Privacy Policy
Buzz Party Celebration
This policy explains how this application handles information and how to contact us about privacy.
Information we process
Buzz Party Celebration stores party progress, placed objects, task results, saved designs, language and sound preferences, selected personal photos, invitations and keepsake images locally in the application's private storage. The system photo picker provides only images you select; the app does not browse your photo library. Optional private backup is off by default. If you enable it, the service creates a random installation secret stored in this device's Keychain and stores only its cryptographic hash on the server. Backup sends progress, saved designs, album metadata and finished album images, which may contain personal photos and captions. Source photos used in the photo booth are not uploaded separately. HTTPS requests also expose network information such as IP address, time, requested path and technical request metadata to our hosting infrastructure. No account, email address, location, contacts, advertising identifier or analytics profile is requested by the app.
How we use information
Local data makes the game playable offline and preserves your party, designs and images after reopening. Selected photos personalize your photo booth, invitation or keepsake. Photos access is used only when you choose to save a finished image to the system photo library. Optional server storage provides an installation-scoped backup; the app retries pending local changes when active and connectivity is available. Local progress takes precedence when server revisions conflict. The installation secret authorizes access to that installation's private data. Infrastructure request information is processed to deliver and operate the HTTPS service and investigate technical errors. We do not use game data or images for advertising or analytics. You can restore the stored snapshot and finished album images on the same installation while its secret remains available. Source photos used in the photo booth are local-only and are not recovered by this restore.
Service providers and sharing
The backend is hosted on Railway, which processes stored backup data and network requests as infrastructure provider. The application uses Apple system services for the photo picker, photo-library saving, Keychain and the iOS share sheet. When you choose Share, the image is passed to the destination you select, under that destination's privacy practices. The app includes no advertising, analytics, social login, third-party tracking or outbound email SDK. We do not sell personal data. Hosting infrastructure may maintain operational and network logs; we have not configured a separate analytics recipient. Information may be disclosed when required by applicable law.
Data retention
Local progress and files remain until you delete individual album items, erase local data in Settings or remove the app, subject to iOS device backup behavior. The installation secret is stored using a device-only Keychain accessibility setting and is not intended for transfer to another device; Keychain lifecycle is controlled by iOS. The server retains the latest progress snapshot and uploaded album images until you delete the corresponding images or delete the server backup. There is no scheduled automatic expiry in the application. Server data is held on a persistent Railway volume. No application-managed backup schedule is configured. We do not promise a particular infrastructure-log retention period or immediate erasure from any provider disaster-recovery copies; provider-managed copies, if present, follow the provider's retention and recovery processes.
Deleting your information
Settings offers Delete server backup, which authenticates with your installation secret, revokes it and removes that installation's active server progress and images. This action disables backup and keeps local files. If deletion fails offline, keep the app and its secret, reconnect and retry; the app reports the failure. Deleting an album item removes its active server copy on the next successful backup. Erase local progress and photos separately deletes the app's local records and imported images; it does not remove copies you exported to Photos or another app. Delete those copies in their destination. Turning backup off stops future uploads but does not itself erase an existing server copy. Loss of the installation secret can prevent access, recovery or authenticated deletion; there is no account or cross-device recovery. You may contact sidonie.gladstone@icloud.com for privacy requests without sending sensitive photos or the installation secret.
Permissions and your choices
The game requires no location, camera, microphone, contacts or notification permission. Importing an image uses Apple's system photo picker without general photo-library access. Saving an image requests add-only Photos permission at the moment you choose Save to Photos. You can deny or withdraw permission in iOS Settings; the game, private app album and share sheet remain usable. Imported copies are not automatically removed by withdrawing Photos permission; remove local data separately. Backup can be disabled in the app's Settings and is not required for play. Device-level backup and sharing settings are controlled separately by iOS and the destinations you choose.
Your privacy rights
Depending on where you live, you may have rights to access, correct, delete, restrict or object to processing, withdraw consent, or complain to your local data-protection authority. Most data can be managed directly through the game, album and Settings. Images can be exported through Share. For questions or privacy-rights requests, contact sidonie.gladstone@icloud.com. This address is a public privacy contact, not an in-app account or email delivery feature. Because we do not collect account identifiers, we may need a safe way to establish which data a request concerns, and cannot identify a backup from a name or email alone. Never send us your installation secret.
Security
Network communication uses HTTPS. Every installation receives an independently generated random secret, and private server endpoints check its hash before reading or modifying data. The server does not accept a shared client credential or expose private images publicly. The secret is stored in Keychain on the device; local app files use the iOS application sandbox. The service validates request sizes and media identifiers and uses atomic writes on its persistent volume. Server application logs do not intentionally include secrets, image contents or progress payloads. These measures reduce risk but cannot guarantee absolute security. Protect your device and use care with personal photos and sharing destinations.
Children’s privacy
Buzz Party Celebration is a casual creative game intended for young players, teenagers and young adults, including the brief's 12 to 25 audience. It has no registration, public profiles, chat, advertising or purchases. The full game can be played offline without enabling backup or selecting personal photos. Young players should involve a parent or guardian before enabling online backup or importing and sharing personal images where parental permission is required. We do not ask for age or knowingly build child profiles. A parent or guardian may use the deletion controls or contact sidonie.gladstone@icloud.com about privacy concerns.
Changes to this policy
We may update this policy when the game's processing or hosting changes. The current policy is available through the Privacy Policy link in Settings and at this service's public /privacy page. Its effective date identifies the latest version. Material processing changes will be reflected in the policy and in relevant app controls before those changes are used. Continue to review your backup, photo and sharing choices as the app evolves.