Privacy Policy

Last updated: September 10, 2026 · XPTracker Inc.

XPTracker is a real-life RPG game. This policy explains what data we collect, why we collect it, who we share it with, how long we keep it, and what rights you have. We keep it plain. If something isn't clear, email us at support@xptrackerapp.com.

    The short version. We collect your email and a display name to run your account, your gameplay data to run the game, and anonymous usage and crash data to fix bugs and improve the app. We share limited install and purchase events with AppsFlyer and Meta to measure our own ads. We do not sell your data, we do not show ads inside the app, and we never see your card details. You can delete your account and its data yourself in Settings.
  

1. Who We Are

XPTracker is operated by XPTracker Inc., a corporation incorporated in Ontario, Canada. References to "we," "us," or "our" mean XPTracker Inc. We are the data controller for the personal data described here. The app is available on iOS (App Store), Android (Google Play), and web (xptrackerapp.com). By using XPTracker you agree to this policy. Privacy questions: support@xptrackerapp.com.

2. Age Requirement

XPTracker is intended for users who are 13 years of age or older. We do not knowingly collect personal data from children under 13. If you live somewhere that sets a higher age for consenting to data processing on your own (for example, 16 in some EU countries), a parent or guardian must consent for you. If you believe a child under 13 has created an account, contact us immediately at support@xptrackerapp.com and we will delete the account and all associated data.

3. Data We Collect

Account data (when you sign in):

Email address and the name your sign-in provider gives us (Google Sign-In or Apple Sign-In; with Apple you can choose to hide your real email)
Display name (chosen by you)
Date account was created
Which sign-in provider you used

Guest play (before you sign in):

A random device-generated ID, your chosen display name, class, level and XP. Guest progress can appear on leaderboards under your display name. When you sign in, the guest profile is linked to your account. You can delete a guest profile in Settings at any time.

Game data (automatically, as you play):

Character class, level, XP, day count, prestige
Quests completed (count and type)
Boss defeats, items collected, panels unlocked, pets and equipment
Guild membership and role
Timestamps of saves and logins, and a history of recent saves so we can restore lost progress
Notes and reflections you write inside the app (journal entries, quest reflections, weekly and monthly commitments, custom quest text). This content is stored privately under your account and synced to your devices. It is never shown on leaderboards, the Hall of Heroes, or to other users, and we do not read it except to investigate a support request, abuse report, or legal notice.

Public profile data (visible to other users):

Display name, character class, level, XP, prestige, leaderboard rank
Guild name and rank
Hall of Heroes entry, including the quote you submit (only if you choose to immortalize - see Section 7)

Payment data (when you start a trial or buy a plan):

Which plan you have (monthly subscription, lifetime, Guild Master lifetime, or a free grant), whether you are in a free trial, purchase and renewal dates, and the store transaction ID Apple or Google gives us so we can verify the purchase
We do NOT store credit card numbers. Payment processing is handled by Apple (App Store) and Google (Google Play) - see Section 5.

Things you send us:

Support emails and in-app support tickets, including anything you write in them
Reports you file about other players, and reports other players file about you
Survey answers, if you take part in a survey (for example the "Founding 500" survey)
Guild Master Partner applications, if you apply

Usage analytics and diagnostics (automatically, on all platforms):

Screens visited, features used, time in app, and funnel events (e.g., sign-up started, paywall viewed, trial started, purchase completed)
Error and crash reports (error messages, stack traces, app version, your account ID so we can see how many players a bug affects - never your email or name)
Install and marketing-measurement events (app installed, app opened, key milestones, purchase) - see AppsFlyer and Meta in Section 5

Device data (automatically):

Device type and model, OS version, app version, language, time zone
Device identifiers used for analytics and marketing measurement: a random ID our analytics tool generates, Apple's vendor identifier (IDFV) on iOS, and the Google Advertising ID on Android. We do not ask for App Tracking Transparency permission on iOS, so we never receive the IDFA.
IP address (used for abuse prevention and rate limiting - retained for up to 30 days, then deleted; also seen by the service providers in Section 5 as part of normal internet traffic)

What we do not collect: your location, contacts, photos, microphone, health data, or anything from other apps on your device. The app uses local notifications on your device only; we do not run a push-notification service.

4. How We Use Your Data

To run the game (save progress, sync across devices, display leaderboards and the Hall of Heroes)
To provide customer support and respond to reports and legal notices
To detect and prevent cheating, fraud, and abuse, and to protect payments, leaderboards, guilds, and admin tools
To improve the app (usage analytics, crash reports, surveys)
To measure our own advertising - whether an install or purchase came from an ad we ran (AppsFlyer and Meta, Section 5). We do not show ads inside the app and we do not use your data to target you with ads elsewhere.
To send transactional emails (account and purchase notices) and occasional product updates, feedback requests, or marketing communications; you can opt out of non-transactional emails at any time by replying to the email or contacting support@xptrackerapp.com
To fulfill purchases, verify receipts, and manage subscriptions and free grants
To operate the Guild Master Partner Program (see Section 6)
To comply with the law and enforce our Terms

We do not sell your personal data. We do not use your data to train AI models, and we do not send your data to any AI service.

