Privacy Policy

Last updated: 1 September 2026

Wanderlock has no accounts, no cloud saves and no servers of its own. Your progress never leaves your device. Advertising is the one place where data does leave, and this page explains exactly what and to whom.

This policy covers the Wanderlock app for iOS (bundle identifier app.Wanderlock.Wanderlock). It does not cover any other app or website.

What we collect ourselves

Nothing. We operate no servers and hold no database. We cannot see your progress, and there is no account to sign into. Everything described below is handled by the third-party components listed further down, not by us.

Advertising and the advertising identifier

Wanderlock shows occasional full-screen ads between rooms. Ads are served through TopOn, a mediation layer that passes each request on to the ad networks listed below. To select an ad, these networks may receive your device's advertising identifier (IDFA), coarse device and OS information, and the fact that a request came from this app.

On first launch iOS asks whether Wanderlock may track you across other companies' apps and websites. If you decline, the advertising identifier is not shared and you will see less relevant ads rather than more. You can change this decision at any time in Settings › Privacy & Security › Tracking.

Analytics and remote configuration

We use Firebase Analytics to understand aggregate usage — how many people open the app, which chapters get played, whether the app crashes. Firebase collects a per-installation identifier along with device model, OS version and coarse region. We see totals and trends, never an individual player.

We also use Firebase Remote Config, which fetches two settings on launch: whether ads are enabled, and the minimum gap between them. This request sends no personal data.

What the app stores on your device

Saved locally in NSUserDefaults, inside the app's own sandbox. This data is never transmitted anywhere:

• rooms — per-room puzzle state, so a half-solved room stays half-solved
• completedRooms and completedChapters — what you have finished
• stamps — the passport stamps you have earned
• stats — rooms completed, hints used, total seconds played
• tutorials — which one-time tips you have already been shown
• Settings — music, sound effects, haptics and reduce-motion preferences

Deleting your data

Open Settings › Reset Progress inside the app to erase all progress and stamps; your sound and motion preferences are kept. Deleting the app removes everything, preferences included.

To reset the advertising identifier itself, use Settings › Privacy & Security › Tracking on your device.

Permissions

Wanderlock requests one thing: App Tracking Transparency, the prompt described above. It asks for no camera, microphone, photos, contacts, location or notification access, and contains no in-app purchases.

The app does need network access, which iOS grants without a prompt. It is used only for ads and the two Firebase calls — there is no gameplay content to download and the game is fully playable offline, ads aside.

Third-party software

These components can receive data as described above:

• TopOn (mediation) and the networks it calls: AppLovin-free by design — StartApp, Liftoff/Vungle, Unity Ads, ironSource, Bigo Ads, Pangle, InMobi, Mintegral, Yandex Ads, Fyber and Meta Audience Network
• Firebase Analytics and Firebase Remote Config (Google)

Each network handles the data it receives under its own privacy policy, and we have no control over what it does with it. These components are also the reason the app declares SKAdNetwork identifiers — Apple's privacy-preserving way of measuring ad installs without exposing you individually.

The app also bundles SnapKit, SDWebImage, ObjectMapper and PromiseKit. These are local utility libraries; they transmit nothing.

Children

Wanderlock is not directed at children under 13 and we do not knowingly collect data from them. If you believe a child has provided data through the advertising components, contact us and we will pass the request on to the networks involved.

Your rights

Because we hold no data ourselves, there is nothing on our side to export or delete — there is no account and no server-side record of you. Your practical controls are the ones that matter here: decline the tracking prompt to withhold the advertising identifier, reset that identifier in iOS Settings, and clear local progress from the app's own Settings screen.

If you are in the EEA, the UK or California, you may also contact the ad networks listed above directly to exercise rights over data they hold.

Changes to this policy

If we add or remove an SDK, or change what leaves the device, this page is updated before that version ships, and the date at the top changes with it.