Privacy Policy
You can play Jadefall as a guest, and then the game collects no personal data at all. If you choose to make an account, we keep only what the account needs. There is no advertising, no analytics, no tracking, and we never sell or share your data.
Who we are
Jadefall is made and published by Webline Technologies (PVT) LTD, a private limited company in Sri Lanka ("we", "us"). We are responsible for the personal data described here. You can reach us at jadefall@webline.lk.
Playing as a guest
The game saves your progress and settings in the app's private storage on your device: coins, upgrades, runners, relics, missions, trophies, level, best score, sound, language and graphics choices. None of it is sent to us. Deleting the app, or choosing Reset progress in the game's settings, erases it.
As a guest, the game contacts our server only to show the public leaderboards when you open them. Those requests carry no personal data.
If you make an account
An account is optional. It lets you put your name on the leaderboards and keep your progress in the cloud. When you make one, we store:
| What | Why |
|---|---|
| Email address | To sign you in, to confirm the account, and to send password-reset links. We send no marketing email. |
| Password | Stored only as a one-way scrypt hash. Nobody, including us, can read it. |
| Display name and account number | To show your runs on the leaderboards and tell accounts apart. |
| Game progress (cloud save) | So your progress follows you to a new phone. It holds the same game data listed above. |
| Your runs | Score, distance, coins, time, runner and date of each run you finish while signed in, for the leaderboards and to keep them fair. |
| Language | So our emails reach you in your language. |
To block abuse such as password guessing, our server looks at the network address of each request for a short time, in memory only. It is not written to the database or to log files.
What other players see
Your display name and your best runs appear on the public leaderboards, in the game and to anyone who opens them. Nothing else about you is shown. Pick a display name that does not identify you if you prefer to stay anonymous. Other players can report a display name they find offensive; a name reported by several players is replaced automatically, and we may rename or hide names that break our Terms of Use.
Why we use your data
- To provide the account you asked for: sign-in, cloud save, leaderboards and the emails that come with them. This is necessary to provide the service.
- To keep the game fair and safe: checking that submitted runs are plausible, rate-limiting sign-ins, and moderating display names. This is our legitimate interest in running a fair game.
- To answer you when you write to us.
We do not use your data for advertising, profiling or automated decisions about you, and we do not sell it, rent it or share it with advertisers or data brokers.
How long we keep it
Account data is kept for as long as your account exists. Run records older than a year, and daily and weekly leaderboards older than four months, are deleted automatically. Nightly backup copies of the database are kept on our server for 30 days and then deleted, so data you delete disappears from the backups within 30 days. Emails you send us are kept only as long as needed to help you.
Where it is stored, and who helps us
Account data is stored on our own server, which we rent from the hosting company Contabo. Account emails (confirmations and password resets) are sent through the provider that hosts our webline.lk mailboxes. These providers store or carry the data only on our behalf. Your data may be processed outside your country; wherever it is, we protect it as this policy describes.
The game is distributed through Google Play (and later the App Store). Those stores handle your download under their own privacy policies; Jadefall receives no personal data from them.
Deleting your account
You can delete your account and all of its data at any time:
- In the game: Settings, Account, Delete account.
- On the web, without the app: jadefall.webline.lk/account/delete. Sign in with your email and password and confirm.
- Or email jadefall@webline.lk from the address on the account.
Deleting removes your email address, display name, password hash, cloud save, runs and leaderboard entries from our server straight away (and from backups within 30 days). Progress saved on your devices stays there until you delete the app.
Permissions and notifications
The game uses the internet for the account, cloud save and leaderboards, and the device's standard vibration for haptics. If you turn on the optional daily reminder, it asks for permission to show notifications. Reminders are scheduled and shown on your device; nothing is sent to us or to any notification service. The game does not use your location, contacts, camera, microphone, photos or advertising ID.
This website
jadefall.webline.lk sets no cookies, runs no analytics and loads nothing from other companies: the fonts and images are served from our own server. Like any web server, ours briefly sees your network address to deliver the page; it does not keep access logs. The "metres run" counter at the top of the home page is computed in your browser and never sent anywhere.
Children
Jadefall is not directed at children under 13. Anyone can play as a guest without giving personal data, but accounts are not intended for children under 13 (or the higher age required for consent in your country), and we do not knowingly create accounts for them. If you believe a child has made an account, contact us and we will delete it.
Your rights
Depending on where you live (for example under Sri Lanka's Personal Data Protection Act, the EU and UK GDPR, or Californian law), you may have the right to access the data we hold about you, correct it, receive a copy, object to or restrict its use, and have it deleted. You can see and change your display name in the game and delete your account at any time. For anything else, email us and we will answer within 30 days. You can also complain to your data protection authority.
Security
All communication between the game, this website and our server is encrypted with HTTPS. Passwords, sign-in sessions and email links are stored only as hashes. The server installs security updates automatically, sits behind a firewall, and only we have administrative access to it. No system is perfectly secure; if a breach ever affects your data, we will tell you and the authorities as the law requires.
Changes and contact
If this policy changes, we will publish the new version here and change the date at the top. If a change affects how we use account data, we will also email account holders before it takes effect.
Questions about this policy or your data: jadefall@webline.lk, Webline Technologies (PVT) LTD, Sri Lanka.