Last updated: 9 November 2026

Privacy policy

Emberwick (formerly Ironbound Kingdom) is a single-player game for iPhone, iPad and Android published by Kawi Software AS (organisation number 933 580 873, Fredrik Meltzers gate 13B, 5007 Bergen, Norway). Kawi Software AS is the controller for the processing described here. Contact us at petter@kawisoftware.com.

This policy covers Emberwick version 2.0.0 and later. Version 2.0.0 adds optional in-app purchases, and play data and screen recordings through our analytics service PostHog. There are no ads. Earlier versions, released as Ironbound Kingdom, are described under Earlier versions.

At a glance

No account and no sign-up. The game plays offline and saves your progress on your device.
Purchases are optional and are made through the App Store or Google Play. Our purchase service, RevenueCat, receives a random purchase ID made by the game and your purchase records, so purchases can be delivered and restored. We never see your card details.
The game sends play data (how you play) and low-resolution recordings of the game screen to PostHog, so we can balance the game, fix bugs and improve the first minutes. Outside the EEA and UK this is on by default and you can switch it off in Settings > Privacy > Share play data. In the EEA and UK nothing is sent until you say yes on a small card in the game. It never includes your name or your location.
No ads, no advertising SDK, no advertising identifier, no tracking across other companies’ apps or websites, and we do not sell your data.
Reminders are local notifications planned on your phone, only if you allow them.
Version 2.0.0 does not ask for your age.

Playing and saving progress

You do not need an account, and the whole game can be played offline. Your progress (including the hero name and look you choose, your gear, Embers and what you have bought), your settings, your answer about play data and random identifiers the game makes for itself (for example the Player ID shown in Settings > Account) are stored in the game’s own storage on your device. Version 2.0.0 has no cloud save, so we cannot restore your progress. Deleting the game deletes it. Your device’s own backup (Android backup to your Google account, or an iCloud or computer backup of your iPhone or iPad) may keep a copy according to your device settings; that backup is a service of Google or Apple, and we cannot access it. On Android the game keeps its play-data ID, its queue of unsent play data and your play-data answer out of that backup.

In-app purchases

You can buy items in the game’s shop, for example Embers (the premium currency), starter and chapter packs, the Rebellion Ledger season pass, the Quartermaster’s Writ (a 30-day card), the Ember Fund and the Ember Jar, and the Emberwick Charter subscription. Buying is optional, and the game plays to the end of Book One without it. Some things in the game give random rewards (forge rolls and Rootbound Caches); the game shows their odds before every roll. Payments are made with your Apple or Google account and are processed by Apple (App Store) or Google (Google Play) under their own terms and privacy policies. We never see your name, card or other payment details.

RevenueCat. To check, deliver and restore purchases and to keep the Charter subscription working, the game uses RevenueCat (RevenueCat, Inc., United States) as our service provider. When the game starts, it gives RevenueCat a random purchase ID that the game made for you (it begins with ibk_ and is not linked to your name, email or phone number). RevenueCat receives that ID, the receipts and purchase history of your App Store or Google Play purchases (which products, when, the price and currency, and the store’s transaction number), whether your subscription is active, and basic technical information such as platform, operating system and app version, language and store country, and your IP address as part of the connection. The game may also ask RevenueCat for your purchase list and subscription status, so that an item is still delivered if the game closed during a payment. RevenueCat processes this data on our behalf to validate, deliver and restore purchases and to give us purchase and revenue reports. It is not used for advertising or to track you across apps, and we do not sell it. RevenueCat stores the data in the United States; transfers rely on RevenueCat’s data processing terms with the EU Standard Contractual Clauses. See RevenueCat’s privacy policy.

Settings > Account has Restore purchases and Manage subscription. Refunds are handled by the store you bought from: ask Apple at reportaproblem.apple.com or Google through your Google Play order history. Buying needs an internet connection; the rest of the game still plays offline. The Terms of Use describe the purchases and the subscription.

Play data and screen recordings

To find out which parts of the game players enjoy, where they get stuck and what breaks, version 2.0.0 sends play data and recordings of the game screen to PostHog (PostHog, Inc., United States; our project is in PostHog’s US cloud), our analytics service provider.

