Who we are
The MERCS Companion is the official companion app for the MERCS tabletop game, developed and operated by DigiRune Studios (sole proprietor, Will McCullough). MERCS and all related content are trademarks of Fifth Angel Studios and used under license. This policy explains what the app does and does not do with your information. Questions? Email will@digirunestudios.com.
What we collect
If you don't sign in
Nothing, unless you choose to send us a note (below). The app runs entirely on your device, works offline, and sends no personal data anywhere. There are no ads, no analytics, no tracking, and no advertising SDKs. The selections you make (favorites, strike teams, tracker state) are saved only on this device so they are still there next time; nothing leaves the device. You can delete them at any time: tap Sign In, then Clear saved data on this device.
If you sign in with Google or Apple (optional)
To sync your saves across devices, we create a private account for you and store:
- An account identifier (a Firebase user ID) and the name and email address your chosen provider (Google or Apple) returns, plus a profile photo URL if one is provided;
- Your in-app selections: favorites, strike teams, and round-tracker state. These are stored as a single data record tied to your account.
Sign-in and sync are provided by Google Firebase (Firebase Authentication and Cloud Firestore). We do not collect your password; authentication is handled entirely by Google or Apple. If you use Sign in with Apple, you may choose Apple's “Hide My Email” option, in which case we only ever see a private relay address.
If you send us a note (optional)
About & Privacy has a Report a problem or suggest an idea link. If you choose to use it, we receive your message, the kind of note (problem, idea or other), the app name and version, your device type (iPhone, Android or web), the address of the page you sent it from and, only if you add it, your email address so we can reply. A random code kept on this device lets us limit how many notes one device can send in a day. Your network (IP) address is never stored with your note. Notes are kept for one year and then deleted automatically.
How we use your information
We use your sign-in information for one purpose only: to sign you in and keep your saved selections in sync across the devices where you sign in. We do not use it for advertising or profiling, we do not sell or rent it, and we do not share it with anyone except the service providers below who make sync work. If you send us a note, we use it only to fix problems, improve the app and, if you included your email, reply to you. AI may help sort through the notes.
Service providers
- Google Firebase: Authentication and Cloud Firestore host your account and synced data. See Google's Firebase Privacy and Google Privacy Policy.
- Sign in with Google / Sign in with Apple: identity providers used only when you tap their button.
- Google Fonts: the app's typefaces are served by Google Fonts, which may receive your device's IP address as part of delivering the fonts. No fonts-related cookies are set.
- Cloudflare: only when you open the note form or send a note, Cloudflare runs the small server that receives and stores it, and Cloudflare Turnstile checks that the note comes from a person and not a spam robot. See the Cloudflare Privacy Policy.
- Anthropic: AI may help sort through the notes you send us.
We use no other third-party services, analytics, or advertising networks.
Data retention
Your account and synced data are kept until you delete them. When you delete your account (below), the associated records are removed. On-device data stays on your device until you uninstall the app or tap Sign In, then “Clear saved data on this device” (or “Stop saving on this device”). Either one deletes the device copy and stops saving; it does not touch data synced to an account. Notes you send us are kept for one year, then deleted automatically; to have one deleted sooner, email us.
Delete your account & data
You can permanently delete your account and all of its synced data at any time. There are two ways:
In the app (fastest)
- Open the MERCS Companion and tap Sign In (in the header, or inside the ☰ menu on phones).
- Tap Delete account & data.
- Confirm. Your synced data record and your sign-in account are deleted immediately; your other devices clear their copy on their next sync.
By email
Prefer to ask us? Email will@digirunestudios.com from the address you signed in with and request deletion. We will delete your account and data within 30 days and confirm when it's done.
What gets deleted: your account identifier, the name/email/photo held by Firebase Authentication, and your synced selections in Firestore. This cannot be undone.
Security
All data is transmitted over encrypted HTTPS connections. Access to your synced data is restricted by Firestore security rules so that only your own signed-in account can read or write it.
Children's privacy
The app is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.
Your choices
Signing in is entirely optional. You can use every feature of the app without an account; your selections are then saved only on this device, and you can clear them and stop saving at any time. If you have signed in, you can sign out, switch to a device-only save, or delete your account and data at any time as described above.
Changes to this policy
If we change this policy we will post the updated version here and revise the “Last updated” date above. Material changes will be reflected in the app.
Contact
DigiRune Studios · will@digirunestudios.com
digirunestudios.com