ECHO — Close Quarters includes offline Vs Computer and Pass & Play with the paid app download. The intended UK app download price is £0.99; these modes require no additional in-app purchase. Offline gameplay and preferences stay on your device; the offline engine makes no server requests.
When you sign in to play online, we verify an Apple or Google identity token and store a hash of its provider subject, a stable account ID and the account creation time. We do not store your name, email address or raw identity token. Session credentials are hashed on the server and expire after seven days. For Sign in with Apple, we also retain a server-only refresh token so we can revoke sign-in permission when you delete the account. This token is never returned to the app or included in invitations.
We verify the one-time Online Unlock directly with Apple or Google. We store the purchase’s account association and verification state. For Apple we retain the original transaction ID; for Google we retain the purchase token so we can recheck refunds and cancellations. Purchase credentials are not included in game state or invitations.
ECHO also offers a clearly labelled Review access sign-in for dedicated store review accounts. Reviewers enter an ECHO username and password rather than an Apple or Google password. The password is used only to authenticate the request and is not stored in the app or game database. The operator keeps only a password hash in protected server configuration. Review accounts use separate account IDs and the same online rooms, gameplay and deletion controls as other accounts. Their online access is configured by the operator and does not record a store purchase.
Online room state, hashed player keys and participating account IDs are stored to let both players resume a match. Rooms expire 24 hours after creation and are removed by hourly cleanup. Expired sessions are cleaned up hourly. Account and purchase records, including the hashes that bind player keys to your account, remain until you delete your account. The hosting and store providers may process operational network data according to their own policies.
Delete your account in ECHO under Account → Delete Account, or use the web deletion request instructions. Account deletion removes your account, all sessions, purchase records, player keys and every room you hosted or joined from the active service database. Store purchases are not cancelled by this action. Offline play remains available. Hosting backups may retain prior database versions temporarily under the hosting provider’s retention policy.
Privacy and deletion enquiries: info@curitex.co.uk. Apple and Google continue to control their own identity, billing and transaction records.