Privacy Policy — Supply Lines

← Bendigo Games

Supply Lines is made by Bendigo Games, an independent developer in Australia. This policy covers the iPhone app, identifier com.chan.games.supplylines. Contact: support@bendigogames.com.

There is no account, no advertising, no purchase of any kind, and nothing that identifies you. From version 1.0.1 the iPhone app reports anonymous usage statistics — battles and expeditions played, won and lost — and you can switch that off in Settings. Everything else the game knows, your campaign and your settings, stays on your phone.

What changed, and when

Until version 1.0.1 this app made no network requests at all, and this page said so. Version 1.0.1 adds an analytics component, described below, so that we can see where players stop in a nine-stage campaign and whether they come back — the questions that decide what gets built next. The previous policy promised that any such change would be posted here, with a new date, before the version that made it was released. This is that posting. Nothing else changed: there is still no account, still no advertising, nothing is sold or shared, and the new reporting can be turned off in one tap.

Anonymous usage statistics

The iPhone App Store version includes Google Analytics for Firebase. It reports, anonymously:

That the app was opened, and how long it was used for
That the first-play tutorial was finished
That an expedition started, and when it ended: whether it was won, how many of its stages were cleared, and how many doctrines were held
That a battle ended: whether it was part of an expedition or a skirmish, whether it was won, how many seconds it lasted, which stage it was, and how many sides fought
The app version, the device model, and the iOS version
A country or region, worked out by Google from a masked IP address. The app never asks iOS where you are and has no location permission
An app-instance identifier, which Firebase assigns to each installation. It identifies a copy of the app, not a person, and a reinstall produces a new one

That list is exhaustive: the game sends four kinds of event of its own, and the rest is Firebase's automatic session reporting. It is used to understand how many people play, roughly where in the world they are, whether they keep playing, and whether the campaign's difficulty is anywhere near right. It is not linked to your identity, it is not used to track you across other apps or websites, and it is never sold or shared for advertising.

How to turn it off

In the game, tap Settings at the foot of the title screen and switch off Share anonymous usage. Reporting stops immediately — not just the game's own events but the session reporting with them — and the choice is remembered on your device. Everything in the game keeps working exactly as before; nothing is withheld from you for turning it off.

What is not collected

To be specific rather than leave it to inference, the app does not collect any of the following:

Name, email address, phone number, or any other contact information
Precise location, or any location from your device's location services. The country figure described above is derived by Google from a masked IP address, and is the only geographic information that exists
The advertising identifier (IDFA). The app is built with the Firebase analytics component that excludes advertising-identifier support altogether, which is why the app never shows a tracking permission prompt
Photos, contacts, calendar entries, files, or any other device content
Crash reports or diagnostics — there is no crash-reporting service in the app
Purchase history — the game is free and contains no purchases
Anything you type — the game has no text entry anywhere in it

App Store ratings

Now and then the app may ask iOS to show Apple's standard rating sheet — after your third battle won, and after a completed expedition, at most twice a year. That sheet is drawn by iOS, and whatever you choose in it goes to Apple, not to us; the app is not told whether you rated, or what. From your third win a Rate Supply Lines link also appears on the title screen; it opens the App Store's own review page, and the same link appears on the page shown when you finish a campaign. To avoid asking twice, the app remembers on your device when it last asked and whether you have used that link.

Permissions it asks for

The app never shows you a permission dialogue. It requests no permission of any kind: no location, no camera, no microphone, no photos, no contacts, and no tracking prompt. If you are ever shown a permission dialogue in this game, something is wrong and we would like to hear about it.

What is stored on your device

The game keeps your own progress and settings on the phone, using the operating system's ordinary app-preferences storage (NSUserDefaults on iOS). That is the whole list:

The expedition in progress, if there is one: its seed, its stage, the doctrines you hold, and its running totals (time played, positions taken, commanders beaten) for the summary shown when it is finished
How many engagements you have won, how many expeditions you have completed, the deepest stage you have reached, and your last expedition's seed
The rest of your Stats page: engagements lost, skirmishes played and won, total time in battle, positions taken, commanders beaten, and your fastest completed expedition
Your skirmish setup, so the next one opens where you left it
Your sound, music, haptics, fog-of-war and zoom settings
Whether you have finished the tutorial
Your anonymous-usage choice, if you change it
For the rating prompt: when the app last asked, how many times this year, and whether you have used the Rate link

None of it identifies you and none of it is sent anywhere — it is not part of the usage statistics described above. We cannot read what is on your phone. Deleting the app deletes all of it. If you use your phone's own whole-device backup (iCloud Backup or a computer backup), iOS may include app preferences in it; that backup is made by your phone, held under your own account and governed by Apple's privacy policy rather than this one, and nothing in it is sent to us.

Third parties

There is no advertising, no social integration, no crash reporting, and no third-party software development kit that collects anything about you other than Google Analytics for Firebase, described above. Google processes that data on our behalf as our analytics provider; see Firebase's privacy information and Google's privacy policy. No data is sold, and none is shared for advertising.

The app is built with Flutter. Besides Firebase it includes these third-party packages, none of which collects or transmits data:

shared_preferences — a thin wrapper over the operating system's own local preference storage, described above
flutter_soloud and audio_session — the audio engine, and the setting that tells iOS this is a game with sound. They play through the speaker and do nothing else, and do not use the microphone
in_app_review — asks iOS to show Apple's rating sheet, or opens the App Store's review page, as described above. It has no network component of its own
share_plus — the Share button at the end of a campaign. It opens your phone's own share sheet with one line of text about your result and a link to this website; you choose where it goes, and your phone sends it. The game itself sends nothing and is not told what you chose

The game itself needs no connection at all: it is entirely playable in aeroplane mode, and nothing is withheld when it cannot report.

The free browser version on this website is a separate build. It contains no analytics and sends nothing from the game.

Children

The game is suitable for all ages. It has no text entry, no chat, no user-generated content and no purchases. It collects no personal information from anyone, including children under 13: the usage statistics described above are not personal information, carry no identifier tied to a person, and are never used for advertising or for any profile. On that basis the app complies with the Children's Online Privacy Protection Act (COPPA).

Your rights

Data-protection laws such as the GDPR and the CCPA give you the right to access, correct, delete, and know what is done with personal data held about you. We hold no personal data about you: the usage statistics are anonymous and carry no name, email, account or advertising identifier, so there is no record we could connect to you in order to produce it, correct it, or delete it. Nothing has been sold or disclosed to anyone. If you want the reporting to stop altogether, the switch described above does it immediately and without asking us. If you would like any of this confirmed in writing, email the address below.

Changes to this policy

If this policy ever changes — for example, if a future version of the app adds a feature that needs data — the revised policy will be posted on this page, with a new date, before that version is released.

Contact

Supply Lines is made by Bendigo Games. Questions about this policy, or about privacy in the app, can be sent to support@bendigogames.com.

Last updated: 23 September 2026