Boardlore — Privacy Policy

Boardlore is a multi-tradition board-game app developed by WizusLabs — Western chess, Shogi, Xiangqi, Go, and more, under one elegant interface with an offline AI opponent. This Privacy Policy describes how the Boardlore application (“the App”) handles your information. We are committed to transparency about what data exists on your device, what third-party services may collect, and what choices you have.

1. Data We Collect

1a. Data Stored Locally on Your Device (Never Transmitted)

Boardlore is designed with an offline-first architecture. The following data is created and stored entirely on your device. It is never transmitted to our servers — we do not operate one for game data — or to any third party.

• Saved games and progress — your in-progress and completed games, autosave/resume state, puzzle progress, and practice history. Stored in a local on-device database (SQLite on iOS and Android; the browser’s local storage on the web).
• App preferences — board theme, sound and music toggles, default AI difficulty, appearance (light/dark) and other settings. Stored in on-device key-value storage.
• In-app purchase entitlement cache — a local record of which cosmetic art sets you own and whether the optional premium unlock is active, used to enable offline access to purchased content. The authoritative purchase record is maintained by Apple (App Store) or Google (Play Store), not by us.

We do not operate servers, databases, or cloud services that receive your game data. Your games, progress, and preferences exist only on your device.

1b. The AI Opponent Runs On Your Device

Boardlore’s AI opponent is an on-device engine. It plays fully offline and computes its moves locally — the App does not send your moves, positions, or game history to any WizusLabs server to obtain a move. A lost signal never ends a game.

1c. Data Collected by Third-Party SDKs

The App integrates third-party services that may collect data independently. The App itself does not collect, transmit, or process any personal data. However, the following SDKs operate within the App and are subject to their own data collection practices.

Unity LevelPlay (ironSource) advertising — rewarded ads only

• The App offers opt-in rewarded advertisements only — short videos you can choose to watch in exchange for an in-game benefit such as a hint or an undo. There are no banner ads and no forced mid-game interstitials. Ads are served via Unity LevelPlay (ironSource), an ad mediation platform operated by Unity Technologies. Google AdMob may serve impressions as one mediated demand source within LevelPlay.
• The specific demand source that serves a given rewarded impression is determined at request time by LevelPlay’s mediation logic.
• In the course of serving ads, the LevelPlay SDK and its mediated sources may collect:
  • Device identifiers (such as the Advertising ID — IDFA on iOS after ATT consent, and the Advertising ID on Android)
  • IP address
  • Device properties (device model, screen resolution, OS version, available memory)
  • Device settings (language, timezone)
  • App session information (session duration, app version, SDK version)
  • Country and timezone derived from IP address
  • Ad interaction data (impressions, clicks, video completion and reward-grant events)
  • Consent signals (such as the IAB TCF consent string collected through the in-app consent flow)
  • SKAdNetwork postbacks (iOS) for measurement and conversion attribution
• On iOS, the App declares the SKAdNetwork identifiers required by LevelPlay’s mediated sources in Info.plist so Apple-attested ad attribution can occur without cross-app tracking.
• This data collection is performed by Unity LevelPlay (ironSource) and its mediated sources for ad delivery purposes. It is not used by WizusLabs, and we do not receive personally identifiable information from these services.
• Unity (ironSource / LevelPlay) Privacy Policy: https://unity.com/legal/game-player-and-app-user-privacy-policy
• Google AdMob Privacy Policy: https://policies.google.com/privacy

Ad Consent — Google User Messaging Platform (UMP)

• Before any personalized advertising is served to users in regions that require it, the App presents a consent form through Google’s User Messaging Platform (UMP). Your choice is recorded as an IAB Transparency & Consent Framework (TCF) consent string and propagated to the mediated demand sources.
• In the European Union, European Economic Area, United Kingdom, and Switzerland (EEA/UK), the UMP consent form is shown before personalized ads are served, and ads are served according to the choices you make in that form.
• On iOS, the App Tracking Transparency (ATT) prompt asks whether you allow the App to track your activity across other companies’ apps and websites for ad personalization. If you decline ATT — or if you did not grant the relevant consent in the EEA/UK form — the IDFA is not made available to the SDK and ad personalization is restricted accordingly.
• On Android, ad personalization uses the Advertising ID, which you can reset or limit in your device settings.
• If you decline personalized advertising, the App will still be able to show non-personalized rewarded ads (not based on your interests or activity). Declining changes which ads you may see; it does not force ads on you, because rewarded ads are always opt-in.
• You can revisit your consent choice at any time through the “Manage consent” option in the App’s Settings (where a privacy-options form is available for your region), or through your device settings (iOS: Settings > Privacy & Security > Tracking; Android: Settings > Privacy > Ads).