AI-generated content: XPTracker contains artwork, illustrations, and some written content created with or assisted by generative AI tools, including the comic story panels, the quest and boss imagery, and certain in-app text. None of it is generated from your data.

5. Third-Party Services

We share data with the following services only as necessary to operate, improve, and market the app. Each one is bound by its own privacy policy and, where applicable, a data-processing agreement with us:

Supabase - database, authentication, file storage, and the server functions that run the game. All account and game data lives here, on servers operated by Supabase Inc. in the United States. Supabase Privacy Policy
Apple (App Store) - processes iOS in-app purchases and Apple Sign-In. Apple receives purchase receipt data. Apple Privacy Policy
Google (Google Play) - processes Android in-app purchases and Google Sign-In. Google Privacy Policy
Sentry - crash and error reporting. Receives diagnostic data (error messages, stack traces, device and app version) plus your account ID, so we can fix bugs and see how many players each bug affects. We scrub emails and access tokens before anything is sent. Operated by Functional Software, Inc. (US). Sentry Privacy Policy
PostHog - product analytics and error tracking, so we can understand how the app is used and improve it. Receives usage events tied to a random device identifier, not your name or email. PostHog can also record in-app sessions (a replay of screens, with all typed input masked); session recording is currently turned off in the iOS and Android apps and used only on the web version. Operated by PostHog Inc. (US). PostHog Privacy Policy
AppsFlyer - mobile attribution. Receives device identifiers (IDFV on iOS, Google Advertising ID on Android), IP address, device info, and app-install and milestone events (for example, install, character created, purchase) so we can tell which ad campaign led to an install. Operated by AppsFlyer Ltd. (Israel/US). AppsFlyer Privacy Policy
Meta Platforms (Facebook/Instagram) - app install, app open, and purchase events, so we can measure and run advertising campaigns on Meta's platforms. We do not request App Tracking Transparency permission on iOS, so Meta does not receive your device's advertising identifier (IDFA) - only aggregated install and event signals processed under Apple's Aggregated Event Measurement. On Android, advertising-ID collection by the Meta SDK is turned off. Operated by Meta Platforms, Inc. (US). Meta Privacy Policy

We do not share your data with advertisers, ad networks, or data brokers for their own use, and we do not share it with any third party not listed above, except when the law requires it, to protect our rights or someone's safety, or as part of a sale or merger of our business (in which case we will tell you).

Guild Master Partners see only aggregate counts (Section 6). Other players see only your public profile data (Section 3).

6. Guild Master Partner Program

Some guild leaders are approved as Guild Master Partners. If you make your first in-app purchase while actively in a guild whose leader is an approved partner, we permanently associate your account with that partner for the purpose of compensating them for bringing you to the app. This association is:

Based on guild membership at the time of your first purchase
Permanent - it does not change if you later leave the guild
Used only to calculate partner compensation - it is never shown to other users
Not a "sale" of your personal data under CCPA - no personal data is disclosed to the partner beyond aggregate counts visible in their dashboard

Partners see: a count of attributed users, whether those users have active subscriptions, and aggregate earnings - not names, emails, or any identifying information about individual users.

7. Hall of Heroes - Permanent Data

    Special notice: If you choose to "Immortalize" your character and enter the Hall of Heroes, your display name, character class and artwork, the quote you submit, level, XP, day count, prestige, and achievement data become a permanent public record. This record is retained even if you later delete your account; deletion only removes the link between the entry and your account. Before immortalizing, you will be asked to give explicit consent to this permanent retention and to our use of this data as described in our Terms of Service (including for physical merchandise). Do not immortalize if you do not consent.
  

8. Data Retention

Account and game data: Kept until you delete your account. In-app deletion removes it right away; email requests are completed within 30 days. Copies in our database backups expire within 30 days after that.
Guest profiles: Kept until you delete the guest profile in Settings. If you linked it to an account and later delete that account, the link is removed; email us if you also want the guest profile itself removed and you no longer have the device.
Notes and journal entries: Deleted with your account.
Support emails, tickets, and player reports: Deleted with your account, or up to 2 years after the matter is closed if they were never linked to an account.
Survey answers: Kept in aggregate; the link to your account is removed when you delete your account.
Usage analytics (PostHog): Up to 12 months, then automatically purged.
Crash and error logs (Sentry): Up to 90 days, then automatically purged.
Marketing-measurement events (AppsFlyer, Meta): Kept by those providers under their own retention rules; we keep only campaign-level reports.
IP addresses in security logs: Up to 30 days.
Payment and entitlement records: Retained for 7 years (tax and legal compliance), along with the minimum security, fraud-prevention, and audit records we need to defend against cheating, chargebacks, and legal claims.
Hall of Heroes entries: Permanent - see Section 7.

