Privacy policy.

Who we are

ElevationArk LLC ("ElevationArk", "we", "us") makes the games, apps and products listed below. We are the company responsible for the information described in this policy.

Contact: support@elevationark.com · Based in Denver, Colorado, United States

What this policy covers

Where a product has its own, more detailed policy or notes, those add detail to this policy. If they disagree, the product's own text applies to that product.

Our brand affiliates 303CardLab and GhostHalo run their own channels and shops. Their own policies, and the policies of Instagram and their shop platforms, apply there.

The short version

• You can play our games as a guest, without giving us your name or email.
• Our games have no advertising, no advertising IDs, and no analytics or tracking tools from other companies.
• We do not sell or rent personal information, and we don't share it for targeted advertising.
• Players under 13 get a more limited experience: no email accounts and less data.
• You can delete your account in each game, and an ElevationArk account on its account page. See Delete an account.
• This website sets no cookies and runs no analytics tools. Visits from our own ads are counted only as daily totals per ad.

Our games (Sir Flappicus and Survoxel Runner)

The details differ per game. The product notes list everything. In general, the games handle:

The games do not ask for your location, contacts, photos, camera or microphone. We never receive card or bank details: Apple and Google handle payments.

Signing in with Google or Apple

Where a game offers Continue with Google or Sign in with Apple (players 13 and older; Google on Android, both on iPhone), Firebase Authentication receives from Google or Apple:

• an account ID that Google or Apple creates for the game, and your email address;
• from Google, also the name and profile picture on your Google account. We don't show or use them;
• from Apple, no name. If you choose Hide My Email, we get only an Apple private relay address, which forwards to you.

We never see your Google or Apple password. We use this only to sign you in and recover your progress, never for advertising or to contact you about anything else. The sign-in stays linked until you delete your game account; the games have no separate unlink option. Deleting the account (see Delete an account) removes the sign-in and its information from our systems, and in Sir Flappicus also revokes the game's Sign in with Apple access. You can also remove the game's access at any time in your Google Account (Security › Your connections to third-party apps & services) or your Apple Account settings (Sign in with Apple); that stops future sign-ins but doesn't delete your game account.

Games in development (Survoxel Utopia and Critimos)

Survoxel Utopia and Critimos are not released yet. They collect no personal information from the public, and this website only shows pictures and descriptions of them. Before either game is released, we will add what it collects and why to this policy, along with its own notes.

SmrtSites

SmrtSites needs more information than our games because you create content with it. In summary, it handles your account email and sign-in session, what you create (descriptions, uploads, sites and reels), billing records (card details go straight to Stripe), basic server logs, and cookie-free daily visit totals for published sites. To generate designs it sends your descriptions, pictures and site content to AI providers (Anthropic, and OpenAI for AI pictures). The full list, including domain registration and the affiliate program, is in the SmrtSites privacy policy. SmrtSites accounts are for people aged 16 and older.

This website (elevationark.com)

• No cookies, analytics tools or ads on the site. We don't track visitors. We count visits as daily totals only (the page, the site you came from, phone / tablet / computer), with nothing that identifies you.
• Our ads. When you arrive through one of our ads, its link carries a campaign tag (for example google / voxel-search). Your browser keeps the tag for that tab only, and we add 1 to that ad's daily counts: the visit, the type of device (phone, tablet or computer, read from your browser's user-agent and not stored), and each later step in that tab (opening a second page, adding a pack, starting checkout). If you buy voxel packs, the tag goes with the order to Stripe so we can count sales per ad. The counts hold no IP address, ID or other information about you.
• Hosting. The site is hosted on Google Firebase Hosting. Like every web host, Google receives your IP address, browser details and the pages you request, and keeps standard server logs for a limited time under its own retention rules. We don't use them to identify visitors.
• Page content. The home page may load its project list from Google Cloud Firestore. This sends a request (with your IP address) to Google, but no personal information about you.
• Brand images. The GhostHalo logo is loaded from GhostHalo's own shop server, which receives your IP address when the image loads.
• Voxel pack purchases. See Voxel Starter Kit purchases below.
• Email. If you email us, we receive your email address and message, through Google Workspace.
• Links. Links to other sites (SmrtSites, Instagram, GhostHalo) follow those sites' own policies.