RevenueCat (in-app purchase management)

• The App uses RevenueCat to manage in-app purchase receipt validation and entitlement delivery. RevenueCat acts as a server-side layer that communicates with Apple (App Store) and Google (Play Store) to verify purchase receipts and determine which content you own.
• RevenueCat assigns an anonymous app user ID to each installation. This ID is not tied to your personal identity and cannot be used to identify you.
• RevenueCat may collect:
  • Anonymous app user ID
  • Entitlement information (which cosmetic sets / premium unlock are active)
  • Purchase receipts (as provided by Apple or Google)
  • Device platform and OS version
  • App version
• No personal information (name, email, payment details) is collected by RevenueCat through the App. Payment processing is handled entirely by Apple or Google — RevenueCat receives only the purchase receipt for validation purposes.
• RevenueCat’s Privacy Policy: https://www.revenuecat.com/privacy

Platform In-App Purchase Processing

The App offers optional in-app purchases — cosmetic regional art sets and an optional premium unlock — processed by Apple (App Store) or Google (Play Store). The purchases are cosmetic or convenience only: there is no pay-to-win, and buying nothing never changes how a game is decided. The App never sees, stores, or transmits your payment information, credit card details, or billing address. All payment processing is handled by the respective platform. Receipt validation is handled by RevenueCat (see above).

System Share Sheet (share_plus)

• When you choose to export a game (for example, sharing a game record in PGN or SGF format), the App invokes your operating system’s native share sheet. You choose which destination application or contact receives the shared content.
• The App passes only the content you elected to share to the destination you select. The App does not transmit any data to any third party as part of the share invocation itself.
• The destination application you select operates under its own privacy policy. We are not responsible for how it handles the shared content.

External Links (url_launcher)

• The App opens external URLs in your default browser or deep-links into your platform’s subscription/purchase management screen (for example, the store settings page when you tap “Manage”).
• The App passes the destination URL to your operating system’s standard URL-handling APIs. It does not transmit any data about you to any third party as part of the URL launch.
• Once you leave the App for an external destination, that destination service operates under its own privacy policy.

App Update Check

• The App periodically checks whether a newer version is available by requesting a small static version manifest from WizusLabs’ own website (https://wizuslabs.com/version.json) over an encrypted (HTTPS) connection.
• This is a standard web request. As with any web request, your IP address is visible to the website’s hosting/content-delivery provider (Cloudflare) for the duration of the request. The App does not send any account, device identifier, game data, or personal information as part of the update check.
• The manifest response contains only version information. If an update is available, the App may offer to open the App Store or Google Play listing (via the external-links mechanism above); it never downloads or installs anything itself.

2. Data We Do NOT Collect

Boardlore does not collect, transmit, or process any of the following:

• No account creation, sign-in, email addresses, names, or personal identifiers — there is no login
• No analytics or telemetry data (no event tracking, no usage analytics, no Firebase Analytics)
• No crash-reporting SDK (no Firebase Crashlytics or equivalent)
• No location data
• No contacts, photos, camera, microphone, or other sensitive device permissions
• No data synced to any cloud service or remote server
• No browsing history, search history, or usage patterns transmitted off-device
• No health or fitness data

3. Data Sharing

We do not sell, rent, share, or transfer your personal data to any third party.

• Unity LevelPlay (ironSource) (and the ad demand sources it mediates, including Google AdMob), Google’s User Messaging Platform (consent), and RevenueCat operate under their own respective privacy policies (linked above) and may collect data as described in Section 1c. We do not receive personally identifiable information from these services.
• The System Share Sheet and external links are platform-provided; when you choose to invoke them, the destination you select operates under its own privacy policy. The App does not transmit data to those destinations on your behalf.
• Saved games, progress, and preferences are stored only on your device and are never transmitted anywhere.
• In-app purchase transactions are processed by Apple or Google. We receive only an entitlement confirmation (owned or not owned), not your payment details.

