Privacy Policy

Last updated: July 28, 2026

Overview

Firescroll is an Android app designed to help you reduce doom-scrolling. We collect only the data needed to run the game, sync your progress, and improve the app. We do not sell your data and we do not show advertising.

Your Account

Firescroll creates an account automatically the first time you open the app. Your account is keyed to your Android ID — a pseudonymous, per-device identifier. This is not linked to your Google account, phone number, or email. You are never asked to sign in.

Data Stored on Our Server

Your dragon and progress live on our own server so they survive across sessions and app reinstalls. We store:

Device identifier — Your Android ID, used as your account key and to authenticate requests.
Profile — A display name and dragon name you choose during onboarding, plus your gem balance and onboarding state. The name is optional and only what you type in; please don't enter personal details you'd rather not share.
Dragon data — Each dragon's type, element, rarity, level, XP, and its generated image.
Dragon stats — Vitality, recovery, resistance, luck, and points spent.
Activity — Hearts lost over time (for the home chart), leaderboard activity, and unlocked rewards.
Feedback — Any message you submit through the in-app feedback form.
Basic device info — Non-identifying technical details such as app version and platform.

We never collect your email, phone number, location, contacts, photos, or the content of other apps.

Data Stored Locally

The app caches a copy of your profile and progress on your device (hearts/lives, level, streak, settings) so it works instantly and offline. This local copy is deleted when you uninstall the app.

Dragon Image Generation

Your dragon's artwork is generated by an AI image service (OpenAI) from randomly rolled, non-personal parameters — no personal information is sent as part of image generation. The finished images are stored on Cloudflare R2 (object storage) and served to the app.

Permissions

The app requires the following Android permissions:

Accessibility Service — Detects scroll gestures inside other apps to trigger dragon damage. No screen content, text, or personal information is read or recorded.
Usage Access — Reads per-app foreground time to determine which apps are active. No app content is accessed.
Display Over Other Apps — Shows the dragon health overlay and block screen on top of tracked apps.
Internet — Syncs your account and dragon progress with our server.
Vibrate — Haptic feedback on scroll damage events.

Analytics and Error Reporting

We use PostHog to understand how the app is used and to catch bugs and crashes. This includes anonymous product analytics (which screens are viewed, which actions are taken), error reports, and session replays of your interaction with the Firescroll app itself. These events are keyed to your pseudonymous device identifier, not to your real-world identity. PostHog only observes activity inside Firescroll — never your activity in other apps.

Third-Party Services

Firescroll relies on a small number of processors that handle data on our behalf:

OpenAI — Generates your dragon's artwork from non-personal parameters.
Cloudflare R2 — Stores and serves the generated dragon images.
PostHog — Product analytics, error tracking, and in-app session replay.

The app contains no advertising SDKs and we do not sell or share your data for marketing.

Data Retention and Deletion

You can permanently delete your account at any time from Settings → Delete account. This removes your dragons, stats, and progress. Uninstalling the app removes the local copy on your device. You may also request deletion by contacting us at the email below.

Children's Privacy

Firescroll does not knowingly collect personal information from children. There are no user sign-ins, no advertising, and no social features beyond an anonymous leaderboard.

Changes to This Policy

If we update this policy, we will post the revised version on this page with an updated date.

Contact

If you have questions about this privacy policy or want to request data deletion, reach out at [email protected].