Xenobiome Privacy Policy

The short version: no account, no ads, no third-party tracking, no data sold. The game collects anonymous gameplay statistics you can switch off in Options, and sends a bug report only when you write one and press Send.

Effective 4 August 2026. Applies to Xenobiome on Steam, iOS and Android.

Who is responsible

Xenobiome is made by Haroldware Solutions Kft. ("we"), the data controller for the processing described here.

Contact: support@xenobiome.net
Postal address: Hungary, 6725 Szeged, Dobó utca 38/B
Company registration: 06-09-030350

What we do not do

1. Anonymous gameplay statistics

To find out where the game confuses or frustrates people, it can send anonymous gameplay events. This is on by default and can be turned off at any time.

The install identifier

The first time you launch the game it generates a random identifier (a UUID, from a random number generator) and stores it on your device. It is not derived from anything about you or your hardware, it is not linked to any account, and it cannot identify you personally. It exists so that ten events from one installation are not counted as ten separate players. Reinstalling the game produces a new identifier and severs the link to the old one.

What each event contains

Every event carries the install identifier, a session identifier, the platform (iOS, Android or desktop), and the app version. On top of that:

EventAdditional contents
app_open, session_endSession length
app_crashThe error message text, and whether the crash was fatal
tutorial_step, tutorial_complete, tutorial_abandonWhich tutorial card you reached
run_start, run_continueMap, commander, trait, difficulty, pace
run_end, run_abandonOutcome, days survived, score, stars, map
first_win, level_reachedWhich map, how many days, maps completed
pace_mode_selectedWhich pace setting you chose
font_load_failedThe font error message

That is the complete list. Nothing else is transmitted: not your saves, not your settings, not your device name, not your IP address beyond the ordinary network connection described below.

How to turn it off

Options -> "Anonymous usage data" -> OFF. The setting persists, takes effect immediately, and discards anything not yet sent. Nothing about the game changes when it is off.

2. Bug reports

The game has a "Report a bug" screen in Options. Nothing is sent from it unless you write a report and press Send. Before sending you can expand "What gets sent" to read the exact, complete contents of your report.

A report contains:

Because the game is fully playable offline, a report you write without a connection is saved on your device and sent the next time the game is online. If it cannot be delivered within 14 days it is discarded from your device. You can also copy or share the report text yourself and send it to us by any route you prefer.

Bug reports are sent even if you have turned anonymous usage data off. Writing a report and pressing Send is a deliberate request for help, and we treat it as your consent for that one message. If you would rather not send anything at all, do not use the bug report screen.

3. Who processes this data

ProcessorPurposeWhere
PostHogReceives and stores the gameplay events and bug reports on our behalfEuropean Union (eu.i.posthog.com)
CloudflareForwards email sent to our support addressGlobal network

Both act under contract on our instructions and may not use the data for their own purposes. Data is stored in the EU. As with any internet connection, the receiving server necessarily sees the IP address your device connects from; it is used for delivery and coarse country-level statistics and is not used to identify you.

The stores you buy the game from - Valve (Steam), Apple (App Store) and Google (Google Play) - collect their own data under their own privacy policies, which we do not control. Purchases, refunds and payment details are handled entirely by them; we never see your payment information.

4. Legal basis and retention

Where the GDPR applies, our legal basis is your consent (Article 6(1)(a)) for anonymous usage data, which you may withdraw at any time in Options, and for bug reports, which you send by an explicit act. Event data is retained for up to 24 months and then deleted. Bug reports are kept until the issue is resolved and for up to 24 months thereafter.

5. Children

Xenobiome is not directed at children under 13, and we do not knowingly collect data from them. The game asks for no personal information at all, so no such data is gathered in the ordinary course of play. If you believe a child has sent us personal information through a bug report, write to us and we will delete it.

6. Your rights

If you are in the EU, EEA or UK you have the right to access, correct, delete, restrict and port your data, to object to processing, to withdraw consent, and to lodge a complaint with your national supervisory authority. Elsewhere, comparable rights may apply under local law; we honour these requests regardless of where you live.

To exercise them, write to support@xenobiome.net and quote your install identifier. The game shows it in Options, under "Install ID"; tap it to copy. Everything we hold is keyed to that identifier and nothing else, so quoting it is what lets us find your records - and, since it is a secret held only on your device, what lets us confirm they are yours. Deleting the game, or turning off usage data, ends collection immediately in any case.

7. Changes

If this policy changes materially we will update the date at the top and note the change here. The version in effect when you play is the one that applies.