Privacy Policy

Summary

Who we are

Dracore is developed and published by AI Ethereals (“we”, “us”, “our”). We are responsible for the personal data described in this policy and act as the data controller for the purposes of the EU General Data Protection Regulation (GDPR) and the UK GDPR.

You can contact us about privacy at any time at support@dracore.app.

Offline play & data on your device

You can play Dracore from start to finish without an internet connection and without any account. Your eggs, dragons, inventory, settings and other progress are stored locally on your iPhone. We do not receive this local data unless you choose to turn on Cloud Backup (described below).

iCloud save

If your iPhone is signed in to iCloud, Dracore keeps a compressed copy of your save in your own iCloud account using Apple’s iCloud key-value storage. This is how your sanctuary comes back if you delete and reinstall the app or move to a new device. The copy is stored and protected by Apple under your Apple Account; it is never sent to Dracore’s server and we cannot access it. You can turn it off in Settings→iCloud save, or manage all iCloud data for your apps in the iOS Settings app under your name → iCloud.

If you delete the app, iOS removes the app’s local data, including your progress. See Delete account & data for one important detail about the iOS Keychain.

Optional online features & your anonymous account

Dracore offers two optional online features that use the Dracore server:

• Online duels — quick match or room-code battles against another player.
• Cloud Backup — an opt-in backup of your game save. It is off by default and can be turned on or off in Settings→Online.

The first time you use one of these features, the app creates an anonymous account: a randomly generated ID and a secret token. The token is stored in the iOS Keychain on your device. Our server stores only a salted hash of the token, never the token itself. No email address, password, phone number or real name is requested or required.

What the server stores

Please choose a warden name that does not contain your real name or other personal information, because it is visible to other players.

Camera, Bluetooth & local network permissions

Camera

Dracore asks for camera access only for augmented-reality features: hunting for eggs in your space, AR Explore mode (walking your space and following glowing footprints to hidden eggs, equipment and caches, with a daily cap on finds) and bringing your dragon into your room at true scale. All camera processing happens on your device. Camera images and video are never uploaded, stored by us or shared. The game remains playable if you decline camera access; only AR features are unavailable.

Bluetooth & local network

Bluetooth and local network access are used only for nearby duels: to let wardens around you see your warden name and your dragon’s name and level, send a challenge, and connect your two devices directly and encrypted. Nothing about nearby duels passes through our server, and this access is not used for any other purpose.

What we don’t do

• We do not show advertising.
• We do not include third-party analytics, advertising or tracking SDKs.
• We do not sell or rent personal data, and we do not “share” it for cross-context behavioural advertising as defined by the CCPA/CPRA.
• We do not track you across other companies’ apps or websites, so Dracore does not use Apple’s App Tracking Transparency prompt.
• We do not collect precise location, contacts, photos, health data or payment details.

Apple TestFlight. While Dracore is in beta, Apple’s TestFlight service may collect crash reports, usage information and any feedback or screenshots you choose to send. That data is collected and handled by Apple under Apple’s Privacy Policy and the TestFlight terms, and is shared with us as the developer only as TestFlight provides.

How and why we use data

We use the limited data above only to provide the features you ask for, keep the service secure and fair, and respond to you. Under the GDPR and UK GDPR our legal bases are:

• Performance of a contract — to provide online duels and Cloud Backup when you choose to use them.
• Legitimate interests — to secure the server, apply rate limits and prevent cheating and abuse, using pseudonymised data (such as hashed IP tags) to minimise impact on you.
• Legal obligation — where we must retain or disclose information to comply with law.

If you email us, we use your email address and message only to respond and keep a record of the request.

Sharing & service providers

• Other players: your warden name, and the moves and results of a duel, are visible to your opponent.
• Hosting provider: the Dracore server runs on a virtual private server operated by our hosting provider, who processes data on our behalf and under our instructions.
• Apple: as described above for TestFlight, and for any future App Store purchases.
• Legal reasons: we may disclose information if required by law, or to protect the rights, safety and security of our players, our service or others.
• Business transfers: if Dracore is transferred to another owner, this data may transfer with it, subject to this policy.

Retention

• Anonymous account and warden name: kept until you delete your online data.
• Cloud backups: only the last 5 revisions are kept; older revisions are replaced automatically. All backups are erased when you delete your online data.
• Duel records: kept for as long as needed to operate matches and protect fair play. When you delete your online data, your account is removed from every duel record, leaving only an anonymous outcome, turn count and timestamps.
• Server logs: kept only as long as needed for rate limiting, security and abuse prevention.
• Support emails: kept as long as needed to resolve your request and for our records.

Deleting your account and data

In the app, go to Settings→Online→Delete online data. This immediately and permanently erases your online account and all cloud backups from our server. Progress saved on your device, and its copy in your own iCloud, is not affected. To remove the iCloud copy too, turn off Settings→iCloud save in Dracore, or delete Dracore’s data in the iOS Settings app under your name → iCloud → Manage Storage.

If you no longer have the app installed, email support@dracore.app. Full instructions are on the Delete account & data page.

Your privacy rights

EU / EEA and UK (GDPR and UK GDPR)

You have the right to access your personal data, to rectify it, to erase it, to restrict or object to processing, and to data portability (receiving your data, such as your cloud save, in a portable format). You may also lodge a complaint with your local data protection authority — in the UK, the Information Commissioner’s Office (ICO).

California (CCPA / CPRA)

California residents have the right to know what personal information we collect, use and disclose; to request deletion; to correct inaccurate information; and to not be discriminated against for exercising these rights. We do not sell or share personal information and do not use sensitive personal information.

How to exercise your rights

The fastest way to delete your data is in the app. For access, portability, correction or any other request, email support@dracore.app. Because accounts are anonymous, we will need to verify that the account is yours — typically by asking you to send the request details shown in the app, or to make the request from the app itself. We will respond within the time required by applicable law (usually within one month). You may use an authorised agent where the law allows.

Security

Connections to the Dracore server use HTTPS encryption. Account tokens are stored in the iOS Keychain on your device and only a salted hash is kept on the server; IP addresses are recorded only as pepper-hashed tags. No system is perfectly secure, but we design Dracore to hold as little data as possible.

Children

Dracore is not directed at children under 13, and we do not knowingly collect personal information from children under 13 (or the equivalent minimum age in your country). The game does not require an email, name or other contact details. If you believe a child has provided personal information to us, contact support@dracore.app and we will delete it.

International data transfers

Our server and service providers may be located in a country other than yours. Where personal data from the EEA or UK is transferred internationally, we rely on appropriate safeguards recognised by law, such as adequacy decisions or standard contractual clauses.

Changes to this policy

We may update this policy as Dracore evolves — for example, if new features are added. We will update the “Last updated” date above and, for significant changes, give notice in the app or on this website before they take effect.

Contact

AI Ethereals
Email: support@dracore.app
Website: dracore.app