Privacy Policy
No Going Back collects no information that identifies you. There are no accounts, no advertising, and no third-party tracking. What the game does collect is an anonymous report of how a run went, sent when it ends, so the developer can see whether the game is fair to play. What stays on your own device, and what a run report contains, are both described below.
Who is responsible
The controller for the purposes of the GDPR is Maciej Sady, an individual developer, reachable at maciejsadyapps@gmail.com. This is a personal project and is not operated by or on behalf of any company.
What stays on your device
The game saves a small amount of information on your own device so it can remember things between sessions — your best result and your settings. That information stays on the device. It is never transmitted, never uploaded to a server, and cannot be read by the developer or by anyone else.
Uninstalling the app deletes it permanently, as does clearing your browser's site data if you are playing in a browser. No identifier — advertising ID, device ID, or otherwise — is read or generated, and nothing else about your device is kept.
What a finished run reports
When a run ends — cleared, died, or given up partway — the game sends one report about that run to the developer. It says how far the run got, how many of the six gates it broke, how many fights it fought, how much gold it earned, what weapon and armor it was carrying, which biome it ended in, what killed it if anything did, which version of the game was running, whether that was the browser or the installed app, and the time your device recorded when the report was sent.
The report carries no account, no device identifier, no advertising identifier, and no name. Nothing in it identifies you or the device you played on, and reports are not linked to one another.
This is sent automatically every time a run ends. There is no setting to turn it off, and it is not required for the game to work — it exists so the developer can see whether the game's difficulty holds up under real play, which is the honest reason and the only one. The legal basis for this processing is legitimate interests under Art. 6(1)(f) GDPR: what is sent is limited to what the game itself produced, carries nothing that identifies anyone, and is used only to look at how the game plays. The reports are received and stored on the developer's own systems, with Cloudflare acting as a processor in the same way it does for hosting the game. Because a report cannot be tied to a person, it is kept indefinitely rather than deleted after a fixed period.
These reports are not published anywhere, and they are not shared with anyone.
Sharing a run
When a run ends you can choose to share it. Doing so builds an image and a short message on your own device and hands them to your operating system's share sheet, which passes them to whichever app you pick. Nothing is uploaded by the game, and the developer receives no copy and no record of the share. Whatever you send is then subject to the privacy policy of the app you sent it through.
Advertising
The game shows no advertising and contains no advertising software. Nothing about you is used to select or measure ads, because there are none.
If that ever changes, this policy will be updated to name the advertising provider and to state exactly what it collects — and the update will be published before the version showing ads is released, not after. Where the law requires your consent for personalised advertising, you will be asked for it in the game and will be able to decline or withdraw it.
Playing in a browser
The game can also be played in a browser, where it is hosted on Cloudflare Pages. Like any web host, Cloudflare's servers automatically log technical information about each request — your IP address, the time, and your browser's user agent — in order to deliver the page and to defend it against attacks. The server that receives run reports, described above, is also Cloudflare's infrastructure, so the same technical logging happens on that request too — from a browser and from the installed app alike. That processing rests on legitimate interests under Art. 6(1)(f) GDPR, and Cloudflare acts as a processor. Those logs are not read, exported, or combined with anything by the developer. See Cloudflare's privacy policy.
This page is hosted the same way, and the same applies to reading it. No cookies are set on any of it.
Google Play
If you installed the game from Google Play, Google collects data about the installation itself — such as install and uninstall counts, device model, and crash reports where you have allowed your device to send them. That collection is Google's, not the game's, and is governed by the Google Privacy Policy. The developer sees only anonymous, aggregated statistics in the Play Console and cannot identify any individual player from them.
Children
The game is suitable for all ages, and nothing about it treats a child differently from an adult. There is no account, and nothing the game collects — the two settings kept on your device, the anonymous run report described above, or the ordinary host logging every visit generates — identifies who is playing. It shows no advertising and offers no purchases.
Your rights
Under the GDPR you have the right to access, rectification, erasure, restriction of processing, data portability, and objection, as well as the right to lodge a complaint with a supervisory authority. In practice there is no personal data held about you to exercise those rights over — but if you believe otherwise, or have any question about this policy, write to maciejsadyapps@gmail.com and you will get an answer.
Changes
If what the game collects ever changes further, this page will be updated before that version ships, and the date at the top will change. There is no mailing list to notify, because there are no addresses on file.