Privacy Policy
Neverstill has no account and no sign-in. Since version 1.6 the game has a small server of its own, for the weekly league, the day's longest runs, the season calendar and for learning which parts of the game bring people back. It knows your device only by a random number the game makes up, and one switch in settings stops it and deletes what it holds. Most of the advertising in the game is fiction, built into the app. Besides the game's own server, three things send anything at all: buying something, watching one of the real adverts if you ask for it, and, if you allow it, telling TikTok and Meta whether you installed the game after seeing an advert for it. Each one is described below.
Who we are
Neverstill is published by mainichi digital, a sole trader established in Belgium. We are the data controller under the EU General Data Protection Regulation. Contact us at support@mainichi.digital, and we will give you our registered details on request.
What stays on your device
Your save. Your depot bonds, unlocked ranks, liveries, orders, streak and season progress, and your sound and screen-shake preferences are stored locally on your device using the app's own storage, and deleting the app deletes them.
No score, no wave number, no route and no session length is ever sent to an advertiser, or to anyone but the game's own server described next.
The game's own server
The game talks to one server that we run ourselves, at
neverstill-api.fly.dev, hosted by Fly.io in the United States. No
analytics company, advertising network or data broker is involved, and nothing
it holds is sold or shared.
- An install id. On first launch the game makes up a random number and keeps it on your device. It is not your advertising identifier, your device's vendor identifier, your Apple Account, your Game Center identity or any purchase identifier, and it is never sent alongside any of them. Deleting the app makes a new one.
- With every launch: the app's version, your device's language setting and time-zone offset, whether you own the Line Pass, and whether this is the first launch.
- What happens in the game, with the time it happened: when the game is opened and when it is put away; which lessons you have finished; that a run started or ended, how far it got, what ended it, and whether it set off from a terminus you had reached; whether you opened the depot, the paint shop or the board of orders, and what you fitted or booked in the depot, or painted, for how many bonds; which orders you filled, what you claimed, when you shipped the yard and what a season paid as it closed; whether you played the week's special; whether you asked for reminders; and whether you looked at or bought something, watched an advert or took a Line Pass reward in its place (the names only — never a receipt, a price paid or a payment detail).
- The league and the day's board: a callsign the game makes up for you (a railway name and a number), your season miles for the week and your longest run of the day. The callsign and the score are shown to the other players in your league group of up to thirty, and the best fifty runs of each day are shown to everyone.
The server does not store your IP address (it is used for a moment to stop the server being flooded, then forgotten), any device or advertising identifier, your name, email or account, your location, or any purchase receipt.
Turning it off. In settings (the gear in the corner), Online switches it off. The game stops sending anything to its server, and everything the server holds for your install is deleted — at that moment, or, if you are offline when you switch it off, the next time the game can reach its server. Backups age out within five days. If you switch it back on, the game starts again under a new install id; nothing from before is joined back up. The whole game, apart from the league tab, works with it off.
What else leaves your device
Three things, and only these: a purchase of the Line Pass, a livery or a season ticket, a sponsor video if you ask for one, and a measurement of whether our own advertising worked. That last one sits behind a permission prompt you can refuse.
If you buy the Line Pass or a livery
- Apple processes the payment. We never see your card details, your name, your email address or your Apple Account. Apple's own privacy policy governs that transaction.
- RevenueCat, our in-app purchase provider, records that a purchase happened so the app can answer the question "does this device own the Line Pass, or this livery?" That has to work after a reinstall and on a new phone. This is the purchase history data type in the App Store privacy label.
The app does not send RevenueCat a name, an email address or any identifier you have given us, because it never asks you for one. RevenueCat generates its own anonymous identifier for the device. Nothing here is linked to your identity.
If you watch a sponsor video
A board on the station platform, and two vehicles that come past out on the line, sometimes carry a pitch. Nothing happens unless you press one, and pressing one only opens an offer you can decline. If you accept it:
- Google AdMob serves the video. To fetch and count it, Google receives your device's IP address, a device identifier and basic technical information about the app and the device. Google's advertising privacy policy governs that.
- The request is marked non-personalised. The advert is not chosen from a profile of you, and your advertising identifier is not used to select it.
- RevenueCat confirms the video was actually watched, so the reward cannot be faked, and records that an advert was shown.
If you are in the European Economic Area, the United Kingdom or Switzerland, the first time you press one of them the app asks for your consent to the storage Google needs even for a non-personalised advert. Nothing is requested from Google until you answer. You can change that answer at any time: tap the gear button in the corner, then Privacy options. Withdrawing it discards any advert already loaded rather than showing it.
The Line Pass removes the sponsor board along with the rest of the advertising, and with it every request described here.
