Privacy

Last updated: November 2, 2026

Controller

Jonas Kirchner
Email: support@fortylife.app

Data on your device

The app stores the following in a database on your device:

• player profiles with the name and colour you enter,
• saved commanders,
• games with life totals, turns and turn times,
• your settings,
• a random identifier for this device in the keychain, so other devices can recognise it in a shared game.

This data does not leave your device, except in multi-device mode (see below) or in a device backup you set up yourself, for example in iCloud. You delete it by deleting games in the history or by removing the app.

Multi-device mode

When you open a game for other devices or join one, the devices connect directly over the local network. There is no server in between. They exchange the identifier, name and colour of the player profiles, the commanders and the course of the game. Device names are not transmitted.

The connection is encrypted, and only someone who knows the game’s code can join. Every participating device keeps a copy of the game, also after it ends. The device that opens the game additionally stores the identifiers of the devices that joined, in order to assign seats.

For this, the app asks for access to the local network. Without that permission everything works except multi-device mode.

Camera

The app uses the camera only to scan a game’s QR code. The image is neither stored nor transmitted.

Scryfall

When you search for a commander, the app queries the Scryfall card database (Scryfall, LLC, USA) and downloads the card image. Like any request on the internet, this gives Scryfall your IP address and the search term. The app does not send any profile or game data to Scryfall. Images are stored on the device and downloaded only once.

The legal basis is my legitimate interest in offering the commander search (Art. 6(1)(f) GDPR). Data may be transferred to the USA in the process. See Scryfall’s privacy policy for details.

This website

The website fortylife.app is hosted on Cloudflare Pages (Cloudflare, Inc., USA). When you visit it, Cloudflare processes your IP address and technical details such as browser and time in order to deliver the site and protect it from attacks. The website sets no cookies, uses no analytics and loads no content from other providers.

The legal basis is the legitimate interest in delivering the website securely (Art. 6(1)(f) GDPR). Cloudflare is certified under the EU-US Data Privacy Framework. See Cloudflare’s privacy policy for details.

Email

If you write to support@fortylife.app, I use your address and message only to reply to you. The emails are stored with Apple iCloud. I delete them once the request is resolved and no retention obligation applies (Art. 6(1)(b) and (f) GDPR).

Your rights

You have the right to access, rectification, erasure and restriction of processing, to data portability and to object. To exercise them, write to support@fortylife.app. You can also lodge a complaint with a data protection supervisory authority.

Data that exists only on your device or on your fellow players’ devices is beyond my reach: I can neither see nor delete it. It is solely in the hands of each device’s owner.

Changes

A future version is planned to let you upload games and stats to a server, for example to see them on all your devices. This will only happen with your consent in the app, and this policy will be updated beforehand.