When it is on. Outside the EEA and UK, play data is on from the first start, and you can switch it off at any time in Settings > Privacy > Share play data. In the EEA and UK it is off, and nothing is counted or kept, until you say yes: a small card with two equal buttons, Allow and Don’t allow, appears at a calm moment after you finish your first quest, and the game keeps running behind it. If you do not answer, the card goes away after 30 seconds, asks once more in a later session and then not again; the switch in Settings stays. The game decides this from your phone’s region setting and time zone (not from your IP address), and when it cannot tell, it asks. A no stays a no. Turning sharing off stops collection at once and deletes what was still waiting on your phone; data already sent is kept as described under How long we keep data unless you ask us to delete it.

What is sent. Events about how you play: sessions (start, end and length), the steps of the first session, levels, quests, regions, delves and boss fights (for example how long a fight took and whether you fainted), the forge and the rewards you get, daily rewards and tasks, the screens and pop-ups you open, the notification and rating questions and your answers, shop views, offers and purchases (which product, the price and currency), Embers earned and spent, settings you change, errors and performance figures, and which group of a test you are in when we compare two versions of something. With them the game sends facts about the game and your device: app version and build, platform and store, operating system and version, device model and type, screen size, language and the country of your phone’s region setting (not your location), and a few facts about you as a player: your level, Power, region, days since install and number of sessions, whether you have bought anything, how many purchases and their total at list price in US dollars, and whether you have the Charter. Each event carries a random ID made by the game; PostHog is told that it belongs to the purchase ID described under In-app purchases, so play data is linked to that random ID and not to your name. The game sends no name (also not the hero name you type), email address, phone number, contacts, photos, advertising identifier or location: PostHog is told not to look up a location from your IP address, and our PostHog project is set not to store IP addresses.

Screen recordings. In a share of sessions (not every session), the game takes small, low-resolution pictures of its own screen (about 390 points wide, at most one a second and only when the picture changes) and notes where you tap, so we can replay a session the way you saw it. Only the game’s own screen is recorded, never other apps, your camera or your photos. Nothing is recorded while a text field has the focus or while the name entry is on screen. Recordings are kept for 30 days.

PostHog processes this data on our behalf under its data processing agreement and stores it in the United States; transfers rely on the EU Standard Contractual Clauses. We use it only to understand and improve the game (balance, bugs and the first minutes), not for advertising and not to track you across other companies’ apps or websites, and we do not sell it. See PostHog’s privacy policy. Events and recordings are queued on your device while you are offline and sent in batches over HTTPS when you are online and sharing is on.

Deleting your play data: Settings > Privacy > Delete my data (tap twice to confirm) switches sharing off, deletes the play data, IDs and recordings still stored on your phone, and sends one last request, with the game’s random IDs, asking us to delete what PostHog holds for you. If you are offline, the request goes when you are next online. We delete it within one month. You can also write to us (see Deleting your data).

Game settings and the clock check

Game settings. Shortly after start and when you come back to the game, at most once every six hours, the game asks PostHog for a small settings document (for example event dates, offer rules or balance values). While play data is on, the request carries the game’s random ID, so that a setting can differ between the groups of a test; while it is off, it carries a fixed ID that is the same for every player.
A clock check. On start, when you come back to the game and every 30 minutes while online, the game asks kawisoftware.com (hosted by Netlify), or if that fails Apple’s or Google’s store servers, for the current time, so that offline progress, daily rewards and season ends cannot be skipped by changing the phone’s clock. The request contains no identifier, and only the time in the answer is used.

As with any internet request, the server that answers sees your IP address and basic technical information (such as your operating system) in order to reply. We do not add anything about you to the clock check, and we do not store or use this information.

Notifications and ratings

Reminders (for example when the camp chest is full, the forge is ready or a streak is at risk) are local notifications scheduled on your phone. There is no server and no push token. The game asks inside the game first, and only then does your phone ask for permission. You get at most a few a day and never at night. Choose which kinds you want in Settings > Notifications, or switch them off in your phone’s settings.

Ratings. After certain milestones, for example a boss win, the game may ask your phone to show the App Store or Google Play rating dialog. Apple and Google decide whether it appears; we receive nothing from it except the public ratings and reviews in the stores.

Crash reports and the stores

The game contains no crash-reporting SDK. Errors the game notices itself are part of the play data above, when sharing is on. If you have chosen in your device settings to share diagnostics with app developers, Apple or Google may give us crash reports and aggregated statistics (for example installs and crashes) under their own privacy policies. Apple and Google also process data when you download the game or buy in it; see their privacy policies.

Contacting support

If you email us, for example with Settings > Help > Contact support, we receive your email address and what you write. That mail’s subject contains your Player ID, the game version and your platform so we can help you; you can remove it before sending. We use your message only to answer you. Please do not send passwords or sensitive information.

