Vending Empire is a game provided by sk8.digital. Contact us at play@sk8.digital.
Information we handle
Account information. To create and use an account, you provide an email address and password. We store the email address, a one-way password hash, authentication/session metadata and an internal account ID. We use this information to create, authenticate, secure and manage your account. We do not store your password in readable form.
Game information. We store the game state needed to run Vending Empire, including virtual balance, level and XP, owned vending machines and their slots/stock/features, sale history, warehouse inventory, achievements and a ledger of virtual game transactions. Vending Empire currently has no in-app purchases or billing and does not collect payment-card or real-money purchase data.
Technical information. When the app connects to our service, ordinary network and application logs can include an IP address, browser/app request information, request time/path/status, a request ID, performance timing and server errors. We use this information to deliver and secure the service and troubleshoot faults. Email, password and token parameters are filtered from application logs.
Map requests. The app loads game-map styles and tiles directly from OpenFreeMap. Those HTTPS requests can expose ordinary network information such as IP address, browser/operating-system information, referrer/time and the game-map tiles requested. The map coordinates are fixed game/catalog locations, not your device's physical location. The app does not request Android location permission.
If you choose to email play@sk8.digital, your email and mailbox providers process the sender address and message so we can reply or handle a deletion request. Do not send us your password, identity documents, payment information or sensitive game data.
How we use and disclose information
We use account and game information only to authenticate you, operate Vending Empire, preserve game progress, secure the service, process account deletion and diagnose operational faults.
We share ordinary network and traffic information with Cloudflare to deliver and protect the service. Cloudflare's current policy says it may process End User IP, routing/configuration and traffic data to provide, operate, maintain, improve and protect its services. OpenFreeMap processes direct style/tile requests to render the game map. We do not use these providers for advertising. Their current privacy information is available at:
- Cloudflare: https://www.cloudflare.com/privacypolicy/
- OpenFreeMap: https://openfreemap.org/privacy/
OpenFreeMap currently states that it uses no cookies/tracking, does not keep IP addresses in regular server logs, keeps anonymous browser/referrer/time/operating-system logs, and may keep incident-only IP logs for no more than 30 days. Provider practices can change, so we review them before material app or Play declarations.
The current app contains no advertising SDK, no analytics SDK and no IAP/billing SDK. We do use bounded first-party server diagnostics as described above. We do not collect contacts, photos, audio, files, precise/approximate device location, advertising IDs or a list of installed apps.
Cookies and on-device data
The app's WebView stores a necessary authentication cookie and ordinary page/map cache on the device. We do not use an analytics or advertising cookie. The Android app disables Android backup of its app data. Successful account deletion invalidates the deleted account's server session; uninstalling the app or clearing its app data removes local WebView data under Android's controls.
Retention and deletion
We keep the live account and game state while the account exists. Reset-token metadata expires after six hours; the current remembered-login period is up to two weeks. These authentication rows are also removed when the account is deleted.
A successful in-app deletion removes the live player account, authentication/reset data and associated game graph in one operation. Restricted database backups may continue to contain the former rows until the fourteenth daily backup rotation. Backups are retained only for controlled recovery and must not be returned to service unless later account deletions can be re-applied before the service starts. This is an operator rule, not an automated replay fence.
Application and supporting-service logs use one rolling file per running container, capped at 100 MB; the local request proxy uses one 10 MB rolling log. Older entries are discarded when the applicable cap is reached, and a log ends with its container. The lifetime of an individual entry therefore depends on traffic and container lifetime; we do not claim a fixed number of days. Cloudflare and OpenFreeMap control their own disclosed network/security-record retention.
Delete your account
While signed in, open Profile → Privacy & account, choose Continue, then choose Delete account. This permanently deletes the live player account and associated Vending Empire game data, signs the account out and allows the same email to create a new empty account. It cannot be undone.
If you cannot sign in, email play@sk8.digital from the account email address and ask us to delete the account. We may ask for non-sensitive information needed to verify control of the account. Never send a password, identity document, payment information or sensitive game data. After verification, we perform the same live-account deletion. The backup and log limits above still apply.
Children
Vending Empire is intended for people aged 13 and older and is not designed for children under 13. We do not ask for a date of birth and the current app has no age-verification system. If you believe a child under 13 has provided account information, contact play@sk8.digital so we can review and delete the account as appropriate. This statement does not invent country-specific consent or legal guarantees.
Security and changes
We use HTTPS for app/provider network transfers, password hashing, restricted operator access and the deletion controls described above. No system can guarantee absolute security.
If our data practices change, we will update this policy and its effective date. Questions or deletion requests can be sent to play@sk8.digital.