ElevationArk account

An ElevationArk account is optional. It lets you sign in once across our products, join our email list, get a 10% discount on your first voxel pack order and tell our games and SmrtSites that they belong to the same person. It runs on Amazon Web Services (sign-in through Amazon Cognito; records in our own database) in the United States.

• What we store: an account ID, your email address and whether it is verified, how you signed in (Google, Apple or an emailed link; with Google we may also receive your name and picture, which we do not keep), the time you created the account, your marketing choice and its history (when you asked, when you confirmed, when you withdrew), which products you linked and when, and any discount code we issued and whether it was used. Sign-in sessions live only in your browser tab and end when you close it.
• Age: accounts are for people aged 13 and over. You confirm this when you sign up; we do not knowingly keep accounts for younger children and delete any we find.
• Emails and consent: we only send news (new packs, games, discounts) if you ticked the box and confirmed by clicking the link in the email we send (double opt-in). Every email has an unsubscribe link, and the switch on your account page does the same; your choice takes effect within minutes. Emails about your account itself (sign-in links, confirmations, deletion notices) are sent regardless. Our email provider is Resend, which processes your address and delivery events (delivered, bounced, complained) for us.
• Linking products: a game or SmrtSites learns only your account ID (and, for SmrtSites, your email) so it can recognise you. Game progress and SmrtSites content stay inside each product and are never copied to the account.
• Discounts: a single-use 10% discount code is created in Stripe for your account and applied automatically at checkout on your first voxel pack order; we record when it was used so it can't be used twice.
• Deletion: Delete my account on the account page removes everything above straight away, except a one-way hash of your email kept so a deleted address is not emailed again and so one person can't claim the same first-order discount twice. Deleting the account does not delete your game accounts or SmrtSites account (see Delete an account).

Voxel Starter Kit purchases

The voxel packs are sold on this website. Checkout runs on Stripe's own pages and is sold through Link, Stripe's checkout brand. Stripe (through Link) is the merchant of record for the payment: it collects your payment details, email address and billing country, handles sales tax and payment support, and uses that information under Stripe's privacy policy. Stripe shares the order details with us so we can deliver your files. We never see your card details.

After you pay, our download page (run on Amazon Web Services) asks Stripe to confirm the order and shows private download links. For each order we keep only: the order reference, which option and packs you bought, the amount and currency, whether it was a test or real payment, when the download page was used, and whether the order was refunded or disputed. We use this to deliver your files, answer support questions, handle refunds and respond to payment disputes. Our download page's logs don't contain your name, email or IP address. If you email us about an order, we may look it up in Stripe using the email address you give us.

Your download link by email. Shortly after you pay, we email your download page's link once to the address you gave Stripe at checkout, whether or not the page opened. If you lose it, you can enter an email address on the Voxel Starter Kit page: we look up paid orders for that address in Stripe and, if there are any, email their links to that same address only. If you are signed in to an ElevationArk account, your account page asks Stripe for orders made with your account's verified email and lists them there. In each case we read the address from Stripe or from your request when needed and don't store it; our records only note that an order's email was sent. To stop repeated requests we keep a one-way hash of the address you typed for a day. These emails are sent through Amazon Simple Email Service (Amazon Web Services, United States).

How we use information

Only to run our products and their online features; to save and restore progress; to confirm purchases, deliver items and handle refunds; to prevent fraud, cheating and abuse; to answer support requests; to improve our products using totals; to count, in totals, the visits and sales each of our own ads brings; and to meet legal obligations. We do not use information for advertising or profiling, and we never use children's information for anything except running, saving and securing the game.

