Privacy Policy — GlitchKitty: Firewall Forge
Publisher: GlitchKittyGames Contact: support@glitchkittygames.com Applies to: GlitchKitty: Firewall Forge, package com.glitchkitty.firewallforge, version 2.1.0 (versionCode 8) Last updated: 16 August 2026
The short version
This game collects nothing. It has no servers, no accounts, no adverts, no analytics and nothing to buy. It does not need an internet connection and it does not use one. Your progress is saved on your own device and never leaves it.
What we collect
Nothing at all.
Google Play defines collection as transmitting data off a user's device. This app transmits nothing. It has no backend, no telemetry endpoint, no crash reporter and no advertising or analytics SDK of any kind. There is no data for us to see, store, sell, share or lose, because none of it ever reaches us.
We could not identify you, contact you, or single out your device even if we wanted to. We hold no records about you whatsoever.
What the game stores on your device
The game saves your progress in the app's own private storage, inside the Android WebView's local storage area. That includes:
- Game progress: level, chapter, missions finished, bosses beaten, statistics
- Your things: items owned, worn, upgraded or scrapped
- Currencies earned by playing: Coins, Gems, Scrap, Warden Shards
- Your rooftop base: which facilities you have built and decorated
- Settings: sound, reduced motion, larger text, stronger colours, picture quality
- An in-progress run, so a mission can survive the app closing mid-way
This data stays in the app's private sandbox. Other apps cannot read it. It is never uploaded, and there is no copy of it anywhere but your device.
Cloud backup is switched off
Many Android apps allow the system to copy their data into your Google Drive backup. This one does not. The app ships backup rules that exclude every file from cloud backup on every Android version, so your save is not in your Google account.
One local exception is deliberate: if you move to a new phone and use Android's direct device-to-device transfer, your save comes with you. That is a copy between two devices you own — nothing is uploaded to anyone during it.
Starting again, and uninstalling
Reset inside the game. Settings → Start again erases your progress on this device: your currencies, your items, your rooms and every mission you have finished. The game asks you to confirm first, and the action cannot be undone. Your accessibility settings are kept, so you do not have to find them again.
That reset clears the current game's data. It deliberately does not reach into storage written by older versions of the app, because that data may be your only copy of something and it is not this version's to delete.
Uninstalling. Removing the app deletes its private storage, including your save. Because there is no cloud backup, this is permanent — reinstalling starts a new game.
Clearing storage. Android Settings → Apps → GlitchKitty → Storage → Clear storage has the same effect.
Since we hold no data about you, there is nothing for you to ask us to export, correct or delete. Everything is in your hands, on your device.
Permissions
The app declares exactly one Android permission:
- INTERNET — required by the Android System WebView component the game runs inside. The game itself makes no network requests. Every image, model, sound and line of code is loaded from files packaged inside the app. You can verify this by playing the entire game in aeroplane mode; nothing is missing.
The app requests no access to location, camera, microphone, contacts, photos, files, phone state, or your advertising identifier. It declares no notifications permission and cannot send you notifications.
No adverts, no purchases, no accounts
- No advertising. No ad SDK is included. No advertising identifier is read. There are no adverts of any kind, rewarded or otherwise.
- No purchases. There is no billing library and nothing in the app costs money. The in-game Shop trades Gems that you earn by playing for cat looks and roof decorations. No Gem can be bought.
- No accounts. There is no sign-in, no profile and no account to create or delete. The game never asks who you are.
Children
The game is rated for ages 13 and over. It is not directed at children, and because it collects no data at all, it collects no data from children or from anyone else, at any age.
Security
There is no transmission to secure and no server to breach. Your save lives in the app's private storage, protected by Android's normal app sandbox and by your device's own encryption. We make no claims about transport security because the app performs no transport.
Changes to this policy
If a future version collects anything, this policy will be updated before that version is published, and the Play Data safety declaration will be updated in the same release. The version this policy applies to is stated at the top.
Contact
Questions about this policy or the game: support@glitchkittygames.com
How these claims were verified
Every statement above was checked against the actual release binary on 16 August 2026, not against previous documentation:
| Claim | Verified against | Result |
|---|---|---|
| No ads / billing / analytics / accounts | Gradle releaseRuntimeClasspath, 226 artifacts | 0 matches for admob, play-services-ads, user-messaging, billing, firebase, play-services-measurement, play-services-auth, crashlytics, analytics |
| One permission only | Merged release manifest | INTERNET plus Capacitor's own signature-level receiver permission |
| No notifications | Merged release manifest | no POST_NOTIFICATIONS |
| No advertising ID | Merged release manifest | no AD_ID |
| No network use | scripts/verify-production-reachability.mjs | no fetch, XMLHttpRequest, WebSocket, sendBeacon or EventSource reachable from src/main.tsx; no remote URL literal |
| Cloud backup disabled | res/xml/data_extraction_rules.xml, backup_rules.xml | cloud-backup excludes every domain; device-transfer includes the save only |
| Cleartext traffic disabled | Merged release manifest | android:usesCleartextTraffic="false" |
| Reset behaviour | src/tests/resetProgress.test.ts | 6 tests, including that migration cannot restore erased progress and that legacy keys are never deleted |