Privacy Policy

Effective 24 August 2026 · applies to Cauldron for iOS, version 1.0

The short version

Cauldron has no accounts and no servers. There is nothing to sign up for and nothing to sign in to.
The app contains no networking code at all. It cannot send anything anywhere, even if it wanted to.
Your saved runs and unlocks are two small files on your device, deleted when you delete the app.
No ads, no analytics, no crash reporting, no tracking, and no in-app purchases.

The whole data inventory

This is not a summary of a longer list. It is the complete list of everything Cauldron stores, and all of it is on your device:

What	Where it lives	Leaves your device?
Your run in progress — the trial floor you are on, your board, the recipes and cauldron mods you drafted, your score against the potion order	`run-v1.json`, in the app's own Application Support folder	No
Your unlocks — which ingredients and starting kits you have earned across runs, and your best result	`meta-v1.json`, same folder	No
One setting: whether haptics are on	A single true/false value in the app's preferences	No

That is the entire inventory. There is no name, no email address, no account, no device identifier, no advertising identifier, no location, no contacts, no photos, no health data, no purchase history, and no record of when or how long you played.

Why "nothing leaves the device" is structural here

Plenty of apps promise not to send your data anywhere. Cauldron is in a stronger position than a promise: the app has no network layer. There is no code in it that opens a connection, so there is no switch anyone could flip — not the developer, not a future update slipped past you, not a third-party library.

That is checked rather than asserted. The build is gated by an automated check that fails if any networking code appears in the source, and a wider audit found no trace of any of the usual ways an app reaches the internet or reads something personal: no HTTP client, no sockets, no embedded web view, no ad or analytics library, no purchase framework, no location, contacts, photo, camera, microphone, or health access.

There is also no share sheet and no photo-library access. That matters beyond the label: it means no path exists by which a screenshot or a summary of your run could be handed to another app, even by accident. If you want to show someone a run, you take a screenshot yourself with iOS, and where it goes is entirely between you and iOS.

Cauldron plays exactly the same with the phone in Airplane Mode, because it never needed the network in the first place.

Third-party code

There is none. Cauldron uses Apple's own frameworks and nothing else — no packages, no SDKs, no embedded services. So there is no other company receiving anything from this app, and no other company's privacy policy that also governs your use of it.

Haptics

Cauldron uses Core Haptics to give each tumbler column its own settle, so the game has a feel as well as a look. Haptics run on your device's own vibration hardware; nothing about them is recorded, measured, or transmitted. You can turn them off in the app's Settings, and the choice is remembered — that is the one preference in the table above.

The App Store privacy label

Cauldron's product page reads Data Not Collected. That is a description of how the app is built, not a promise layered on top of it: with no networking code and no third-party SDKs, there is no mechanism by which data could be collected in the first place.

The app also ships a privacy manifest declaring the one Apple-designated API it uses — reading and writing its own preferences, for the haptics setting above, and for no other purpose.

What Cauldron does not do

No accounts, logins, or profiles.
No analytics, telemetry, or crash-reporting code of any kind.
No advertising, and no ad network.
No tracking of you across other apps or websites, and no use of the advertising identifier.
No in-app purchases, no subscriptions, and no currency to buy. Cauldron is a one-time purchase and that is the end of it.
No leaderboards, no friend lists, no messaging, and no user-generated content shown to anyone else.
No server operated by the developer, so no backups, logs, or copies of your progress exist anywhere off your device.
No email from us — there is no mailing list, because there is no address to put on one.

Children

Cauldron collects no personal information from anyone, children included. It has no sign-up, no chat, no social features, no advertising, and nothing to buy inside it. It is not marketed to children and is not in the Kids Category.

Your control over your data

Abandoning a run and starting a new one discards the old run's file.
Deleting Cauldron removes everything it stored — the run, the unlocks, and the haptics setting — along with the app.
If you use iCloud or iTunes device backups, iOS may include the app's files in your own backup. That is your backup, under your Apple Account, governed by Apple's privacy policy; the developer has no access to it and no way to read it.

There is no data-access or deletion request to file, because the developer holds no copy of anything to access or delete.

Changes to this policy

If Cauldron's behaviour ever changes in a way that affects this policy, the policy is updated here with a new effective date before that change ships. In particular, if any future version were to add networking of any kind, it would be stated here explicitly and reflected in the App Store privacy label.

Contact

Questions about this policy, or about privacy in Cauldron: app.contact.support@gmail.com.