Privacy policy
Hyo Dev provides SecondRound. This policy describes data handling for the upcoming paid iOS and Android release.
Contact the developer: hyo@hyo.dev
What the game collects
- Anonymous account ID: Firebase Authentication creates a random account ID, shown in Settings as your Support ID. Playing does not require your name, email address or phone number. A support request links its reply email to this ID.
- Cloud saves: your manual save slots, including story progress, choices, character build and in-game items, are stored under your anonymous account ID.
- Optional support requests: reply email, topic, message, anonymous ID, game and environment, app version, operating system, device model, language, chapter context, submission time, status and response.
- Gameplay statistics: Google Analytics for Firebase records chapter progress, fight results and numbered choices using fixed labels and numbers. It also records an app instance ID, device model, operating system, app version, language and approximate country or region derived from the network address.
- Crash reports: Firebase Crashlytics records stack traces, device model, operating system, app version, installation ID and the chapter, map or fight where an error occurred.
The game has no advertising and does not access contacts, photos, phone numbers, precise location or advertising IDs. Support IDs, reply emails and support messages are not sent to Analytics or Crashlytics. We do not sell data or use it for advertising or tracking across apps.
Payment and app ownership
The paid app includes the complete story. Google Play and the App Store handle payment; we do not receive card or bank details. Apple app ownership is checked on the device. Android sends an encrypted Play Integrity token to our authenticated server for Google to verify, using the anonymous ID, a hash of an app-scoped device identifier, app version and integrity/licensing verdict. Tokens are processed temporarily, never stored or logged. Android keeps a signed ownership result for offline play.
Why we use it
To keep saves, confirm app ownership, answer support requests, understand where players stop or struggle, and fix errors.
Who processes it
Google provides Firebase Authentication, Cloud Firestore, Google Analytics for Firebase, Crashlytics and the Play Integrity API. Firebase processes app data on our behalf on servers that may be outside your country. Google Play and the App Store separately handle purchases under their own policies. App data is sent over HTTPS. Cloud saves are accessible only to the account that owns them. Vercel hosts our Android ownership verification API at hyo.dev and temporarily processes authentication and Play Integrity tokens, the anonymous account ID and installation hash. Google decodes the integrity evidence; our service does not retain or log raw tokens.
How long data is kept
- Cloud saves: while the anonymous account exists, or until deletion is requested.
- Support requests: to handle your request, until deletion is requested.
- Analytics: event-level data for 2 months; user-level data for 14 months after the last activity. New activity restarts the user-level period. Aggregated reports without identifiers may be kept longer.
- Crash reports: 90 days.
- Android ownership request and rate-limit records: one record per account and environment, overwritten by later checks and deleted with account data. Local signed ownership results remain until app data is removed.
Google Play and the App Store retain their own purchase records under their own policies.
Your choices
You can request deletion of your anonymous account, cloud saves, support requests and Android ownership-check records using the data deletion guide.
Deleting game data does not refund the app purchase. You can reinstall the paid app from the same store account. Uninstalling the game or clearing its app data removes locally stored game data.
Age rating
The game depicts school bullying and fighting and is intended for teenagers and adults. Follow your local store's age rating. It is not directed at children under 13. If you believe a child's data was collected, contact us so we can delete it.
Policy changes
Changes will be published on this page with an updated date.