or tracking in the current release because those activities are not enabled.

5. Recipients and processors

Personal data is available only where necessary to Drylabs personnel and service providers supporting the relevant purpose. Current provider categories include:

• Cloudflare, Inc. for domain services, DNS, security, website delivery, Workers, R2 mission storage and delivery, and email routing;
• Google LLC for Gmail delivery of support email and, independently, Google Play distribution;
• Apple Inc. independently for App Store and TestFlight distribution;
• professional advisers, courts, regulators, or authorities where required by law or necessary to establish, exercise, or defend legal claims.

We require processors to handle personal data under contractual confidentiality, security, and data-protection obligations. Provider privacy notices: Cloudflare, Google, and Apple.

6. International transfers

Cloudflare, Google, and Apple operate internationally. Information can be processed in the European Economic Area, the United States, and other countries where those providers operate. Where Chapter V GDPR or equivalent UK rules apply, transfers are based on an applicable adequacy decision, approved standard contractual clauses, or another lawful safeguard. You may contact us for information about the safeguard relevant to your request.

7. Retention

• Local game data and mission cache: until you delete it, the app evicts cached content, or you uninstall Falcon.
• Worker invocation and operational logs accessible to Drylabs: no longer than Cloudflare's configured service maximum, currently up to 7 days; security records needed for an active incident can be retained separately for the duration of the investigation and resulting legal limitation period.
• Routine support correspondence: generally deleted or anonymised within 3 years after the end of the calendar year in which the matter closes, unless a shorter period is appropriate or law requires longer retention.
• Privacy-request records: generally retained for 3 years after completion to document compliance.
• Legally required business records: retained for the statutory period that applies to the record.

Cloudflare, Apple, and Google may retain information they control under their own policies. We periodically review retained data and delete or anonymise it when the purpose and applicable obligations expire.

8. Your privacy rights

Depending on where you live and subject to legal conditions and exceptions, you may have rights to access, correct, delete, restrict, or receive a portable copy of personal data; object to processing based on legitimate interests; and complain to a supervisory authority. Where processing is based on consent, you may withdraw it for the future. The current release does not rely on consent for advertising or tracking.

Send requests to info@playfalcon.app. Because Falcon has no account and intentionally receives little identifying data, we may need information sufficient to locate a support conversation or request record. We will not ask for a game password because no Falcon password exists.

You may complain to the data-protection authority where you live, work, or believe an infringement occurred. Drylabs' lead local authority is:

9. Automated decisions

Drylabs does not use the personal data described here for decisions based solely on automated processing that produce legal or similarly significant effects. Falcon does not create a first-party advertising or behavioural profile in the current release.

10. Children

Falcon depicts fictional violence and is not directed at children. It is not enrolled in Google Play Families or Apple's Kids Category. We do not knowingly request personal data from children through a Falcon account because no account exists. A parent or guardian who believes a child sent personal data to support can contact us for review and deletion.

11. Additional regional notices

United States

During the preceding 12 months, the categories potentially collected were identifiers and internet or electronic-network activity (principally an IP address and content or website request metadata), and correspondence you chose to send. These categories were used and disclosed to service providers for delivery, security, diagnostics, and support as described above. Drylabs does not sell personal information, share it for cross-context behavioural advertising, use it for targeted advertising, or knowingly collect sensitive personal information through the current release. Residents of states that grant access, correction, deletion, portability, or appeal rights may contact us. We will not discriminate for exercising an applicable privacy right.

Other countries

You may have additional rights under local law. We honour those rights where applicable. Mandatory local protections are not limited by this policy.

12. Security

Falcon uses HTTPS, private content storage, release-scoped immutable manifests, cryptographic content verification, least-privilege deployment credentials, and bounded operational logging. No method of transmission or storage can be guaranteed completely secure. If you believe you found a security issue, contact info@playfalcon.app and avoid including exploit secrets in the first message.

13. Changes and contact

We will update this policy when Falcon's processing materially changes and will revise the effective date. Where required, we will provide additional notice before new processing begins and update Apple App Privacy and Google Play Data safety disclosures.

Privacy questions and requests: info@playfalcon.app.

This policy is designed as a transparent operational disclosure, not as a waiver of rights that cannot lawfully be waived.