What Pen Fire
knows about you.

What the game keeps, and where

Everything the game remembers about you sits in its own storage on your phone: which fighters you own, your upgrade levels, crowns, mission progress, season level, settings, and your stats. None of it leaves the device, and we have no way to read it.

Deleting the app deletes all of it. That is the honest trade for having no account: nothing to sign up for, and nothing we can restore. Purchases are the exception, because the store remembers those.

Purchases

Fighters, crowns, the season pass and bundles are sold through Apple's App Store and Google Play. The store handles the payment and your identity. What the app receives is a receipt saying a product was bought, which it uses to unlock the item and to restore it later. We never see your card, your name or your email from a purchase.

Apple and Google process that payment under their own privacy policies, which govern what they do with it.

What the stores tell us

App Store Connect and the Play Console show us aggregate numbers: how many people installed the game, in which countries, on which devices, how many bought something. These are counts, not people. We cannot identify you from them and we cannot ask the stores who you are.

If your phone is set to share crash diagnostics with developers, we may receive a crash report: the device model, the OS version, and the technical state of the app when it stopped. We use these only to fix the crash. That sharing is a setting on your phone, not in our game, and you can turn it off there.

Friends

Friend codes are how you add people. In the current version the friend list is kept on your device. If a later version moves friends to a service so lists follow you between phones, this page will say so before it ships, and the only things stored would be the code you chose and the codes you added.

The game itself

Pen Fire plays offline. It does not need the internet to run, and it makes no network requests of its own during play. The sound is generated in the app, the fonts are bundled, and the art is drawn in code.

Rewarded ads

Not in this version. The shop lists rewarded items as coming soon. If ads arrive they will be opt-in per reward, and this page will describe what the ad network receives before they ship.

This website

No analytics, no advertising pixels, no cookies of our own, and no third-party scripts beyond the one named below. We do not know who visits.

The site is hosted on Cloudflare Pages. Like any web host, Cloudflare processes the connection itself, including your IP address, to serve the page and to keep the site up. It does this as our processor under its own terms.

Typefaces are loaded from Google Fonts, which means your browser asks fonts.googleapis.com and fonts.gstatic.com for them and Google receives your IP address in that request. If you would rather it did not, a content blocker will stop it and the site still works, in a fallback face.

The gameplay video is served from this site, not from YouTube or Vimeo, so watching it tells nobody but our host that you did.

When you write to us

If you email [email protected] we have your address and whatever you put in the message, because that is how email works. We use it to answer you and for nothing else. We do not add you to a mailing list. We keep support mail for up to two years so we can pick up a thread again, then delete it.

Children

Pen Fire is rated 9+. It collects nothing from anyone, children included, so there is nothing about a child for us to hold, sell or disclose. That is also our answer under the United States Children's Online Privacy Protection Act: we knowingly collect no personal information from children under 13.

Age gates and parental approval for purchases are handled by the store the game was installed from, where a parent can also turn purchasing off entirely.

Your rights

If you are in the UK, the EU or the EEA, data protection law gives you the right to ask what personal data we hold about you, to have it corrected or deleted, to object to or restrict how we use it, to receive a copy, and to complain to your data protection authority.

In practice there is very little to ask about, because the game holds nothing on our side. The only personal data we are likely to have is an email you sent us. Write to [email protected] and we will answer within 30 days, free of charge.

If you are in California, you have similar rights under the CCPA as amended by the CPRA. We do not sell or share personal information and we never have, so there is nothing to opt out of. We will not treat you differently for asking.

Why we are allowed to do this

Where UK or EU law applies, we rely on our legitimate interests in running a game and a website and in answering the people who write to us, and on the necessity of processing to give you the game you asked for. We do not rely on consent, because we are not doing the things consent is usually for.

Where the data goes

We are in Hong Kong. Our host and our email provider operate globally, so the handful of things described here may be processed outside your country. Where the law requires a safeguard for that transfer, we use the standard contractual clauses our providers offer.

Changes to this page

If what the game or the site does changes, this page changes first, and the date at the top moves with it. If a change ever means we start collecting something, we will say so plainly rather than bury it here.

Who we are

Pen Fire is made by Flower Execution Limited, a company registered in the Hong Kong Special Administrative Region and the data controller for anything described here. For anything at all about this policy, write to [email protected]. We do not have a data protection officer, because we are not big enough to need one.