Gallant OathPrivacy Policy
The short version
- You never create a username or password. The game makes an anonymous account so your progress is backed up and you can appear on leaderboards.
- Your leaderboard name, rank and scores are visible to other players.
- The game can send gameplay statistics to help us improve it. In the EU, EEA and UK we ask first. Everywhere, you can turn it off in Settings → Online & privacy.
- Optional rewarded ads come from Google AdMob. Where the law requires it, Google asks for your consent first.
- You can delete your online account from inside the game or by email.
- We don't sell your personal information. This website uses no cookies, analytics or trackers.
Who we are
Lumber Man is made by Gallant Oath. Gallant Oath is the trading name of Michael Whelan, a sole proprietor based in Kentucky, United States. Michael Whelan is the controller of the personal information described here ("we", "us").
Contact for anything in this policy: support@gallantoath.com.
Lumber Man is for a general audience aged 13 and over (see Children).
What we collect and why
On your device
Your game progress and settings are saved on your phone. The game also creates two random IDs there: one for your analytics events (shown in Settings as your Support ID) and one that records which of your devices last saved your progress. None of this leaves your phone except as described below.
Your online account (Supabase)
When the game connects, it creates an anonymous account identified by a random ID, with no name, email or password. We store with it:
- Your cloud save: your game progress (tiers, upgrades, items, achievements and similar game data), so it's backed up.
- Your leaderboard entries: your scores on each leaderboard, when you set them and the tier you were on.
- Your public leaderboard profile: a display name made from "Lumberjack" and a short code (you can't set your own name yet), your in-game rank title, number of prestiges, best tier, number of helper cabins and the items you have equipped.
Like any server, Supabase's servers see your device's IP address when the game connects, and keep it in short-lived server logs (see How long we keep it).
Why: to provide the online features you use by playing: backing up your progress and running the leaderboards. Leaderboard entries are also checked to keep scores fair.
Gameplay statistics (PostHog)
If allowed, the game sends gameplay events such as starting or ending a session, reaching a new tier, prestiging, running out of stamina, eating meat, lighting a lantern, hunting, defeating an Ent, being offered or watching a rewarded ad (and whether you finished, skipped or tapped it), and opening the leaderboards. Each event includes:
- your random Support ID and your online account's random ID;
- game numbers (such as tier, best tier and prestiges), the app version, the platform, and whether it's a test or release build;
- your device's language and region setting (from the phone's language settings, which is different from your location).
We don't send your name, email, advertising ID or location with these events. PostHog does not store your IP address or use it to look up your location.
Why: to understand how the game is played and improve it (balance, difficulty, which features work).
Your choice: in the EU, EEA and UK nothing is recorded until you tap "Share stats". Elsewhere it's on by default. You can switch it off at any time in Settings → Online & privacy → Share gameplay stats. Switching it off stops sending straight away and throws away anything not yet sent.
Ads (Google AdMob)
Lumber Man shows optional rewarded ads: you choose to watch one for an in-game reward. They are served by Google AdMob. When an ad is requested, Google receives information such as your device's advertising ID, IP address, device details and how you interact with the ad, to serve and measure ads and, where you agree, to personalise them. Our ad requests are not marked as directed at children.
The game uses Google's consent tool. In the EU, EEA, UK and other places where the law requires it, Google's consent form asks for your choice before ads use your information. You can change it later in Settings → Online & privacy → Ad privacy options (shown where it applies), and you can reset or delete your advertising ID in your phone's settings.
Google uses this information under its own privacy policy. See how Google uses information from sites or apps that use its services and the Google Privacy Policy.
Google Play
You download Lumber Man from Google Play, which Google runs under its own privacy policy. Google gives us statistics about installs and app performance, including crash and error reports, which are generally aggregated or don't identify you. Lumber Man has no in-app purchases yet; if we add them, we'll update this policy first.
When you email us
If you write to support@gallantoath.com we receive your email address and whatever you include, and use it only to answer you. Mail to that address is forwarded by Cloudflare's email routing service to our private mailbox.
