Legal

Privacy Policy

Last updated: October 25, 2026

This policy explains what data the game Cyber Exodus (iOS, macOS, Windows) and this website cyberexodusgame.com collect, why, and what choices you have. It covers local single-player play, in-app purchases and this website.

Who we are

Cyber Exodus is developed by Yevhen Kharytonenko, an independent developer based in the European Union who publishes under the name YevhenTech (yevhentech.com). Yevhen Kharytonenko is the data controller for the processing described here. Contact: hello@yevhentech.com.

The game

Single-player and local saves

Cyber Exodus is a single-player game. It needs no account or sign-in and offers no online play, chat or other way to exchange data with other players. Your progress, settings and purchase status are stored locally on your device and may be included in backups you enable. Saves are not uploaded to us.

Support requests

If you send us an email, log, screenshot or recording, we receive whatever information it contains and use it to investigate your report. Review attachments before sending them. We keep support correspondence while needed to resolve the issue and any related follow-up; if a legal obligation or dispute requires further retention, we restrict use to that purpose. You can request deletion using the contact below.

No advertising or tracking

The game contains no ads and no advertising SDKs. It does not access the Apple advertising identifier (IDFA), does not ask for App Tracking Transparency permission and does not track you across other companies' apps or websites.

In-app purchases (iPhone, iPad and Mac App Store)

On iPhone and iPad the desert chapter is free and the rest of the campaign is unlocked with a one-time in-app purchase. Payments are processed by Apple; we never see your payment details, name or Apple ID.

To validate purchases, unlock them and let you restore them on your devices, the game uses RevenueCat (RevenueCat, Inc.) as our service provider. When the game starts, when you buy and when you restore, the RevenueCat SDK sends RevenueCat:

• a random, anonymous app user ID created by the game (it is not your name, email or Apple ID);
• App Store transaction information: the product, purchase date, price, currency and storefront country;
• basic technical information: app version, operating-system version, device type and language/locale.

We use this data to give you access to what you bought, to restore purchases and to see aggregated sales figures. We do not link it to your identity, use it for advertising or sell it. Legal basis: performance of the contract (GDPR Art. 6(1)(b)) for validating and restoring purchases, and our legitimate interest in understanding sales (Art. 6(1)(f)) for aggregated statistics. RevenueCat acts under its own privacy policy.

The Mac and Windows versions sold on other stores are paid up front; those stores process the purchase and we receive only aggregated sales reports.

Crash and diagnostics data

If you opted in to share diagnostics with Apple, Apple may share anonymised crash reports with us. We use them only to fix bugs.

This website

This site sets no cookies and has no advertising or cross-site tracking. Fonts and media are served from our own domain.

The soundtrack video on the home page is hosted on YouTube. Nothing is loaded from YouTube until you press play; the player then loads from youtube-nocookie.com (YouTube's privacy-enhanced mode) and Google processes your data under Google's privacy policy.

We use Vercel Web Analytics to count page views and see which pages and referrers bring visitors. It does not use cookies. Each visit is grouped by a hash of the request that changes every day, so we cannot recognise you across days or link visits to you. We see aggregated data only: page, referrer, country, browser, operating system and device type. Legal basis: our legitimate interest in understanding how the site is used (GDPR Art. 6(1)(f)). See Vercel's Web Analytics privacy notes.

Our hosting provider, Vercel Inc., processes technical request data (such as IP address, browser user agent and time of request) in server logs to deliver the site and keep it secure (legitimate interest, GDPR Art. 6(1)(f)). See Vercel's privacy policy.

If you email us (for example to join early access), we use your email address only to reply and, if you asked, to tell you when the game launches. We delete it on request.

Children

Cyber Exodus is not directed at children under 13 and we do not knowingly collect personal data from them.

Your rights

Under the GDPR and similar laws you can ask to access, correct or delete your data, object to or restrict processing, withdraw consent at any time where processing relies on consent, and request data portability where applicable. Write to hello@yevhentech.com for privacy questions or requests concerning Cyber Exodus. Tell us which platform your request concerns; we may need to verify that the request is yours. Do not send passwords. We will address data under our control and help direct requests concerning a provider's own records to that provider. You can also lodge a complaint with your local data protection authority.

For deletion of data under our control, email us with the subject “Cyber Exodus data deletion” and enough information to identify your purchase or support correspondence. We will verify the request, identify the records under our control, and delete them unless an applicable exception requires retention; in that case we will explain the reason. We cannot delete another company's independently controlled records.

Retention of other data

Local single-player data: progress, settings and purchase status remain on your device until removed or overwritten. Backups you enable are separate copies and must be managed separately.

Purchase data: purchase records processed through RevenueCat are kept for as long as you may need to restore your purchases and as required by tax and accounting rules. You can ask us to delete the records under our control at any time.

Website data: the site integrations described above send technical and event data to their respective providers when used. Our website has no separate visitor-profile database. Provider-side retention is described in the linked privacy notices; this policy does not set their retention periods.

Email: we retain support correspondence according to the criteria above. If you request launch updates, we retain your contact details for that requested mailing until you withdraw the request or the mailing is no longer needed. To stop updates or request deletion, email hello@yevhentech.com.

International transfers

Our use of hosting, purchase-validation and email services may involve sending data outside your country, including outside the EEA. Transfers for which we are responsible must use an applicable legal mechanism, such as an adequacy decision or Standard Contractual Clauses. Contact us for information about safeguards applicable to our processing. For a provider's independent processing, consult its linked privacy notice.

Changes

We will update this page when the game or its services change, and update the date at the top.