UNWAN Privacy Policy

Who this policy covers

Busted Minds operates UNWAN, including the Android app org.bustedminds.unwan and unwan.bustedminds.org. Contact support@bustedminds.org about privacy, access, correction, or deletion. This policy covers UNWAN. Busted Minds Accounts also provides the sign-in service used by other Busted Minds products.

Information used by the game

• Local play: progress, story choices, preferences, resume position, and shared-route keepsakes are stored in your browser or app browser storage. Single-player play does not require an account. Local saves stay on that device unless you sign in and use cloud saves.
• Accounts: sign-in uses Busted Minds Accounts and its authentication provider, Supabase. The sign-in flow uses an email address and account credentials. UNWAN receives an account ID, handle, display name, and an optional avatar URL. UNWAN does not receive your account password. Session cookies and encrypted authentication tokens keep you signed in.
• Cloud saves: when signed in, UNWAN stores gameplay progress, story choices, preferences, achievements, route results, and update times against your account.
• Social play: friend requests, friendships, room invitations, blocked accounts, and multiplayer actions support playing together. Room participants receive your display name, handle, avatar, game position, and shared activity state. Game coordinates describe the fictional world, not your physical location.
• Messages and reports: room chat is sent to room participants and held in room memory for a limited message history. Reporting a message stores its text, sender identity, room, time, and the report for moderation. Reports may also include the reason or note you submit.
• Connection and support information: hosting and authentication services process network information, including IP addresses and request information, to deliver and protect the service. If you email support, we receive your email address and the information you choose to send.

Why we use this information

We use information to run the game, authenticate accounts, restore progress, provide social and multiplayer features, show shared route results, respond to support requests, and investigate abuse. UNWAN has no advertising SDK, advertising ID collection, targeted advertising, or sale of personal information. It does not request your physical location, phone contacts, camera, microphone, or payment information. In-game friends are separate from your device address book.

Who receives it

Cloudflare hosts the website, game server, and UNWAN database. Supabase supports Busted Minds Accounts authentication. These providers process information needed to operate and protect the service. Online participants see the identity and activity you share through multiplayer; route boards display account identity and results. We may disclose information when required by law or necessary to respond to abuse or protect people and the service. Links to sources, account services, and other websites are subject to those services' own privacy practices.

Storage, security, and retention

Production connections use HTTPS and secure WebSockets. UNWAN stores server-side authentication tokens encrypted and uses secure, HTTP-only session cookies. No service can guarantee absolute security.

Local data remains until you clear it. UNWAN profile, progress, social, result, and moderation records have no automatic age-based deletion schedule; they remain until a verified deletion request is processed or they are no longer needed for the service. Ordinary chat history is held in room memory, while reported message snapshots persist with moderation reports. Sign-in sessions expire after 30 days; expiry does not itself delete your account or progress.

A verified UNWAN account-deletion request removes your UNWAN profile, sessions, cloud progress, achievements, social links, invitations, route results, and associated moderation reports from the active UNWAN database. UNWAN does not routinely retain these product records after deletion. Hosting backups, infrastructure records, authentication records, and support correspondence are separate from the active game database. If any information must be retained for security, an unresolved request, or a legal obligation, support will identify the information, reason, and applicable retention period when responding. We do not promise a fixed deletion period for provider-controlled backups or logs.

Your choices and deletion

You can play locally without an account, sign out, block other players, report messages, and clear this site's browser or app browser data to remove local saves and cached assets. Uninstalling the Android wrapper may not clear data held by the browser used to run it.

Visit Delete UNWAN account and data to request UNWAN account deletion, deletion of selected game data while keeping your account, or coordinated deletion of your Busted Minds Account. Requests go to support@bustedminds.org. We verify account ownership before changing data and explain the scope and expected completion time. A UNWAN-only request does not automatically remove your account or records in other Busted Minds products.

Audience and updates

UNWAN is intended for adults aged 18 and over. It addresses war, displacement, injuries, torture, and non-graphic references to sexual violence. It is not directed to children. Contact us if you believe a child has provided account information. We may update this policy as the game or its data practices change; the effective date above identifies the current version.