Legal bases (EU and UK)

If you are in the European Economic Area or the United Kingdom, we rely on these legal bases:

• Providing what you asked for (performance of a contract): running the games and their saves, accounts, SmrtSites, delivering voxel packs, purchases and refunds, and answering support requests.
• Legitimate interests: keeping our products secure and fair (preventing fraud, cheating and abuse), keeping server logs, and understanding in totals whether our products work well. We use only the minimum information, never for advertising, and you can object at any time.
• Legal obligations: keeping purchase and tax records and answering lawful requests.
• Consent: only where we ask for it, for example optional crash reports and news emails from your ElevationArk account. You can withdraw consent at any time.

Who helps us (service providers)

We share information only with these providers, only so they can run our products for us, and never for their own advertising:

• Google (Firebase, Google Cloud, Firebase Hosting, Google Workspace): game accounts, cloud saves, server functions, security checks, logs, backups, this website and our support email.
• Apple and Google Play: in-app purchases, refunds and device security checks, under their own privacy policies.
• Stripe (including Link): checkout for the voxel packs (as merchant of record), payments for SmrtSites, and payouts to affiliates (creators who join an affiliate program). Stripe collects payment, identity and bank details directly; we never see card numbers.
• Amazon Web Services: the voxel pack download page, file storage, order records and order emails (Amazon Simple Email Service), and the ElevationArk account service (sign-in through Amazon Cognito, account records) (United States).
• Resend: sending account and newsletter emails for ElevationArk accounts, and delivery events (United States).
• Anthropic and OpenAI: AI generation inside SmrtSites only.
• Other SmrtSites providers (email delivery, domain registration, hosting) are listed in its own policy.

We may also disclose information if the law requires it, or to protect players, users and our products from fraud or abuse. If ElevationArk or a product is ever sold or merged, information may transfer to the new owner under this policy.

Children

Our games are made for a general, mixed-age audience. When a game first starts it asks the player's age:

• Players under 13 play with an anonymous account only and cannot add an email address or sign in with Google or Apple. (Sir Flappicus uses the higher local age of digital consent where there is one.)
• In Sir Flappicus, children also cannot enter invite codes, never send crash reports or stage statistics, and see a parent check before links that leave the game. Their progress is saved in the cloud under the anonymous account ID so it isn't lost.
• In Survoxel Runner, children have no cloud save. Online, the game keeps only the random account ID and any app-store purchases.
• For children we handle only what the game needs to run, save and stay secure. This is the "support for internal operations" that US children's privacy law (COPPA) allows. We never use it for advertising or profiling.

Purchases are handled by Apple or Google, where parents can require approval (Ask to Buy or Family Link). SmrtSites is not for children: accounts are for people 16 and older.

We keep children's information only as long as the game needs it for these purposes (see How long we keep information), then delete it.

Parents: you can ask us to review or delete your child's information, or stop using it, at any time. Use the game's delete option (see Delete an account) or email support@elevationark.com. Please don't send identity documents.

How long we keep information

Each product's notes give the exact periods for its other records.

Your choices and rights

• Delete your account: in each game's settings, or by email. See Delete an account.
• Access, correct or delete your information, or object to how we use it: email support@elevationark.com. We'll reply within 30 days, and usually much sooner.
• Depending on where you live (for example California, the EU or the UK), you may have further rights, including to know what we hold, to get a copy, and to complain to your local data protection authority. We honor these requests for everyone and won't treat you differently for using them.

Security

Information travels encrypted (HTTPS). Our databases are access-controlled, so each player can read only their own data and only our server code can change accounts, purchases and saves. We check rewards and purchases on the server, limit staff access and keep backups. We keep a written information security program, including for children's information, and review our safeguards regularly. No system is perfectly secure.

Where information is processed

We are based in the United States, and our Google Firebase, Google Cloud and Amazon Web Services systems run in the United States. If you use our products from elsewhere, your information is processed in the United States. For information from the EEA, the UK or Switzerland, these transfers rely on the safeguards our providers offer, such as the European Commission's Standard Contractual Clauses (with the UK addendum) in their data processing terms, or their certification under the EU-US Data Privacy Framework where it applies.

Changes to this policy

If we change this policy, we'll update the date at the top. For important changes, especially anything affecting children, we'll tell you in the product before the change applies.

Contact

ElevationArk LLC · Denver, Colorado, United States
Email: support@elevationark.com