Effective October 10, 2026

Privacy Policy

Your game. Your choices.

David Miller, operating as WanderWomple, is responsible for the information described in this policy. This policy explains how we handle information for Moonshine Millionaire and wanderwomple.com. Contact us at [email protected]. It describes the current game and beta features as of October 10, 2026.

Information we use

Progress saved on your device

The game saves progress, settings, level attempts, virtual balances and helper inventory on your device so you can continue playing. Ordinary play does not require an account. Device backups may be handled by Apple according to your device settings. Cloud save recovery and transfers are not currently available.

Optional gameplay analytics

If you enable Share gameplay analytics in Settings, we send gameplay information to PostHog to understand level difficulty, balance rewards and tools, investigate problems and improve the game. Sharing is off by default. Information includes a randomly generated analytics identifier, event and attempt identifiers, game version, device form factor, level and board version, wins and other outcomes, moves, observed time spent, orders, heat, helper use, and changes to virtual cash, copper and inventory. Virtual currency records are game activity, not payment-card details.

If you separately enable Detailed move analytics, we also send structured move and diagnostic data, including selected board coordinates, before-and-after board states, ingredients, obstacles, refill and random-seed information, timing, and story or audio-state diagnostics. This helps us reproduce problems and evaluate puzzle behavior. It is not video, microphone audio or a screen recording. Existing local playtest files and written notes are not automatically uploaded.

Our analytics messages do not include your name, email address, Apple sign-in identity, advertising identifier, contacts or precise GPS location. The random identifier is pseudonymous, not a guarantee of anonymity. PostHog and network service providers may process IP addresses and technical request information. We disable geographic enrichment and person-profile processing in our event configuration. Analytics uses PostHog's US service.

Optional beta sign-in

Some internal beta versions offer Sign in with Apple for testing. If you choose it, Apple authentication credentials and a verification nonce are exchanged with Supabase Auth, which processes an account identifier and authentication/session records. We do not request your name or email through this sign-in flow. Session credentials are stored in the device Keychain. This test does not currently back up or synchronize your game progress. Signing out does not delete the server-side test account.

Support and beta feedback

If you email us or send a report, we receive the contact information, message, screenshots or diagnostics you choose to provide. Please avoid including passwords, verification codes, payment-card details or unrelated personal information. Apple may provide beta feedback and crash information through TestFlight or its developer services, subject to Apple's settings and policies.

Website visits

Cloudflare hosts and protects this website and may process IP addresses, request times, URLs, browser/device information and security logs to deliver pages and prevent abuse. We have not added advertising trackers or a marketing analytics script to this website. Service providers may use necessary security technologies. Clicking an email link opens your email application; messages are handled through our email provider, Google Workspace.

How we use and share information

We use information to provide the game and website, save local progress, respond to support requests, secure our services, investigate faults and—with your consent—improve gameplay. We do not sell personal information or use current gameplay analytics for cross-company targeted advertising. We share information with providers only as needed for their services: PostHog for opted-in analytics; Cloudflare for website delivery and security; Google Workspace for correspondence; Apple for platform, beta and optional sign-in services; and Supabase for the optional beta authentication test. Providers process information under their applicable agreements and privacy terms.

We may disclose information when legally required, to protect users or our services, or in a business transfer subject to appropriate safeguards. We may retain and use statistics that no longer identify a player to understand long-term level balance.

Provider information: PostHog, Cloudflare, Supabase, Apple, and Google.

Ads and purchases

The current version does not serve live third-party ads or process real in-app purchases. Beta shop transactions are simulations. Rewarded ads and purchases are planned; they are not enabled by this policy. Before activating them, we will update these disclosures to identify the information and providers involved and offer the consent and privacy controls required for that release.

Your choices and rights

You can play without enabling analytics. Turn off Share gameplay analytics in Settings to stop new capture, block subsequent uploads, cancel in-flight requests and clear unsent analytics from your device; a request already received cannot be recalled. Turning off Detailed move analytics stops and clears unsent detailed data while allowing summary sharing to remain on. Turning sharing off does not automatically erase records already received by us or our providers.

Contact [email protected] to request access, correction, deletion or a copy of personal information, or to withdraw consent or object to or restrict processing where applicable. We may ask for limited information to verify the request and locate records. Because gameplay identifiers are not connected to your email, we may not be able to identify an analytics record from your email alone. We will explain any identification limitations or lawful retention exceptions and respond within applicable legal deadlines. Exercising privacy rights will not prevent ordinary gameplay. See Privacy Choices for practical instructions.

Retention

Our policy is to retain identifiable or pseudonymous uploaded gameplay analytics for no more than 12 months after collection, then delete it or convert it into statistics that no longer identify a player. Automatic enforcement of this limit is being configured during the current beta; you can contact us now to request deletion. We may retain those de-identified aggregate statistics longer to evaluate level balance over time. Valid deletion requests may result in earlier removal, subject to applicable legal exceptions.

Unsent analytics are kept in bounded local queues; records older than seven days are discarded when the queues are processed. Local game saves remain until removed by you or the device. We keep support correspondence and authentication/security records as needed to resolve requests, operate the relevant service and meet legal or security obligations.

Legal bases and international processing

Where relevant data-protection law requires a legal basis, we rely on your consent for optional gameplay analytics, steps necessary to provide a service you request, legitimate interests in support and security where those interests do not override your rights, and legal obligations. Withdrawing consent does not affect processing that was lawful before withdrawal. Providers may process information outside your country, including in the United States. Where required, applicable provider contracts and recognized transfer safeguards govern those transfers. You may contact us about safeguards or complain to your local data-protection authority.

Children

Moonshine Millionaire is designed for an adult audience and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us so we can investigate and remove it as appropriate. Follow the age rating and eligibility requirements shown by your app store.

Security and changes

We use safeguards such as encrypted network connections and restricted service access, but no system is completely secure. We will update this page when our practices change and give additional notice or request new consent when required. The effective date appears at the top of this page.