CURFEWYour data
Privacy policy
This policy explains what CURFEW (the Android game by SyphonGames, "we") collects, why, who can see it, how long it is kept, and the choices you have. Questions: support@syphondigital.online.
In short
- You play as a guest: no email, no password, no real name.
- Your location runs the game on your phone. Online raids send your position to our server at deploy and extraction so it can check them. We keep only where a raid started, rounded to about 100 m, and to about 1 km once the raid has been checked. We never store your exact position or the route you walk.
- The camera picture never leaves your phone.
- Optional adverts are only offered to players aged 18 or over who choose to watch one.
- You can delete your online account at any time, in the app or by email.
What stays on your phone
- Your game: progress, kit, settings and your current raid. You can erase it with Settings → Reset progress or by uninstalling.
- Your live location. CURFEW reads GPS only while the app is open (never in the background). It uses it to build the map around you, move you on it and place things in their real direction.
- The camera picture. When the camera view is on, the live picture is drawn behind the game on your phone only. It is never recorded, saved or sent anywhere.
- Compass and motion sensors, used to aim. Nothing is recorded.
- Photo mode shots. A shot is made on your phone and goes only where you send it through Android's share sheet. CURFEW never uploads it.
- Notifications are made on your phone (curfew warnings during a raid, and a daily reminder if you switch it on). No notification service receives your data.
What our server keeps
Online play (ranked raids, leaderboards, friends and parties) uses our server, hosted by Supabase. The table below lists what it keeps.
| What | Why | Who can see it | How long |
|---|---|---|---|
| Guest sign-in: a random id made for your phone | To know which game is yours without an email or password | Your phone; us | Until you delete your account |
| Your public card: the callsign you choose, title, emblem, rank, and your raid totals | Leaderboards, friends and parties | Public on leaderboards; friends and party members | Until you delete your account |
| Friend status: in a raid, online in the last 10 minutes, or the day you were last seen | Friends list | Your friends | Changes as you play |
| Cloud copy of your game (kit, stash, stations, achievements) | So progress survives a lost or reset phone | You; us | Until you delete your account (each upload replaces the last) |
| Raid records: the start point rounded to about 100 m (to about 1 km once the raid has been checked), two large map areas around it (about 17 km and 265 km across) for local and regional boards, times, outcome, kills, distance, and what the raid earned | To time and check ranked raids fairly, pay verified rewards, and spot cheating | You; your party sees that you deployed, extracted or went down; us | 90 days (your totals stay on your card) |
| Your exact GPS position sent at deploy and extraction, and the route of a raid | To check that you are really at the extraction point, near your party leader, and that loot came from where you walked | Nobody | Not stored: used only while the server checks the request |
| A party leader's exact deploy point | So party members within 150 m can join the same raid | Nobody (members receive the game map, not the point) | Deleted after 3 minutes |
| Shared party position (only if you switch sharing on), rounded to about 10 m | To show your party where you are during a party raid | Your party members only | Deleted after 2 minutes, at the end of the raid, when you turn sharing off or leave the party |
| Leaderboard scores | Leaderboards | Public. Local and regional boards show you only to players whose latest raid was in the same area. You can leave those boards in the SQUAD tab. | Weekly boards: 4 weeks. All-time: until you delete your account |
| Friends, requests and blocks | Friends lists, and keeping blocked players away from you | The two players involved; us | Until removed or unblocked, or either account is deleted |
| Reports you make about another player | Moderation. Three reports hide a player until we review them | Us. We never see who reported, only how many and why | Until we review them, or 180 days |
| Parties: members, the party feed, and who took which shared loot | Party play and fair shared loot | Party members; us | Deleted when the party is empty or idle for 12 hours |
| Purchases: which Armory products you own, Google's order number, and a scrambled form of Google's purchase code (never your payment details) | To unlock what you bought, keep it across reinstalls and new phones, and take it back if Google refunds it | You; us. Your public card shows a bought title or emblem only while you own it | Until you delete your account |
| Error reports: what broke, the app version, the screen, and a code trace. Anything that looks like a location is removed on your phone before sending. | To find and fix crashes. You can turn this off in Settings | Us, grouped, never linked to who reported | 90 days after the error was last seen |
Our hosting provider also keeps short technical logs (such as IP addresses and request times) to run and protect the service, for its standard retention period.
If you stop playing without deleting your account, it is deleted automatically after 12 months with no activity.
Other services CURFEW uses
- Supabase hosts our server and database. It processes the data above on our behalf.
- OpenFreeMap provides the map. To draw it, your phone requests map tiles from OpenFreeMap, so they receive your IP address and which part of the map you are looking at. When our server checks a raid, it may also request tiles for that area, without anything that identifies you. OpenFreeMap's own privacy terms apply to their service.
- Google AdMob, for optional rewarded adverts, is only used if you have said you are 18 or over and you choose to watch one. Nothing loads before that. Google may then use your device's advertising ID, IP address and device details to show and measure the advert. Where the law requires it (for example in the EEA and UK), you are asked for consent first. You can change it any time in Settings → Advert privacy choices. Google's own policy applies: How Google uses information from apps that use its services.
- Google Play Billing, when you buy something in the Armory. Google takes the payment and keeps the order; we never see card or payment details. With each purchase, the app gives Google a scrambled form of your guest id, which Google uses to detect fraud. Our server asks Google whether a purchase is real before unlocking it.
- Google Play Games, only if you choose to sign in to it for achievements. Google's own policy applies.
- Google Play may send us anonymous crash and performance statistics for the app (Android vitals).
We do not sell your data, use it for our own advertising, or share it with anyone other than the services listed here.
Your choices
- Location: CURFEW needs it to play. You can revoke it in your phone's settings at any time; solo play then stops working.
- Camera: optional. Turn the camera view off in Settings, or deny the permission.
- Party position sharing is off until you switch it on.
- Local and regional boards: you can choose not to appear on them.
- Error reports: you can turn them off in Settings.
- Adverts are always optional.
- Delete everything on our server at any time: here's how. You can also ask us by email what we hold about you, or to correct it.
Children
CURFEW is not for children under 13, and the game does not let anyone under 13 play. Players aged 13 to 17 can play, but are never offered adverts. If you believe a child under 13 has used CURFEW online, contact us and we will delete the account.
Security
All traffic between the app and our server is encrypted (HTTPS). The database cannot be read directly by the app or the public: phones can only ask for their own data, or the public cards of other players.
Changes
If this policy changes in a way that matters, we will say so in the game before the change applies.
Last updated 15 November 2026