Nightfold is a social deduction game. Use it to play, and for nothing else: no automated access, no reselling, no interfering with a match or another player. Deceit inside a match is the game; harassment, hate and threats are not.
Nightfold is a social deduction game. You may use it to play, and for nothing else: no automated access, no reselling access, no interfering with a match or with another player. Concealment and misdirection inside a match are the game; harassment, hate, and threats are not, and the Code of Conduct governs them. Your account is yours alone. Matches are server-authoritative and the server decides what is valid. We may suspend an account that breaks these terms or the Code of Conduct. The game is provided as it is, without warranty, and may change between matches.
Where to write, what we store and why, where it lives, how long we keep it, and how to see or delete it.
Write to support@yat32.com about anything in this policy — it is the address for every question, request or complaint about Nightfold and your data.
We store the email address you sign in with, and your account record. If you sign in with Google or Apple, we store the user id the provider gives us and the email address it shares (Apple may give a relay address) — nothing else from the provider, and the name Apple offers is never stored. We store what you do inside a match — messages, votes, actions and reports — because the game cannot be played or moderated without it. When you allow notifications, we store the push token that delivers them. We also keep your notification and language preferences and the policy versions you accepted. The Case board you mark during a match lives on your phone and never leaves it.
Your in-match name is temporary and is never shown beside your account. The link between the two stays on the server.
We collect anonymous usage analytics through Google Firebase — which screens open, which kinds of action are taken and the app language, never your messages, votes, identity or email. When the app fails, a crash report goes to Google Firebase Crashlytics so the fault can be fixed — the stack trace, the device model, the operating-system and app versions, the app language and a Crashlytics installation id, never a message, a vote, your identity or your email. There is no advertising and no tracking across apps. The Usage analytics switch in Settings, under Privacy & safety, turns both usage analytics and crash reports off.
Your data lives on servers in the European Union (Supabase, Frankfurt). Google Firebase processes the analytics and the crash reports (Firebase Analytics and Crashlytics) and delivers Android notifications, Expo's push service relays notifications, and Apple delivers them on iOS. We never sell your data and never use it to advertise to you.
We keep your account data for as long as the account exists. A finished realm's record — the messages under veiled names, the votes and the outcomes — is kept so that the archive and moderation work. Notification rows are deleted after 30 days. Analytics follow Google's retention period of 14 months; crash reports are kept by Google for 90 days.
You can see what we hold at any time: Settings → Your data → Download a copy gives you one JSON file. You can delete your account in Settings → Your data → Delete account, or by emailing support@yat32.com from your sign-in address. Deletion removes your account, sign-in identities, email, preferences, push tokens, blocks and queued notifications at once. Messages, votes and reports already made inside a realm stay under the veiled name with no account behind them, so other players' games and the safety records survive. A seat in a realm still in play plays on as Autopilot. You must be 16 or older to use Nightfold.
When this policy changes, the version date shown in the app changes with it, and you are asked to accept it again.
Deceive inside the match — never the person. Play the identity, not the player.
Deceiving other players inside a match is the game. Everything below is not, and applies everywhere in Nightfold: no harassment; no hate speech; no threats; no sexual exploitation, and nothing sexual involving minors; no spam; no impersonating another player, a moderator, or the game; no doxxing or posting anyone's real-world information; no collusion arranged outside the game; no evading moderation with alternate accounts or filter tricks; and no using real-world information about a player as evidence inside a match. Play the identity, never the person. Reports go to human moderators, and breaking these rules costs you your account.