Privacy Policy
Estra Box Transit
This policy explains how this application handles information and how to contact us about privacy.
Information we process
Estra Box Transit stores campaign progress, active rounds, attempt histories, custom blueprints, settings and cached daily challenges locally in a SQLite database on your device. Network features use a randomly generated installation secret stored in the iOS Keychain; the server stores its SHA-256 digest, not your name or an account password. When you submit a daily attempt, the server stores the challenge date, action sequence and whether it succeeded. Publishing a blueprint sends its name, grid, starting velocity, goal, obstacles, mats and push budget. Do not put personal information in blueprint names. The app does not request your email, contacts or location. Requests to the API or this website expose connection information such as IP address, request time and URL to hosting infrastructure. Application error logs contain request identifiers and general service errors, not request bodies or installation secrets. The server also stores dated game challenges in PostgreSQL; these are shared game content, not personal records.
How we use information
Local data keeps the game playable offline and restores your progress. The installation digest authorizes access to your server data and deletion of your published blueprints. Daily attempts are replayed to validate their results and saved as the latest attempt for each installation and date. Published layouts are checked for solvability and made available to other installations. Hosting request information and limited error logs support delivery, rate limiting and diagnosis. We do not use advertising, purchase, tracking or analytics SDKs.
Service providers and sharing
The API and PostgreSQL storage are hosted on Railway, which processes network traffic and infrastructure logs to provide hosting. Other players can see explicitly published blueprint names and game layouts, but not your installation secret, its digest or private daily attempt history. A downloaded blueprint may remain on another device after you delete its server copy. No advertising or outbound email service is integrated. The public privacy contact is cal.underwood94@icloud.com; contacting it is optional and any information you send is processed by the email service used by you and the recipient.
Data retention
Local progress, cached content and preferences remain until you reset or delete them in the app, remove the app, or the operating system removes them. The app retains at most eight attempt histories per level. Server installation digests, published blueprints and latest daily attempts remain until deletion; there is no automatic time-based expiry implemented. Infrastructure logs and any hosting backups follow Railway settings and processes; we do not claim a fixed retention period for them. Device data may be included in operating-system backups according to your settings, while the installation secret uses a device-only Keychain protection class.
Deleting your information
Settings offers Reset progress, Delete local blueprints and Delete my server data. Reset progress removes campaign progress, round and attempt histories; local blueprints remain until separately deleted. Server deletion requires the installation secret and removes that installation record, daily results and owned published layouts from active PostgreSQL tables. Deleting an individual owned published layout is also available in the workshop. Local copies on other devices and copies in existing device or hosting backups cannot be remotely erased by this app and may remain until those backups expire or are removed. Local database and storage recovery behavior is controlled by iOS. Losing the installation secret prevents recovery or authorization of server data; there is no account recovery system.
Permissions and your choices
The app requests no protected-device permissions such as location, camera, microphone, photos or contacts. Optional sound and haptic feedback can be disabled in Settings. Network features are optional; campaign, laboratory and local editing work offline. You can stop server requests by not using online features or by disconnecting network access. Device backup and app removal are controlled through iOS settings.
Your privacy rights
You can view your local game records, edit or delete local blueprints and delete installation-scoped server data through the app. Depending on your jurisdiction, you may have rights to access, correction, deletion, restriction or objection. Questions about privacy or a rights request may be sent to cal.underwood94@icloud.com. Please do not send your installation secret by email. Because no identity account exists, we may be unable to associate a request with installation data without appropriate authorization; we do not promise recovery after loss of the secret.
Security
Production communication uses HTTPS. A separate random 32-byte secret is generated for each installation and kept in Keychain with device-only protection. The server stores a SHA-256 digest and checks authorization for private operations and owned-layout deletion. PostgreSQL credentials stay in server environment configuration. Input validation, bounded request sizes, rate limits and server-side solvability and result checks limit misuse. These safeguards reduce risk but cannot guarantee absolute security. The app does not contain a shared client credential or an account login.
Children’s privacy
The game is designed for players aged 12 and older and does not create child accounts or request ages, names or contact details. Online blueprint publishing is optional. Younger players should use the offline game with guidance from a parent or guardian and should not include personal information in published layout names. If you believe personal information about a child was included in a published blueprint, contact cal.underwood94@icloud.com.
Changes to this policy
This policy reflects the processing implemented in this version. If processing changes, the policy will be updated at this URL with a revised effective date. Material changes will be reflected in app updates or this page. Review the current policy before using optional online features.