If you allow us to measure our advertising
We advertise the game on TikTok, on Facebook and on Instagram. To know whether that is worth doing, the app carries TikTok's App Events SDK and Meta's SDK. Each tells its own company that an install, a launch, a return on the following day, or a purchase happened on this device, so they can match it against an advert you may have seen. They report those four things and nothing else. Neither one ever sees a score, a run or anything you do inside the game, and neither shows you adverts.
Shortly after the game first opens, iOS asks you "Allow Neverstill to track your activity across other companies' apps and websites?" That prompt is about exactly this, and it is a real choice:
- If you allow it, each company receives the four events above, your device's IP address, your device's advertising identifier (IDFA) and its vendor identifier, and basic technical information about the app and the device. TikTok's privacy policy and Meta's privacy policy govern what each does with it.
- If you ask the app not to track, no advertising identifier is available to the app at all, and neither company is given one. For TikTok, iOS goes further and blocks the app from reaching their servers. It does not send less. The connection does not happen. Apple may still send either company an anonymous, aggregated install report of its own (SKAdNetwork); that report is built and delivered by Apple, contains no identifier for you or your device, and we cannot switch it off.
The game is identical either way. Nothing is locked, delayed, degraded or asked twice on the strength of your answer.
Changing your mind
The tracking answer is yours to change whenever you like, and turning it off takes effect immediately:
- Settings → Privacy & Security → Tracking, then the switch next to Neverstill. The same screen has a master switch that refuses every app at once.
- The advertising consent for the sponsor video is separate, and lives in the game: tap the gear button in the corner, then Privacy options.
What we do not do
- No account, no sign-in, no profile of you.
- No advertising you did not ask for. There is no banner, no interstitial and no advert that plays on its own; the three real adverts are videos behind something you have to press. The hoardings and the vinyl are fiction drawn from a list compiled into the app, and so are the drone and the outrider whenever they are not carrying one of those three. Nothing is fetched to draw any of it, and no identifier leaves your device for one.
- No third-party analytics SDK watching how you play. The game's own server, described above, is the only thing that hears about your runs, and it is ours, keyed to a random number, and switched off in settings. The advertising SDKs report on their own failures, which is why the App Store label lists crash data; they carry nothing about the game.
- No location, contacts, photos, microphone, camera or health data.
- No selling or sharing of personal data, in the sense of the California Consumer Privacy Act or otherwise.
- No tracking at all unless you said yes to the prompt. iOS enforces that, not us.
If you switch Online off, refuse the tracking prompt, never buy anything and never accept a sponsor pitch, the app makes no network request that carries any information about you at all.
Why we are allowed to hold it
Under the GDPR, the purchase record is processed to perform the contract you enter into when you buy the Line Pass or a livery (Article 6(1)(b)). Without it we could not give you what you paid for, or give it back to you after a reinstall. RevenueCat acts as our processor and may store data outside the European Economic Area under the safeguards described in RevenueCat's privacy policy.
The advertising measurement described above, and the storage the sponsor video needs, are processed on the basis of your consent (Article 6(1)(a)). You give it through the tracking prompt and the in-game consent form, and you can withdraw it at any time as described in Changing your mind. Withdrawing consent does not affect anything done while it was given. TikTok and Meta each process what they receive as independent controllers and may store it outside the European Economic Area; see their privacy policies for the safeguards that apply.
The game's own server processes what it holds on the basis of our legitimate interest (Article 6(1)(f)) in running the league and the daily board you take part in, and in learning, in aggregate, which parts of a free game bring people back so we can keep it worth playing. That interest is balanced by what we leave out — no IP address, no device or advertising identifier, no account — and by the switch that stops it and deletes it at any time.
How long it is kept
On the game's own server: what happens in the game is deleted after 180 days; a day's longest runs after 90 days; league results after a year; and the install record 400 days after your device was last seen. The Online switch deletes all of it at once.
The purchase record is kept for as long as a purchase is meant to be restorable, which is indefinitely. The Line Pass and every livery are non-consumable purchases, which are permanent, and Apple requires that you be able to restore them at any time. You can ask us to delete the record, with the consequence below.
Advertising measurement is kept by Google, by TikTok and by Meta under their own retention policies. We hold no copy of it and cannot look up an individual device.
Your rights
You can ask us to confirm what we hold, to correct it, to delete it, to restrict or object to its processing, or to send you a copy. Email support@mainichi.digital and we will answer within one month. You may also complain to your national data protection authority; in Belgium that is the Gegevensbeschermingsautoriteit.
Please note that deleting your purchase record means the Line Pass and any livery you bought can no longer be restored to a new device, and they are not refundable on that basis.
Children
Neverstill is rated 13+ and is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.
Changes
If this policy changes in a way that affects you, the effective date at the top will change and the new version will be published here before it applies.
Contact
support@mainichi.digital
mainichi digital