Funville Privacy Policy
Short version: Funville has no sign-up, no ads and no tracking, and it doesn't collect personal information. If you say yes when the game asks, it sends us anonymous error reports and, from version 1.1, anonymous play stats, so we can fix problems and see what to improve. If you choose to join the rankings, your park's name and scores are shown to other players. You can change either any time.
Who we are
Funville is made by Nexrax, an independent game maker, and Nexrax is the one responsible for the information described on this page. You can reach us any time at Nexrax@icloud.com. If you live somewhere with privacy rights (for example the EU or UK), you can ask us to show you, fix or delete what we hold about you, and we'll do it.
What we collect
No personal information. Funville has no sign-up, no ad networks, no third-party analytics and no tracking. We don't know who plays, and we never see your saved park. Everything the game sends us is anonymous. The rankings are optional and use only a park name you choose (see below).
Anonymous error reports and play stats (only if you say yes)
On your second visit the game asks whether it may send them ("Help improve Funville?" from version 1.1, "Help us fix bugs?" before). Only if you say yes does it send us a short report when something goes wrong inside the game, at most once a day a summary when it has been running slowly, and, from version 1.1, a few play stats.
A report contains the game's version (and its engine's), your device's model (for example "iPhone17,1") and its iOS or Android version, the game's graphics setting, how long the game had been open, and what went wrong inside the game. A slowdown summary has frame-rate figures instead, which screen was showing and how busy it was (for example how many guests were on it), and whether battery saver was on. Reports have no name, no account, no device or advertising identifier and nothing from your saved park, so they can't be linked to you. Before a report is sent, the game blanks out anything in it that looks like an email address, an identifier or a long number.
Play stats are daily counts, for example: that the game was opened that day, how many minutes it was played, how far the first-time guide got, which attractions and blocks were built, how many gems were earned and what they were spent on, whether the Weekly Cup, Putt of the Day or Weekly Open was played, the graphics setting, and which in-app item was bought (the item only: nothing about you or your payment). Each day's counts go with the game's version, whether it's the iOS or Android version, the date the game was first opened on that device (so we can compare new and long-time players), and the group of any test you're in (see below). They have no name, account, device or advertising identifier and nothing from your saved park. Our server adds them into daily totals and keeps only those totals, with nothing that says whose they were.
Reports and play stats are stored with Cloudflare, which runs our server. Reports are deleted after 90 days and play-stat totals after 400 days. Your IP address itself is never stored, and we keep no request logs. It is used to limit how many requests can arrive in a minute (nothing is kept for that), and a scrambled code made from it and a random value that changes every day is kept for 3 days, with a count, to stop one device flooding the server; the code can't be turned back into the address or matched with another day's. You can turn them on or off at any time: More, then Settings, then "Error reports & play stats" ("Send error reports" before version 1.1). Saying no, or turning them off, stops both and deletes anything still waiting to be sent.
Trying out changes (from version 1.1)
Now and then we may try a change on some players before deciding whether to keep it (for example a different length for a Boost). Your game picks its group itself, with a random number it keeps on your device and never sends. If you said yes to play stats, they include the group's name (for example "boost_hours:b") so we can compare the groups' totals. Nothing else about the test is sent.
Community goals (from version 1.1)
Sometimes every park works towards a shared goal, for example a number of hole-in-ones by Sunday. While one is on, your game sends our server how many it has added (only the goal, the number and the game's version) and asks for everyone's total. The server keeps only each goal's running total; nothing about who added what is sent or kept. Because it's only a number, it doesn't need your yes to reports. Your saved park remembers which goals it helped with, so it can give you the reward.
Send feedback (from version 1.1)
Settings has a "Send feedback" button. If you use it, what you type goes to our server with the kind of message you picked (a bug, an idea or something else), the game's version, whether it's the iOS or Android version and your device's model (for example "iPhone17,1"). No name, account or identifier is added, so please don't type personal information. If you'd like a reply, use "Contact us" to email us instead (see below). Feedback is stored with Cloudflare and deleted after 90 days; your IP address itself is never stored (only the scrambled, daily-changing code described above is kept for 3 days, to stop flooding).
Event dates and game settings
When the game starts, and when you come back to it after a few hours, it downloads a small settings file from our server (for example the dates of seasonal events and, from version 1.1, game numbers such as prices and timings, and any community goal or test that's running), so we can adjust them without an app update. That request only says which version of the game it is and whether it's the iOS or Android version. Nothing about you is sent or kept.
The game also asks our server the time now and then (when it starts, when you come back to it and every few minutes while it's open), so a device clock set ahead can't earn extra. That request carries nothing about you either.
Our server runs on Cloudflare, which handles the connection to deliver it (see Cloudflare's Privacy Policy).
Rankings (only if you join)
World Rankings and the Weekly Cup's standings are optional. To join, you choose a name for your park. Please don't use your real name or anything personal in it. Everyone who plays can see your park's name, its place, its all-time earnings and Owner Level, and its Weekly Cup score.
