First Tracks

Privacy.

Updated September 21, 2026 · Duffy Ventures, LLC

A small daily ritual, with clear choices about your data.

First Tracks has no advertising and does not require a First Tracks account. We use some information to run the game and optional usage analytics to understand what needs improving. We do not sell personal information or use it for cross-app advertising tracking.

What the game uses

Your skiing record

Your lines, attempts, streaks, statistics, and settings are stored on your device. When iCloud synchronization is available, a limited history is also stored in your personal iCloud account to keep your devices in sync. We do not operate a server that can browse that personal iCloud history. Apple processes iCloud data under its own privacy terms.

Scores and Game Center

To check leaderboard-eligible daily runs, the app sends the bowl, date, drawn line, claimed result, and Game Center authentication information to our validation service, hosted on Fly.io. It replays the line and checks the daily drop allowance. Game Center identity, daily counts, replay fingerprints, and accepted responses support duplicate detection and abuse prevention. Verified scores can appear under your Game Center profile on Apple's leaderboards.

The validator prunes operational day buckets more than two days behind the latest processed day. This is an activity-driven cleanup window, not a promise that every copy disappears exactly 48 hours after a run. Raw line geometry is processed for validation; the replay deduplication store keeps a fingerprint and response. Hosting providers may also process request and security logs.

Purchases, downloads, and reminders

Apple processes Season Pass and Lifetime Pass purchases, billing, and restoration. The app checks your entitlement; we do not receive your card or bank details. Optional analytics can include the pass purchased, its price and currency, and current pass status.

Mountain data and shared pages are delivered through Cloudflare. Like other web services, our hosting providers receive connection information such as IP addresses to deliver requests and protect the service. These operational requests are separate from optional usage analytics.

Reminders are scheduled on your device. You control them in Settings; First Tracks does not run a remote push-notification service.

Optional usage analytics

We use Amplitude to understand play, reliability of product flows, and pass purchases. Examples include opening a mountain, completing a drop, using a share button, returning on another day, and buying or restoring a pass. Events may include the bowl identifier, displayed score, turn count, outcome, app/device version, language, and summary properties such as streak length and pass status.

These events are associated with a random installation identifier, so we can recognize activity from the same installation over time. This is pseudonymous, device-associated data—not fully anonymous data. We do not attach your name, email, Game Center identity, or drawn line to Amplitude events.

The updated app explicitly disables Apple's vendor identifier and location enrichment in analytics, and sends a zero IP value in analytics payloads. Network providers still need to process connection addresses to carry a request. We do not request device location permission or collect GPS location.

Earlier TestFlight builds used SDK defaults that could attach a vendor identifier and request IP-based location enrichment. The updated build starts a new analytics identity and discards the older local analytics queue. This does not automatically erase information already sent by an earlier build.

Share usage analytics is on by default and can be turned off in the app's Settings. Turning it off stops new analytics collection, discards pending local analytics events, and rotates the installation identifier. An upload already underway may finish. Turning it back on starts with the new identifier. Gameplay and purchases remain available either way.

TestFlight usage goes to the same Amplitude project as App Store usage, with a build-channel label. Development builds do not send Amplitude events. Analytics is used to improve First Tracks, not for advertising or to follow you across other companies' apps and websites.

Shared lines and the website

When you choose to share a replay, its link contains signed replay information needed to show that line and result. Anyone you give the link to may view or forward it. Do not treat a shared replay link as private.

Shared-page performance events are recorded in Cloudflare Analytics Engine. They include the bowl, broad platform and referrer categories, loading times, and use of the store or share controls. A random tab-session identifier and a shortened link signature connect activity within a shared-link visit. The analytics dataset does not store the full replay token, full referrer, drawn line, or IP address. Browser Do Not Track is honored for these events.

Support email includes information you choose to send, such as your email address and the issue described. Private development feedback may also include a note, screenshot, device/app details, and a version-pinned bowl reference. The development feedback tool is excluded from the public Release app.

Retention and service providers

Local game history remains until you remove it; copies in iCloud are controlled through your Apple account and device settings. A signed shared link may remain usable while its underlying content and verification keys are supported.

Cloudflare documents a three-month retention period for Analytics Engine events. Automatic retention expiry is not currently enabled for our Amplitude analytics project. Analytics therefore does not automatically expire after a fixed period. We also do not currently set a fixed automatic deletion period for support correspondence. We retain this information for product improvement, support, and operational needs and consider deletion requests as described below. We will not describe data as deleted merely because collection has been switched off.

We use Apple, Amplitude, Cloudflare, Fly.io, and our email provider for the services described here. They may process information in countries other than your own, including the United States. Their processing is subject to their applicable terms and safeguards.

Your choices

Depending on where you live, you may have rights to access, correct, delete, restrict, or object to processing of personal information, or to complain to your local data-protection authority. Contact us to make a request. We may need enough information to verify and locate your data. If an app has been deleted or identifiers have been lost, we may not be able to connect a request to earlier pseudonymous records.

Children

First Tracks is a general-audience game, not a service directed specifically to children under 13. We do not ask players for their age, name, or contact details to play. Optional device-associated analytics is described above and can be disabled. If you believe a child has provided personal information that should be removed, a parent or guardian can contact us.

Contact and changes

Duffy Ventures, LLC is responsible for First Tracks. For privacy questions or requests, email support@firsttracks.io. We update the date on this page when the policy changes and provide additional notice where required for material changes.

Apple privacy · Amplitude privacy · Cloudflare privacy · Fly.io privacy