4. Data Retention

• All locally stored data (saved games, progress, preferences, purchase entitlement cache) persists on your device until you uninstall the App or manually clear the App’s data through your device settings.
• We do not maintain any server-side data stores for your game data. There is no server-side data to retain, expire, or delete.
• Third-party services (Unity LevelPlay (ironSource) and the demand sources it mediates, Google’s UMP, RevenueCat) retain data according to their own privacy policies.

5. Data Security

• All data stored by the App resides in your device’s local storage, protected by your device’s built-in security features (device encryption, lock screen, biometric authentication).
• The App does not transmit your game data or preferences over any network.
• Communications between the App and third-party services (Unity LevelPlay (ironSource) for ad delivery, Google’s UMP for consent, RevenueCat for purchase management) and the update-check request to our website use industry-standard encrypted connections (HTTPS/TLS).

6. Children’s Privacy

• Boardlore is a general-audience board-game app. It presents classic strategy games (chess, Shogi, Xiangqi, Go, and related traditions) with no violent, sexual, or otherwise mature content.
• The App is not specifically directed at children under the age of 13, and it does not knowingly collect personal information from children under 13.
• Ad personalization in the App is governed by the consent flow described in Section 1c. Users who decline personalized advertising (via the in-app consent form, ATT on iOS, or device ad settings on Android) are served non-personalized ads only.
• If you are a parent or guardian and believe your child has been affected by a third-party SDK’s data collection through the App, please contact us at the address below so we can assist.

7. Your Rights and Choices

All users:

• You can delete all App data at any time by uninstalling the App or clearing the App’s data in your device settings:
  • iOS: Settings > General > iPhone Storage > Boardlore > Delete App
  • Android: Settings > Apps > Boardlore > Storage > Clear Data
• Rewarded ads are opt-in; you never have to watch one. You can also purchase the optional premium unlock, which removes advertising from the App.
• You can manage ad-related settings through your device:
  • iOS: Settings > Privacy & Security > Tracking
  • Android: Settings > Privacy > Ads

Users in the European Union / European Economic Area / UK (GDPR):

• You have rights under the General Data Protection Regulation including the right to access, rectification, erasure, restriction of processing, data portability, and objection.
• Because Boardlore stores all user data locally on your device and we do not maintain any server-side data, these rights are exercised entirely through your device. You have full control over your data at all times.
• For ad-related data collected by Unity LevelPlay (ironSource) and the demand sources it mediates, you can exercise your rights by managing your consent through Google’s UMP form presented by the App (available via the “Manage consent” option in Settings for your region). You may withdraw or change your consent at any time.

Users in California (CCPA):

• California residents have the right to know what personal information is collected, to request deletion, and to opt out of the sale of personal information.
• We do not sell personal information that we collect directly. All locally stored data is under your direct control on your device.
• Unity LevelPlay (ironSource) and the demand sources it mediates use device identifiers and ad interaction data to serve personalized advertisements, which may constitute a “sale” or “sharing” of personal information under the CCPA’s broad definition. California residents can opt out of personalized advertising by declining the consent prompt within the App, through their device settings, by using the “Do not sell my personal information” control in the App’s Settings where available, or by purchasing the premium unlock to remove ads entirely.

8. Third-Party Links and Services

The App may contain links to third-party websites or services (such as subscription/purchase management pages or store listings). These third-party services have their own privacy policies, and we encourage you to review them. We are not responsible for the privacy practices of third-party services.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in the App, our practices, or applicable law. When we make changes:

• The updated policy will be posted at https://wizuslabs.com/boardlore/privacy-policy.
• The “Last updated” date at the top of this document will be revised to reflect the date of the most recent changes.
• For material changes, we will update the App’s store listing to note the revision.

We encourage you to review this Privacy Policy periodically.

10. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or the App’s data practices, please contact us at:

Email: [email protected]

11. App Information

• App Name: Boardlore
• Developer: WizusLabs
• Platforms: iOS, Android, and web
• Category: Games (Board / Strategy)
• Engine: Flutter
• Ad SDK: Unity LevelPlay (ironSource) mediation, rewarded ads only, with Google AdMob served as a mediated source — see §1c
• Consent: Google User Messaging Platform (UMP)
• Crash Reporting / Analytics: None
• In-App Purchases: Cosmetic regional art sets and an optional premium unlock (no pay-to-win)
• Purchase Management: RevenueCat
• AI Opponent: On-device engine (plays fully offline)
• Data Storage: Local only (on-device database + preferences). No server. No cloud sync.