When you join, our server gives your park a random player number, which is shown with the rankings, and a secret code that stays with you: your device keeps it, and so does your park's cloud copy if you use Game Center (iPhone and iPad) or Google Play Games (Android), so your other devices can use it too. The server stores a scrambled version of it, not the code itself. The server keeps the park name and whether it has been checked; your all-time earnings and Owner Level; your Weekly Cup score for each of the last 12 weeks; when you joined, last renamed, last sent a score and when its name was last checked; and any reports of park names you made or received. It doesn't keep your real name, an account, a Game Center, Google Play Games or device identifier, or your IP address. Scores are sent with the time on your device's clock, which the server uses only to turn away scores from a clock set far ahead; it isn't kept.
To stop impossible scores, the server also keeps a count of strikes (with the date of the last one) if a score is far beyond what a park could earn, any score it is holding back to check (forgotten after 30 days), and your first kept score with its date, to judge how fast later scores may grow. Strikes run out 30 days after the last one. All three are deleted when you leave the rankings.
On iPhone and iPad, the game can use Apple's App Attest to show our server that scores come from the real Funville app. It is not switched on yet; when it is, the server keeps the key's ID and public key (not a secret), a counter and when the key was last used, plus a one-time challenge for each check, which is used up straight away or deleted within an hour. The key is kept until you leave the rankings, when it is deleted.
If the Weekly Cup is switched to groups, the server also keeps which group your park is in each week. Those are deleted after 12 weeks, or when you leave the rankings.
Park names are checked before they're shown: by our own word list, and by an automatic safety check that runs on Cloudflare (Workers AI). If that check can't finish, the name is held back and other players see "Park #" and a number instead; the server checks it again automatically from time to time, and shows it if it passes or keeps it hidden if it doesn't. Players can report a name. A reported name may be hidden until we look at it, and we may hide or block names that break the rules.
You can rename your park once a day. To leave, open World Rankings and tap "Leave the rankings": everything above is removed from the live rankings straight away. Backup copies of the rankings (kept so we can recover from a mistake) expire on their own: the daily export within 14 days and the database restore points within 30 days. If a park sends no scores for 400 days, it is deleted too, and Weekly Cup scores older than 12 weeks are deleted every day.
Your saved park
Your park is saved on your device. If you're signed in to Game Center, a copy is also kept in your own iCloud (Game Center saved games) so you can pick up on a new device. That copy holds your park, your device's model name (for example "iPad8,1") and, if you've joined the rankings, your player number and secret code, so your other devices carry on under the same name. It's stored by Apple in your iCloud account; we can't see or access it. You can delete it from your iCloud storage in your device's Settings.
On Android, if you're signed in to Google Play Games, the copy is kept in your Google account (Play Games saved games) instead. It holds the same things, is stored by Google, and we can't see or access it either. You can delete it in the Google Play Games app.
Game Center
If you use Game Center, achievements and leaderboard scores are handled by Apple under Apple's Privacy Policy. Funville only sends Game Center your in-game progress (for example your Owner Level, your Weekly Cup score and, from version 1.1, your Putt of the Day and Weekly Open scores). From version 1.1, the Weekly Open's scorecard also shows that week's standings from Game Center (players' Game Center names and scores, as Apple shares them with the game). They're shown on your device and never sent to us.
Google Play Games (Android)
If you sign in to Google Play Games, achievements and leaderboard scores are handled by Google under Google's Privacy Policy. Funville sends Google Play Games the same in-game progress it sends Game Center, and the Weekly Open's standings come from Google Play Games instead. They're shown on your device and never sent to us.
Purchases
In-app purchases are processed entirely by Apple on iPhone and iPad, and by Google Play on Android. We never receive your payment details. The game only learns which item you bought so it can give it to you.
Notifications
If you allow them, Funville schedules reminders on your device (for example when your park's away earnings are full). They're created on the device itself; nothing is sent to us.
If you email us
If you write to us, we'll have your email address and whatever you tell us, and we use them only to reply. The "Contact us" button in Settings fills in the game's version, your device type and its iOS or Android version so you don't have to. Ask any time and we'll delete your emails.
Children
Funville is family friendly and rated 4+, but it is not directed at children under 13, and we do not knowingly collect information from them. We don't collect personal information from anyone: error reports, play stats and community goals are anonymous and contain nothing about the player, and feedback carries only what's typed into it. Funville has no chat or messaging.
The rankings and Send feedback are the only places a player can type words that reach us. Please don't use a real name in a park name or in feedback; the game asks you not to, and names are checked before they're shown. If a note suggests that the player is under 13 (for example "I am 9"), we delete it and don't keep it. Feedback is also scanned when it arrives, and anything that looks like a name, email address, phone number, address or age is removed before it is saved. If a child has put a real name on the rankings, "Leave the rankings" removes it at once, or email us and we'll delete it.
How long we keep things
- Error reports and feedback: 90 days.
- Play-stat totals (with no names): 400 days.
- Rankings: a park that sends no scores for 400 days is deleted; Weekly Cup scores are kept for 12 weeks. Leaving the rankings removes your park straight away; backup copies expire within 14 to 30 days (see above).
- Any note we find suggests a player is under 13: deleted on the spot, never stored.
Changes
If this policy ever changes, we'll update this page and the date above.
Contact
Questions? Email Nexrax@icloud.com.