9. Your Rights

Depending on where you live, you may have the following rights regarding your personal data. Everyone can use them, wherever they live:

Access: Request a copy of the data we hold about you.
Correction: Request that we correct inaccurate data. You can change your display name in the app.
Deletion: Delete your account and data yourself in the app (Settings → Delete Account), follow xptrackerapp.com/delete-account, or email us. Note: Hall of Heroes entries cannot be deleted after immortalization (you consented at that moment), and we keep the records listed in Section 8 that the law requires.
Portability: Request your game data in a machine-readable format.
Restriction and objection: Ask us to limit how we use your data, or object to processing based on our legitimate interests (including analytics and marketing measurement).
Withdraw consent: Where we rely on your consent (marketing emails, Hall of Heroes), you can withdraw it at any time; withdrawing does not undo what happened before.
Opt out of analytics and marketing measurement: Email support@xptrackerapp.com and we will exclude your account and device from analytics and attribution. Opting out does not affect gameplay. On Android you can also reset or delete your Advertising ID in your device settings.
Complain: You can complain to your local data-protection authority. We would rather hear from you first.

EU/EEA and UK users (GDPR and UK GDPR): Our lawful bases are (a) performance of our contract with you for running the game, your account, and purchases; (b) our legitimate interests for analytics, crash reporting, abuse prevention, measuring our own advertising, and product emails - you can object at any time; (c) your consent for marketing emails and for the Hall of Heroes' permanent retention; and (d) legal obligation for tax and payment records. Your data is transferred to the United States (Supabase, Sentry, PostHog, Meta) and to Israel (AppsFlyer). We rely on the European Commission's Standard Contractual Clauses, the EU-US Data Privacy Framework where the provider is certified, and the EU adequacy decision for Israel. Email us for details of the safeguards used.

California users (CCPA/CPRA): In the past 12 months we have collected the categories of personal information described in Section 3 (identifiers, account and commercial information, internet activity, and the content you write), for the purposes in Section 4, and disclosed them to the service providers in Section 5. We do not sell your personal information. Sending install and purchase events to AppsFlyer and Meta to measure our own advertising may count as "sharing" under California law; you can opt out by emailing support@xptrackerapp.com with the subject "Do Not Sell or Share." We do not knowingly sell or share the personal information of anyone under 16. You have the right to know, delete, correct, and opt out, and we will not discriminate against you for using these rights. An authorized agent can make a request for you if they show us they have your permission.

Canadian users (PIPEDA): XPTracker Inc. is based in Ontario, Canada. Your personal information is governed by the Personal Information Protection and Electronic Documents Act (PIPEDA) and the federal laws of Canada. We collect only the information necessary to provide the service, with your knowledge and consent. You have the right to access the personal information we hold about you and to request corrections. To make a request, email support@xptrackerapp.com. If you have an unresolved privacy concern, you may contact the Office of the Privacy Commissioner of Canada at priv.gc.ca.

To exercise any of these rights, email support@xptrackerapp.com from the email address on your account. We will verify it is you and respond within 30 days.

10. Security and Breach Notification

All data travels over HTTPS. We use Supabase Row Level Security (RLS) to ensure that users can only access their own data. Payment processing is handled entirely by Apple and Google - we never transmit or store payment card data. Financial data (partner earnings, payout records) is accessible only via server-side Edge Functions using restricted keys - no direct client access.

No security system is perfect. If you discover a security vulnerability, please report it responsibly to support@xptrackerapp.com.

In the event of a breach of security safeguards involving your personal information that creates a real risk of significant harm, we will notify you and the Office of the Privacy Commissioner of Canada as required by PIPEDA's breach of security safeguards regulations, and any other regulator the law requires (for example, within 72 hours under the GDPR). We maintain a record of all security breaches, whether or not notification is required.

11. Changes to This Policy

We may update this policy as the app evolves. If we make material changes to how we collect, use, or share your personal information, we will notify you via in-app notice or email at least 14 days before the change takes effect, and we will seek your consent where required by applicable law. Non-material changes (such as clarifications or corrections) take effect immediately. The "Last updated" date at the top of this page always reflects the current version.

12. Contact

Questions about this privacy policy:
Email: support@xptrackerapp.com
Website: xptrackerapp.com
XPTracker Inc., Ontario, Canada