Who we are
Rune Covenant is a fantasy card game operated by Black Thorn Labs LLC. This policy applies to its iPhone game, hosted account features, and related support. Contact durian@blackthornlabsgames.com with privacy questions.
Information used by the game
Apple sign-in and hosted account
If you sign in with Apple, the game sends an Apple identity token and a one-time challenge value to our server to create or access a Rune Covenant account. The current sign-in request does not ask Apple for your name or email address. Our service maintains an account identifier, session information, and records needed to authenticate you and protect the account.
Cards, decks, wallet, and matches
Our hosted service stores your card collection, deck choices and names, virtual gold and gems, pack openings, daily rewards, purchase entitlements, and account revision history. For online play it processes matchmaking activity, opponent display names, match state, turns, outcomes, and abuse-prevention information. The game also keeps some settings and progress on your device.
Apple purchases
Apple processes App Store payments. The test integration receives signed transaction information or verification results needed to grant and restore in-game purchases, prevent duplicate grants, and address purchase problems. We do not receive your full payment-card number. A completed TestFlight purchase has delivered gems, but production purchasing remains subject to final verification and release controls.
Optional rewarded videos
Rewarded videos use Unity LevelPlay and the ironSource and Unity Ads networks only after you choose to enable optional videos in the game. The current flow asks whether you are 18 or older. Choosing under 18 or prefer not to say keeps videos off. When enabled, providers may collect account-linked user identifiers, device and network details, coarse location inferred from IP address, purchase history, product interactions, advertising and other usage data, performance and other diagnostic data, and information needed to deliver and verify rewards. Unity Ads may also receive ad-report support information if you submit an ad report. The app sends non-personalized and California opt-out signals before ad initialization and does not request Apple's cross-app tracking permission. Those settings do not mean the SDKs collect no information. Ad availability varies.
Support
If you email us, we receive the contact details and troubleshooting information you choose to send.
Why we use information
- Run the game, authenticate accounts, and keep hosted collections and virtual balances consistent.
- Match players, run online games, record outcomes, and protect the service from misuse.
- Verify purchases, deliver optional rewards, and investigate missing entitlements.
- Respond to support and privacy requests and meet legal or platform obligations.
Providers and disclosures
Apple provides sign-in and App Store purchasing. Our hosting provider processes account and game records on our behalf. Unity LevelPlay and participating ad networks process advertising data when optional videos are enabled; see Unity's game player privacy policy. We may disclose information when required by law or necessary to protect users, the service, or our rights.
We do not sell your card collection or account records for money. Advertising-related disclosures may be treated as sharing or targeted advertising under some privacy laws even when no money is paid for your personal information.
Retention, security, and choices
Hosted game records remain while your account is active. Local data remains until reset or app removal, subject to device backup settings. We use reasonable safeguards, but no networked service is risk-free.
- Leave optional rewarded videos off, or turn them off in the game's rewarded-ad preferences.
- Use Apple's sign-in privacy controls and App Store purchase history controls.
- Contact us for access, correction, or other applicable privacy rights. Include only enough information to locate your account; never send passwords or verification codes.
Account deletion in build 16: Settings asks for confirmation and fresh Sign in with Apple identity proof, then deletes the hosted account, collection, decks, wallet, sessions, and associated ad records. An active online match is forfeited; the other player's settled match remains with the deleted identity anonymized. Unlinked transaction references are retained to prevent duplicate purchase delivery. An unlinked local save can remain on your device until you remove it or the app. Deleting a Rune account does not cancel an Apple subscription or automatically remove Rune Covenant from your Apple sign-in settings. Build 15 does not contain this control. The deletion service is live and the signed build 16 archive has been verified, but build 16 is not yet publicly available. Until the control is available to you, email us for help with deletion. Removing the app alone does not erase hosted account data.
Children and policy changes
Rune Covenant is not directed to children under 13. Optional rewarded videos are limited to players who affirm they are 18 or older. We will update this policy when game features, providers, or data practices materially change and revise the effective date above.