Privacy Policy

Last updated: April 17, 2026

PhasmoSync ("we", "us", or "the app") is an unofficial, ad-free companion app for the game Phasmophobia. This policy explains what information the app handles, what it does not, and the choices you have. We aim to collect as little as possible — and we never sell data.

1. Information we do not collect

• No name, email address, phone number, or other personal identifiers.
• No user accounts — the app has no login system.
• No advertising identifier, IDFA, or ad tracking.
• No third-party analytics (Firebase Analytics, Mixpanel, Amplitude, Sentry, etc.).
• No location data.
• No access to contacts, photos, microphone, or camera.
• No cross-app or cross-device tracking.

2. Information we do collect

2.1 Anonymous device identifier

When you first open the app, a random identifier is generated and stored locally on your device. It is not linked to your name, email, Google account, Apple ID, or advertising ID. It is used only to:

• Identify your device within a multiplayer lobby so markers and room states stay in sync.
• Reconnect you to your own room state if you drop and rejoin.

You can reset this identifier at any time by reinstalling the app.

2.2 Multiplayer session data

If you choose to host or join a multiplayer room, the following data is sent to our server during the session:

• The anonymous device identifier described above.
• Room state: markers, room clearance states, crossed-out hiding spots, and similar gameplay data.
• A short, shareable room code.

Multiplayer session data is held in server memory while the room is active. It is not written to a persistent database and is deleted when the room ends or becomes empty.

2.3 Feedback submissions

If you submit feedback through the in-app feedback form, the text you type and the device identifier are forwarded to a private Discord channel used by the developer. No feedback data is stored in a database. Only submit feedback you are comfortable sharing.

2.4 In-app purchases

The optional "Supporter Edition" in-app purchase is handled by Google Play and by RevenueCat (a subscription-management service). When you make a purchase, the following is processed:

• The purchase receipt issued by Google Play.
• The anonymous device identifier, so the entitlement can be restored on reinstall.

We do not receive your payment information, billing address, or Google account email. That data stays with Google. RevenueCat's privacy policy is available at https://www.revenuecat.com/privacy.

2.5 App integrity check

To reduce piracy of the paid Supporter Edition, the app uses Google Play Integrity API on Android to verify that the app binary and device are genuine. The attestation token generated by Google is sent to our server, verified, and discarded. It is not retained.

3. Third parties and service providers

We use a small number of third parties to run the app. Each is used only for the purpose described:

• Google Play — app distribution, in-app purchases, Play Integrity API.
• RevenueCat — managing subscription entitlements for the Supporter Edition.
• Fly.io — hosting our multiplayer and feedback server.
• Cloudflare — DNS and delivery of this website.
• Discord — receiving feedback you choose to submit via the in-app feedback form.

We do not sell, rent, or trade data with any third party. The providers above process data solely on our behalf to operate the listed features.

4. Data retention

• Multiplayer rooms: stored only in server memory, deleted when the room closes.
• Feedback: forwarded to a private Discord channel and retained there per Discord's own retention policy. We do not store it separately.
• Purchase entitlements: retained by Google Play and RevenueCat per their policies, for as long as required to restore purchases.
• Integrity tokens: verified and immediately discarded.

5. Security

All network traffic between the app and our server uses HTTPS/TLS. The anonymous device identifier is stored locally on your device using the platform's standard secure storage. Because we do not maintain user accounts, there is no password or authentication secret to compromise.

6. Children's privacy

PhasmoSync is a companion for a game rated Mature and is not directed at children under 13. We do not knowingly collect information from children under 13. If you believe a child has submitted information to us, please contact us and we will delete it.

7. Your choices

• You can use all single-player features without any data leaving your device.
• You can decline multiplayer, feedback, and purchases at any time — nothing is collected from those features unless you use them.
• You can reset the anonymous device identifier by reinstalling the app.
• You can request deletion of any feedback you sent by emailing us with the text you submitted.

8. International users

Our server is hosted in the United States. By using multiplayer or submitting feedback, you acknowledge that the minimal data described above may be processed outside your country of residence.

9. Changes to this policy

If we materially change what data is collected or how it is used, we will update the "Last updated" date at the top of this page and, where appropriate, surface a notice inside the app. Continued use of the app after a change means you accept the updated policy.

10. Contact

Questions, concerns, deletion requests, or general feedback can be sent to privacy@phasmosync.com.