This website
www.gallantoath.com is a plain website hosted on GitHub Pages. It sets no cookies and has no analytics, trackers, ads or third-party scripts or fonts. GitHub, as the host, receives your IP address and browser details when you visit, and may log them for security and to keep the service running, under the GitHub General Privacy Statement. We don't receive those logs.
Legal bases (EU, EEA and UK)
| What | Legal basis |
|---|---|
| Online account, cloud save, leaderboards | Providing the game you asked to use (contract) |
| Checking scores for cheating, keeping the service secure | Our legitimate interest in a fair, working game |
| Gameplay statistics | Your consent, which you can withdraw at any time |
| Ads using your information (including personalised ads) | Your consent, collected by Google's consent form |
| Answering your emails and requests | Our legitimate interest in helping you, and our legal duties when you exercise your rights |
Withdrawing consent doesn't affect anything done before you withdrew it.
Who we share it with
We don't sell or rent your personal information. We use these service providers to run the game and this site:
| Provider | What for | Where |
|---|---|---|
| Supabase | Online accounts, cloud saves, leaderboards | United States |
| PostHog | Gameplay statistics (when allowed) | United States |
| Google (AdMob) | Rewarded ads | Google's global infrastructure |
| Google Play | Distributing the game, install and crash statistics | Google's global infrastructure |
| GitHub | Hosting this website; nightly backups of the game database | United States |
| Cloudflare | Domain name service and email forwarding | Global |
Your leaderboard name, rank, profile and scores can be seen by other players. We may also disclose information if the law requires it, or to protect the game and its players (for example against cheating or abuse).
International transfers
We are based in the United States, and our providers store data there. If you play from the EU, EEA, UK or elsewhere, your information is transferred to the United States. We rely on our providers' data processing agreements, which include the European Commission's Standard Contractual Clauses and the UK's equivalent.
How long we keep it
- Online account, cloud save, leaderboard entries and profile: until you delete your online account.
- Server logs (including IP addresses): 1 day at Supabase.
- Database backups: 30 days. Data you delete leaves the backups within 30 days.
- Gameplay statistics: up to 1 year, then deleted automatically by PostHog.
- Emails: as long as needed to deal with your message, and records of privacy requests for as long as we need to show we handled them.
- Data on your device: until you uninstall the game or clear its data.
Your choices and rights
- Turn off gameplay statistics: Settings → Online & privacy → Share gameplay stats.
- Change your ad choices: Settings → Online & privacy → Ad privacy options (where shown), or your phone's ad settings.
- Delete your online account: Settings → Online & privacy → Delete online account. See Delete your account for details.
- Anything else: email support@gallantoath.com to ask for a copy of your information, to correct it, or to delete it (including gameplay statistics). Please include your Support ID from Settings → Online & privacy so we can find your data. We reply within one month.
EU, EEA and UK: you have the right to access, correct, erase, restrict and port your personal information, to object to processing based on legitimate interests, and to withdraw consent at any time. You can also complain to your local data protection authority (in the UK, the ICO).
California and other US states: we don't sell your personal information, and we don't share it for cross-context behavioural advertising ourselves. Google's ads are covered by the consent and opt-out tools above. You can ask to know, correct or delete your information by emailing us, and we won't treat you differently for doing so.
Children
Lumber Man is intended for a general audience aged 13 and over. It is not directed at children under 13 and is not part of Google Play's Families program. We don't knowingly collect personal information from children under 13. If you believe a child under 13 has used the game's online features, email support@gallantoath.com and we'll delete the account.
Security
The game talks to our servers over encrypted connections (HTTPS). Each player can only read their own cloud save, and saves and scores can only be written through server functions that check them. No system is perfectly secure, but we work to protect your information.
Changes to this policy
When we change this policy we'll update the "Last updated" date at the top. For significant changes, such as a new kind of data or a new provider, we'll also tell you in the game.
Contact
Michael Whelan, doing business as Gallant Oath
Kentucky, United States
support@gallantoath.com