Service providers

PostHog (play data, screen recordings and the game-settings document, described above) processes data on our behalf.
RevenueCat (purchase management, described under In-app purchases) processes purchase data on our behalf.
Netlify hosts this website and answers the clock check.
Apple and Google run the stores, take payment and act as independent controllers for their store services.

The game contains no advertising network and no other analytics service.

Legal basis (GDPR)

Checking, delivering and restoring the purchases you make, the game-settings document and the clock check are part of providing the game you use (Article 6(1)(b)); purchase records we must keep for accounting are kept under a legal obligation (Article 6(1)(c)). Play data and screen recordings are based on your consent (Article 6(1)(a)) in the EEA and UK, where you can withdraw it in Settings > Privacy at any time, and elsewhere on our legitimate interest in understanding and improving the game (Article 6(1)(f)), which you can object to at any time by switching it off. Local notifications are sent because you allowed them. Support emails are answered based on our legitimate interest in helping players (Article 6(1)(f)).

How long we keep data

Screen recordings at PostHog: 30 days.
Play data at PostHog: as long as our PostHog plan keeps event data (currently up to one year), or until you ask us to delete it.
Purchase records at RevenueCat: as long as needed to provide and restore your purchases and as accounting law requires; Apple and Google keep their own records.
Data on your device stays until you delete the game, subject to your device backups.
Support emails are kept only as long as needed to handle your request and to meet legal obligations.

Your rights

Depending on where you live, you may ask for access to, correction or deletion of your personal data, restriction of processing, or a copy of your data, and you may object to processing. You can withdraw consent to play data at any time without affecting earlier processing. Because there is no account with your name, we may need your Player ID (Settings > Account) to find your data. Write to petter@kawisoftware.com; we answer within one month. You may also complain to your data protection authority; in Norway that is Datatilsynet.

Deleting your data

In the game: Settings > Privacy > Delete my data turns play data off, deletes what is stored on your phone for it and asks us to delete your play data and recordings at PostHog; we do so within one month. Turning off Share play data stops sending at once.
By email: write to petter@kawisoftware.com with the subject “Emberwick data deletion” and your Player ID (Settings > Account) for requests about your play data, purchase records, support messages or anything else. For purchase records, tell us the date and the store order number (from your App Store or Google Play receipt) so we can find them. We delete your RevenueCat customer record within one month, except records we must keep by law; purchases are then no longer restorable through us, but Apple or Google still know them.
On your device: delete the game. This removes your progress, settings and the game’s identifiers. Copies in your device’s own backup follow your backup settings. Deleting the game does not cancel a subscription.

Children

Emberwick is a game for a general audience and is not directed at children under 13. Version 2.0.0 does not ask for age or date of birth, and we do not knowingly collect personal data from children under 13. If you told an earlier version a year of birth that makes you under 16, play data stays off and the card is not shown, and the spending limits of that version stay. Purchases use the store account on the device, so the store’s parental controls (such as Apple’s Ask to Buy or Google Play purchase approvals) apply. If you believe a child has shared play data with us, email us and we will delete it.

Permissions

On Android the game uses internet access (purchases, play data, game settings and the clock check), vibration, and the notification permission, which it asks for only after you agree in the game; to keep reminders working after a restart it may start when the phone boots and briefly keep the phone awake to show a reminder. Android also lists the Google Play billing permission and a network-state permission added by Google’s purchase library; neither shows a prompt. On iPhone and iPad the game asks only for permission to send notifications. The game does not use your camera, microphone, location, contacts, photos or files.

Earlier versions

Versions before 2.0.0 were released as Ironbound Kingdom. Version 1.0.0 collected no personal data: it had no purchases, no play statistics and no analytics or crash-reporting SDK, and its year-of-birth answer stayed on the device. It downloaded a small settings file from Google’s Firebase Hosting and made the clock check above; neither request contained an identifier. When you update, version 2.0.0 starts the play data described above from its first start (outside the EEA and UK) or after your yes (in the EEA and UK). It sends nothing about your time in version 1.0 except your current progress and the date your save was created.

This website

These pages are hosted by Netlify and load fonts from Google Fonts; both receive your IP address to deliver the pages. The Emberwick pages use no cookies and no analytics. The old Ironbound Kingdom addresses on this site forward to these pages.

Changes

We will update this policy before our data practices change, for example if a later version adds ads, accounts or a cloud save, and the game will ask for your consent where the law requires it. This version adds the in-app purchases, play data and screen recordings of version 2.0.0. The date at the top identifies this version.