Privacy Policy
Last updated: July 29, 2026
403 Studio ("we," "our," or "us") operates the website located at www.403studio.ca(the "Site") and develops and publishes mobile applications for Apple platforms (collectively, the "Applications").
This Privacy Policy is a legally binding document designed to inform you of our practices regarding the collection, use, and disclosure of personal data. By accessing our Site or downloading, installing, or using our Applications, you consent to the terms of this Privacy Policy.
1. Privacy & Data Collection Principles
We believe that your digital footprints should belong exclusively to you. Consequently, 403 Studio does not directly collect, harvest, monitor, store, share, or sell any personal data through our Applications or this Site.
- No Account Sign-Ups: Our Applications do not require registration, login, profile creation, or email address entry to function.
- No Direct Telemetry or Behavioral Tracking: We do not integrate direct behavioral tracking SDKs or analytics frameworks (such as Google Analytics or Firebase) to monitor how you navigate screens or your usage habits.
- No Crash Analytics Sharing: Crash reporting is managed exclusively via the native, opt-in Apple diagnostics framework. We do not utilize third-party crash reporting databases.
- Ad-Supported Exceptions: While premium utility applications like Pilot Logbook remain entirely free of advertising and third-party tracking, our free-to-play games (such as Game Vault and Neon Siege) display advertisements served by Google AdMob. AdMob may collect and process device identifiers and usage statistics for ad-supported games as detailed in Section 5.
2. Sandboxed Local Storage & Cloud Syncing
All inputs, configurations, game achievements, logs, and duty data created inside our Applications are stored locally in the secure sandboxed storage of your physical device. Depending on the Application:
- Local & iCloud Sync Apps: For our offline games and strategy/tower defense simulators, we run zero server-side databases. Your data is stored on your device and, if enabled, synced only via your personal Apple iCloud account and Apple services, which we have no access to.
- Pilot Logbook App: Your flight log entries, duty times, and calculations are securely backed up on our Supabase server. This data can be accessed via PC or on your iOS devices using your own secure credentials, which we do not have access to.
3. Device Permission Disclosures
To ensure complete transparency, we disclose that our Applications do not request or utilize sensitive system-level permissions, including but not limited to GPS background location, contacts, address books, or microphone access. The only exception is Pilot Logbook, which requests camera access solely for scanning paper logbooks and aviation documents. On iPhone/iPad, this scanning is processed on-device by default; you can optionally enable cloud AI-enhanced extraction for uploaded photos, and web-based scanning (which has no on-device scanner) always uses cloud AI. When cloud AI extraction is used, the file is sent securely to Anthropic's Claude API solely to extract logbook data — it is not used to train Anthropic's models, is automatically deleted from Anthropic's systems within 30 days, and is not stored by us after processing. See the Pilot Logbook Privacy Policy for full details.
For our ad-supported games, a request for App Tracking Transparency (ATT) permission may be presented on launch to facilitate personalized ad serving. You are free to deny this permission, in which case only non-personalized ads are displayed.
4. Data Synchronization
Depending on the Application, synchronization features may sync your data directly and securely with Apple's CloudKit servers (using your personal Apple ID credentials) or with our secure website database (using your user credentials).
5. Third-Party Advertising & Data Collection (AdMob)
To support the ongoing development of our free-to-play games, applications such as Game Vault and Neon Siege integrate the Google Mobile Ads (AdMob) SDK. When you play ad-supported games, AdMob may collect, process, and share specific device-level identifiers.
- Data Collected: AdMob collects device identifiers (such as Apple's IDFA or vendor identifiers), usage statistics, device manufacturer, system version, IP address (for general location), and diagnostic logs.
- Purpose of Collection: This data is used to deliver ads, limit the number of times you see the same ad (frequency capping), combat spam and fraud, attribute installations, and (where consented to) serve personalized ads.
- User Controls & Opt-Out:
- App Tracking Transparency (ATT): Upon launching the game, you may be presented with a prompt asking for permission to track your activity. Denying this prompt instructs AdMob to serve non-personalized ads, though AdMob will still collect basic device data for non-personalized operational purposes.
- iOS Settings: You can manage or reset your advertising identifier at any time through your iOS device settings by navigating to Settings > Privacy & Security > Tracking.
6. Website Logs & Cookies
Our Site is a statically generated marketing page. We do not write tracking cookies to your browser, use advertising cookies, or deploy cross-site tracking systems. Any communication you send us by email is strictly used to answer your support questions and is never logged in marketing databases.
7. Children's Online Privacy (COPPA)
Because we do not directly collect any personal data, our Site and Applications are designed with children's privacy in mind. Our ad-supported games serve non-personalized ads to users who are identified as children or where required by COPPA guidelines, and we do not knowingly solicit or gather data from children under the age of 13.
8. Regulatory Compliance (PIPEDA, PIPA, GDPR, CCPA)
403 Studiois situated in Alberta, Canada. We comply with Alberta's Personal Information Protection Act (PIPA) and Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).
For users in the European Union (under GDPR) or California (under CCPA/CPRA), your data rights (including the right to access, export, modify, or erase your data) are fully satisfied by default. Because all data is stored on your own hardware, you hold full controller rights and can delete or export it at any time. Third-party ad serving consent can be managed directly via the iOS tracking settings.
9. Inquiries & Complaints
If you have questions regarding this Privacy Policy, please contact us at: [email protected]
If you are a resident of Canada and feel your inquiries have not been addressed, you have the right to lodge a complaint with the Office of the Information and Privacy Commissioner of Alberta (OIPC) or the Office of the Privacy Commissioner of Canada (OPC).