Markahead Privacy Policy

Effective October 21, 2026. Markahead is made by Moxiebytes LLC. Contact: hello@markahead.com.

Markahead is a tactical duel game for iPhone. Offline practice works without any account and keeps everything on your iPhone. Online play requires Sign in with Apple. This policy covers online play.

What we collect

Your player name, which you choose and which is shown to other players.
A random player ID that we create, and a secure credential your iPhone keeps. We store only a one-way fingerprint of the credential. Your player ID is shown on the Account screen and to other players on the leaderboard.
Game data: your planned moves, duels, results, rating and replays.
Device-check data: Apple’s App Attest lets us confirm requests come from a genuine copy of Markahead. We keep the key’s public part, its counter and Apple’s signed receipt. It doesn’t reveal who you are, but it is tied to your profile.
Sign in with Apple: a one-way fingerprint of the Apple identifier Apple gives us for Markahead, and an encrypted Apple token that we use only to cancel the link with Apple if you delete your profile. We never request your name or email from Apple.
Connection data: your IP address and request details, in server and network logs used for security, abuse limits and fixing problems. Some log lines include your player ID.

We don’t collect your contacts, location, photos or real name, we don’t use advertising or analytics tools, we don’t track you across apps, and we don’t sell or share your data for advertising.

Who else handles it

Cloudflare carries traffic to our server and sees your IP address and requests.
Apple provides App Attest, Sign in with Apple, the App Store and TestFlight. Apple’s handling is covered by Apple’s privacy policy. If you test Markahead through TestFlight, Apple shares your feedback and any crash reports you choose to send with us.
Our servers run on hardware hosted by OVH US LLC, in the United States.

How long we keep it

Your profile, results, rating and replays: while Markahead’s online play is offered. If you test Markahead through TestFlight, test builds may use a separate test server. Profiles there stay on that server and don’t move to the App Store version; we may reset test data, and we’ll say so in the TestFlight notes first.
Network logs: up to 14 days. Server logs are overwritten by newer entries and cleared whenever the server is updated. Backups: 7 days. If we ever restore a backup, we delete again every profile deleted after it was taken.
If we ever shut down online play, we’ll tell you in the app at least 30 days ahead and delete all online data within 30 days of the shutdown (backups follow within 7 more days).

Deleting your profile

In the app, open Account and choose Delete online profile. Deletion is immediate and permanent:

you lose online access to that profile, on every device;
waiting duels are cancelled, and duels in progress are resigned (your rival wins and, in ranked duels, ratings can change);
your name is replaced with “Deleted Player”.

To keep other players’ results fair, we keep the finished duels, ratings and replays you took part in, plus the device-check record, linked only to the random player ID and “Deleted Player”. Offline practice is never affected.

Deleting the app doesn’t delete your online profile. If you can no longer open a profile (for example, a guest from an older build that was never linked to Apple), email hello@markahead.com with its exact player name and player ID (shown on the Account screen). Because player IDs are visible to other players, we delete by email only a profile that hasn’t started a duel in the last 14 days, and we may ask for more detail. Once we can confirm the request, we delete the profile within 30 days of your email, with the same effects as deleting it in the app, and tell you when it’s done.

Online sessions last up to 24 hours. Sign in again after expiry or revocation; your player name, rating and results are kept. Signing out does not delete your profile.

If you delete a linked profile, we ask Apple to cancel the link and keep retrying if Apple is unavailable. You can also remove it yourself at any time: open Settings, tap [your name], tap Sign in with Apple, select Markahead, then tap Delete. That locks your Markahead profile but doesn’t delete it. To delete it, recover it with Apple in the app, then choose Delete online profile, or email us as described above.

Your choices and rights

You can see your name, rating and history in the app, and delete a profile you can open at any time. For a copy of your data, a correction, or any other privacy request, email hello@markahead.com. We’ll respond within 30 days.

Children

Markahead isn’t directed at children under 13, and we don’t knowingly collect their data.

Security

Connections are encrypted. We store fingerprints rather than raw credentials and encrypt the Apple token. No system is perfectly secure.

Changes

We’ll post changes here and update the effective date. Significant changes will be noted in the app.