Effective: November 2026 · Version 1.0.4 · Developer: John Dado · Organization: allapp.fun by John Dado · Contact: john@virusvault.allapp.fun · Terms: terms.html
Virus Vault is a virus-busting capsule puzzler for iPhone, iPad, and Android. First launch requires accepting the Terms of Service and this policy (13+), then signing in with Apple (iOS) or Google (Android) plus a one-time Epic sign-in — you cannot reach the game without completing both. Nothing is contacted before you accept. After sign-in, turning Online duels off in Settings stops further Epic calls and leaves solo play working, but online features require signing in again.
When you tap ACCEPT & CONTINUE on the first-launch Terms screen (or re-enable Online duels in Settings), the app contacts Epic Games, Inc. (USA) as an independent data controller. Epic's own handling is described in the Epic Games Privacy Policy. Data is transmitted encrypted (TLS) and stored by Epic under its retention schedule.
| Data | Purpose | Notes |
|---|---|---|
| Store-backed player ID (Product User ID, PUID) | Duel lobbies, invites, P2P matches, cloud saves, leaderboards | Derived from your Apple / Google sign-in via Epic's keychain — the same store account restores the same PUID after reinstalls, which is how cloud saves follow you. No anonymous device IDs are minted. |
| Device model / OS string, IP address, request metadata | Run and secure the service (connectivity, anti-abuse, diagnostics) | Collected automatically by Epic on every EOS call, even though the game never asks for it directly. |
| Epic basic profile (iOS one-time Epic sign-in only — Epic display name, language preference, linked account display names) | Seed auto-connect so future launches restore silently (PersistentAuth tokens kept on this device) | Requested under the Basic Profile permission only. The game never sees your Epic password — only EOS tokens and your store-backed player ID. Android never opens this flow (store sign-in only). |
| Display name you show (Game Center nickname / Play Games gamer tag, else a Player-XXXXXX alias) | Show who is in a duel / lobby / rank board | Sent as lobby attribute hostName, in P2P packets, and as your Epic leaderboard name. Rooms are joined by 6-letter code or the in-game ONLINE PLAYERS lounge only; there is no public web listing. Anyone you share a room code with sees it, plus your level/speed and match results. |
| Live-duel data: room code, level/speed, moves, scores, virus counts, session ID | Run real-time versus matches; player-session metrics for the developer dashboard | Rooms close when everyone leaves; invites expire after ~1 minute. Match stats persist on your Epic leaderboards (duel_wins_total, top-stage and daily boards). |
| Game Center nickname + player ID (iOS only, after platform sign-in) | Show your lobby / rank name | Apple Game Center nickname or player ID only. No Game Center email. Friend-list avatars load only from GameKit after you grant access and are never uploaded anywhere. |
| Play Games profile (Android only, when signed in) | Leaderboards + achievements on Android | Google Play Games |
| Advertising ID (IDFA / AD_ID, only after your consent via the tracking prompt) | Show ads, measure ad performance | Google AdMob |
| Campaign progress (stages, stars, scores) + classic best times per level/speed | Cloud backup under your store PUID; restore on reinstall | Serialized as campaign_save.json, merged max-wins so neither side's progress is ever lost. On-device copy always kept as fallback. |
| Settings on this device (mute, music, vibration, controls, difficulty) | Remember preferences | On-device storage only, never uploaded. |
| Crash + error logs: app version, platform, PUID, gamer tag, last crash line, recent in-app log (≤64KB) | Fix crashes and bugs | Sent to the developer's private Cloudflare inbox (USA/EU edge, TLS) only after an app crash and only if Help fix crashes is on (default on; change anytime in Settings → Send crash logs). Send manually anytime from the in-game crash-icon button or Send diagnostics now. Auto-send max 1/day. Reports expire after 30 days. |
Legal basis (EU/UK): consent — the app contacts no one before you accept the Terms on first launch. You can withdraw at any time in Settings → Online duels (off = no further EOS calls).
Virus Vault shows banner ads and an interstitial every few games (iOS uses live AdMob units). In the EU/UK a Google UMP consent message appears where required. On iOS, the App Tracking Transparency prompt explains tracking before the advertising ID is used. Denying tracking still lets you play; ads may be less relevant. Ads consent is separate from online-duels consent.
Virus Vault is rated for ages 13+. It is a general-audience puzzle game and is not directed at children under 13: the first-launch gate requires confirming you are 13 or older before the menu unlocks, and online play needs a store account a child should not complete. Parents can use Apple Screen Time / Google Family Link and Game Center restrictions. If you believe a child under 13 is playing, contact us and we will help delete the on-device data and request Epic-side removal.
Material changes will be posted here with a new effective date. Continued use after posting means acceptance.
Support: virusvault.allapp.fun/support.html
Privacy questions: john@virusvault.allapp.fun
Epic privacy (online duels): epicgames.com/site/en-US/privacypolicy