Privacy Policy

1. Overview

CivStory is operated by Elder Magi Studios. Most app state is kept locally on your device. Usage analytics and crash diagnostics operate only in app builds that are configured with the relevant provider (some builds are distributed without one, and send nothing). In a configured build they are on by default, and you can turn each one off at any time (see section 8).

2. Data stored on the device

CivStory stores language and display preferences; map, timeline, filter, and overlay settings; saved events; reading and feature progress; XP, levels, and badges; privacy choices; newsletter-prompt state; and a random analytics installation ID on your device. Storing this state does not by itself send it to Elder Magi Studios or another provider.

When you switch civilization on the web, or are taken to your civilization's site, your local settings and progress are passed to that CivStory site in the link itself; nothing is sent to our servers.

3. Map and update network requests

To provide app functionality, CivStory may request map styles, vector tiles, sprites, and fonts from OpenFreeMap, use CARTO map resources as a fallback, request Tilezen terrain tiles hosted on Amazon S3, and retrieve the configured minimum-version manifest used to determine whether an update is required and, in builds that collect analytics or crash reports and have a settings address configured, a signed settings file that can switch those features off remotely. These hosts may process ordinary request metadata, such as an IP address, client or device information, the requested resource, and request time. CivStory does not request device geolocation.

Learn more from OpenFreeMap, CARTO, and Tilezen.

4. Product analytics (PostHog), on by default

In an app build configured with a PostHog key, anonymous product analytics are on by default. They start when the app starts, before you have responded to the first-launch notice, and continue until you turn them off. In a build without a PostHog key nothing is sent. The analytics may include a random anonymous installation ID; app version, platform, OS version, language, locale, and theme; fixed feature-event names; and scrubbed structured properties such as content identifiers, categories, result counts, durations, and success or failure states.

Search text is reduced to its length and whether it contains non-ASCII characters. A fixed scrubber removes sensitive keys and recognized personal data, including email addresses, phone numbers, URLs, coordinates, authentication values, and device identifiers. PostHog geo-IP enrichment is disabled in the app configuration, although network infrastructure may still process an IP address while transporting a request.

5. Crash reports (Sentry), on by default

In an app build configured with a Sentry DSN, anonymous crash reports are on by default. They start when the app starts, before you have responded to the first-launch notice, and continue until you turn them off. In a build without a Sentry DSN nothing is sent. A report may include stack traces, technical error details, app release and platform information, the random anonymous installation ID, language and platform tags, and recent breadcrumbs containing event names and scrubbed structured properties.

Sentry is configured with default personally identifiable information, logs, session replay, profiling, and automatic session tracking disabled. Network infrastructure may still process an IP address while transporting a report.

6. Newsletter

The newsletter is optional. Nothing is sent unless you enter your email address and choose Subscribe in the app or on the website. When you do, only the email address is sent to CivStory's own newsletter service (Listmonk, hosted at newsletter.civstory.com behind Cloudflare). Your subscription starts only after you confirm it from the email we send you. Every newsletter includes an unsubscribe link, and you can ask for your subscriber record to be deleted by writing to info@civstory.com.

Your device also remembers that you asked to subscribe, including the address you entered, so the invitation is not shown again. In the mobile app, Delete my data removes it; on the website, clearing this site's stored data removes it.

7. What CivStory does not do

CivStory does not sell personal data, show behavioral advertising, use advertising identifiers, or track you across apps. It does not request device location or access your contacts, photos, calendar, or microphone.

8. Privacy choices and deletion controls

On first launch of a build that collects analytics or crash reports, the app shows a notice with Keep on, Turn off, and Customize. At any time, under More → Privacy, you can independently turn analytics and crash reports off or back on. Your choice is saved on your device and takes effect immediately: turning a channel off stops future collection of that kind. You can also choose Reset analytics ID to replace the random installation identifier or Delete my data to clear CivStory's local app state. After Delete my data, the app returns to its default settings the next time it starts (analytics and crash reports on, with the first-launch notice shown again). Uninstalling the app also removes its local app data, subject to normal platform behavior.

Turning a channel off prevents future collection. Resetting the ID, deleting local data, or uninstalling cannot recall requests already transmitted or erase records held off-device; contact us to request access, correction, or deletion of such records.

9. Retention

Off-device data is retained only as long as reasonably necessary for the disclosed operational purpose, then deleted or anonymized, subject to legal and security obligations. Local app data remains until you delete it or uninstall the app.

10. Rights, children, changes, and contact

You may request access to, correction of, or deletion of applicable data by emailing info@civstory.com. CivStory is not directed to children under 13. This policy was last updated on October 16, 2026. Material changes will be announced in the app's release notes and reflected by a new update date on this page.