Privacy policy

No sign-up: the first time Torva goes online, your iPhone makes a key pair and keeps the private half in its keychain, where it never leaves the device. We store:

• a random player ID and the public half of each device's key;
• your handle (one is made up for you, like Saltwick-4821, and you can change it);
• when the account was made, when each device was added and last used, and any device you signed out;
• the last days you played and the version of the app you last used (to show you the right news and keep online games compatible);
• if you choose Sign in with Apple to protect your progress: the anonymous user ID Apple gives us for Torva. We ask Apple for no name and no email address.

To give you an account without asking who you are, keep it secure, and bring your progress back on a new iPhone.

Until you delete your account.

• your friends and friend requests, and the players you block;
• whether you're online, and if you're in a run, its mode and map (your friends can see this);
• invites and friend requests waiting for you while you're offline (the last 100);
• reports you make or that are made about you: the reason (name, cheating, harassment or other), the reported player's handle at the time, where it happened, the run, and an optional note of up to 500 characters;
• moderation on your account: a reset handle, a quick-chat mute or a ban, and why.

So you can play with friends, keep away players you don't want to play with, and keep Torva safe.

Friends and blocks until either player removes them or deletes their account. Your online status is replaced each time it changes, and waiting messages are cleared once the app collects them. Reports and moderation records: up to 12 months after the report is closed or the action ends. Reports you made are deleted with your account.

• the crews (parties) you're in: members' handles, chosen heroes and skins, ready state and the party code;
• invites, which expire after 10 minutes;
• matchmaking requests, with how fast your connection is to each of our server regions (we use that, never your location, to pick a region);
• while you play online, the moves and game state your iPhone sends to the run's relay server;
• leaderboard entries: your handle, score, time survived, kills, crew size, map and hero.

Quick chat only sends set phrases (like "Thanks!" or "Help!"). Torva has no free-text chat.

To run online games and leaderboards.

Crews are deleted within a day of closing; invites expire after 10 minutes; matchmaking results after a few minutes; a run's relay data is deleted an hour after it ends. Leaderboard entries until you delete your account.

Your game progress: heroes, levels, talents, gear and items, coins and other currencies (with a history of how they changed), what you've unlocked, gifts and messages you've claimed, achievement rewards, which notices you've seen, and your daily rewards.

So your progress is safe, works on all your devices, and gifts and rewards are only claimed once.

Until you delete your account.

Apple takes your payment; we never see your card or Apple Account details. When you buy Pearls or the starter pack, Apple sends us a signed record of the purchase: the transaction ID, the product, its price and currency, the App Store country or region, the date, whether it was a test purchase, and an anonymous token linking it to your Torva account. We keep your Pearl balance and a history of every Pearl you got or spent, which accounts restored a purchase, and the refund notices Apple sends us.

To give you what you paid for, restore it, make sure a purchase is never credited twice, handle refunds, and keep the records tax law requires.

Your Pearl balance and history until you delete your account. Purchase records for 6 years; when you delete your account they're kept anonymised, no longer linked to you or your handle.

The app tells us about things that happen in the game: opening the app, onboarding steps and hints, starting and finishing a run (mode, map, hero, skin, crew size, result, time survived, level and what ended it), level-up picks, heroes viewed and unlocked, store visits and purchases started and finished, notices, bounties and gifts, invites shared and settings changed. Each event carries the app version and your player ID.

To count how many players come back, and where new players get stuck, we also keep which days each account played and when it reached each first-time step (like finishing the First Night).

We don't collect advertising identifiers or any other device identifiers, and we use no third-party analytics: the events go to our own database on Cloudflare.

To see how Torva is really played, so we can fix what's confusing, unfair or broken (our legitimate interest in improving the game). You can object at any time by emailing us.

Events are deleted automatically after 3 months. The days you played and your first-time steps are kept until you delete your account. We also keep daily totals (like how many people finished their First Night) that don't identify anyone.

iOS gives Torva technical reports when the app crashes, hangs or uses too much power (Apple's MetricKit). The app sends them to us with your iPhone model, iOS version, the app version and, if you're signed in, your player ID. They hold technical details like which code was running, not your name or contact details. You can stop iOS sharing these with app developers in Settings → Privacy & Security → Analytics & Improvements → Share With App Developers.

If you send a bug report from the app, we get your message, your iPhone model and iOS version, the app version, where you were in the game, the app's recent logs, your player ID if you're signed in, and your email address only if you add it.

To find and fix bugs.

Crash reports and logs: 90 days. Bug report messages: up to 12 months. If you delete your account, your player ID and email address are removed from them straight away.

If you allow notifications, Apple gives the app a push token. We store it with your choices (party invites, friend requests, news) so we can send them. Daily reward and free hero reminders are scheduled on your iPhone and don't involve our servers.

To send the notifications you asked for (you can turn them off in Torva's settings or in iOS Settings).

Until you turn notifications off, Apple tells us the token no longer works, or you delete your account.

Like any online service, our servers see your IP address when you connect. We use it, for a few minutes at a time, to limit how many requests one address or device can make. We don't store IP addresses with your account or in analytics, and we don't use them to work out where you are.

Our hosting provider, Cloudflare, also handles IP addresses to deliver and protect our servers and this website, and keeps them in its own security and performance logs for a limited time.

To keep the service running and stop abuse and attacks.

Our rate-limit counters: a few minutes. Cloudflare's logs: as set out in Cloudflare's own policies.

If you email support@torvagame.app, we get your email address and whatever you write. Mail reaches us through Cloudflare Email Routing and is stored in Gmail.

To help you.

Up to 2 years after the conversation ends.