Attack 4 Privacy Policy
Last updated: October 29, 2026
Attack 4 ("the game", "we", "us") is an iPhone game made by Philip DiSanto (Philooch). This policy explains what information the game uses, why, and what choices you have. We've tried to keep it short and plain.
The short version: Attack 4 has no accounts, no sign-up and no email collection. Most of your data stays on your phone. If you play online, our game server keeps only what it needs to run matches and rankings. The game shows ads from Google AdMob, and Google may use your device's advertising identifier if you allow tracking.
1. Information that stays on your phone
The game saves these on your device only. They are never sent to us:
- Your settings (sound on/off, app style, last chosen game mode and computer difficulty, your power-up loadout).
- Your record against the computer (wins, losses, win %).
- Your chosen avatar. If you use your own photo as an avatar, you pick it with Apple's photo picker. The game only gets the one photo you choose, saves a small copy on your phone and does not upload it anywhere.
- A random install ID (see section 3) and a short-lived note about your last online match, so you can resume it if the app closes.
- Online match "tokens" (stored in the iOS Keychain) so you can rejoin a match in progress.
Deleting the app removes this data. (Keychain items can sometimes survive an app delete; they contain only match tokens, not personal information.)
2. Game Center
Attack 4 uses Apple Game Center for sign-in. You don't create an account with us. If you're signed in to Game Center on your iPhone, the game reads your Game Center nickname and a Game Center player ID that is specific to our games (Apple's "team player ID").
When you play online, the app sends Apple's signed proof of your Game Center identity to our server. The server checks it with Apple so nobody can pretend to be you, which keeps rankings fair. Game Center itself is governed by Apple's Privacy Policy.
If you aren't signed in, you can still play, including online, but those games don't count toward a rank.
3. Online play and our game server
Online matches (Ranked/Quick Match and Play a Friend) run on our server, hosted on Cloudflare Workers. Here's what it handles:
| What | Why | How long |
|---|---|---|
| The player name you choose (cleaned up and cut to 16 characters) | Shown to your opponent and, for ranked players, on the leaderboard | Match copies: up to about 1 hour. Leaderboard: see "Ranked ratings" |
| Your Game Center player ID (if signed in) | Verifying who you are, ranked ratings, the Creator badge | Kept with your rating (see below) |
| A random install ID (not linked to your name or Apple ID) | So Quick Match never pairs you with yourself | Only while you're searching for a match (up to 5 minutes) |
| Match data (room code, moves, seats, results) | Running the game and handling disconnects | Rooms are deleted about 1 hour after they finish, or 1 hour after creation if no one joins |
| Ranked ratings: Game Center player ID, your chosen name, rating, games played, wins/losses/draws, best rating | Ranks and the top‑50 leaderboard | Kept while the game is running, unless you ask us to delete it (section 7) |
| Ranked match results (a match ID, time, the pair of players, rating changes) | Counting each result once and limiting repeated games against the same opponent | Deleted after 30 days |
| Your IP address | Rate limiting, so nobody can spam the server | Kept only for the rate-limit window (about 1 minute), then erased |
| Server logs | Fixing bugs and keeping the service running. Logs record events like "room created" or "Game Center check failed", and the hosting platform may record basic request details such as IP address and time | Kept by Cloudflare for a few days under its standard log retention |
Your chosen name, rank and whether you're the game's creator may be shown to opponents and on the public leaderboard. Your Game Center player ID is never shown to other players.
Our server is provided by Cloudflare, Inc., which processes this data for us. See Cloudflare's Privacy Policy.
4. Ads (Google AdMob)
Attack 4 is free and shows full-screen (interstitial) ads from Google AdMob between games; it does not show banner ads. To show and measure ads, Google's ad software may collect information from your device, such as:
- your device's advertising identifier (IDFA), only if you allow tracking,
- your IP address and approximate location derived from it,
- device and app information (model, OS version, app version, language),
- ad interactions (views and taps) and diagnostics (crashes and performance of the ad software).
Your choices: - Tracking prompt (Apple ATT). The game asks if it may track you. If you say no, Google does not get your IDFA and you'll see less personalized ads. The game works the same either way. You can change this any time in iPhone Settings > Privacy & Security > Tracking. - Consent form (EEA, UK, Switzerland and other places where required). Google's consent form asks for your choice before personalized ads. When it's required, you can change your choice later from Privacy choices in the game's settings.
Google's use of this data is covered by Google's Privacy Policy and How Google uses information from apps that use its services. We don't receive your IDFA or personal data from Google; we only see overall ad reports.
5. What we don't do
- No accounts, passwords or email addresses.
- No contacts, precise location, microphone or camera access.
- We don't sell your personal information for money. Under some US state laws, letting ad partners use tracking data for personalized ads can count as "sharing." You can opt out by denying the tracking prompt, or by turning on Limit Ad Tracking / disabling tracking in iOS settings.
- We don't use our own analytics or crash-reporting tools. Apple may share crash reports with us if you've turned that on in iOS settings.
6. Children
Attack 4 is not directed at children under 13, and we don't knowingly collect personal information from them. If you think a child under 13 has given us information (for example, a name on the leaderboard), contact us and we'll delete it.
7. Your rights and deleting your data
Depending on where you live (for example under the GDPR in Europe or the CCPA in California), you may have the right to access, correct or delete your personal information, object to or restrict its use, and not be treated differently for using these rights.
- Data on your phone: delete the app.
- Ranked rating and leaderboard entry: email us at philooch@gmail.com with your in-game name and roughly when you last played ranked. Because we have no accounts, we may ask you to play one signed-in online match so we can match your request to your Game Center ID. We'll respond within 30 days (45 for California requests).
- Ads data: use the tracking and Privacy choices settings above, or contact Google.
For people in Europe: we use your data to provide the game you asked for (online play and ranking), for our legitimate interests (security, rate limiting, fair play and fixing bugs), and, for personalized ads, based on your consent. You may complain to your local data protection authority.
Our server and service providers may process data in the United States and other countries.
8. Changes
If we change this policy, we'll update the date at the top. Big changes will be noted in the app or its App Store page.
9. Contact
Philip DiSanto (Philooch) Email: philooch@gmail.com