Privacy Policy
JERICHO · LAST UPDATED 6 OCTOBER 2026
The short version. Jericho reads how many steps you walk. You sign in with Google or Apple to play, because your hero lives on your account: your daily step totals, your all-time total and your hero save are kept on our server, to back up your progress and to keep the game fair. Other players see your steps only if you agreed to share them. We never collect your location, never sell anything, and use no ads or analytics.
Who we are
Jericho is made and operated by the developer of jericho.coders.ph. For any question about this policy, or to have your data deleted, email support@coders.ph. The support page has more.
How Jericho reads your steps
- Apple Health (iOS) or Health Connect (Android). With your permission, the app reads your step count and nothing else. It never writes to your health store and reads no other health data: no heart rate, no sleep, no workouts, no location.
- The phone's motion sensor (pedometer). On iOS it keeps today's count moving while the app is open; your progress is still credited from Apple Health. On Android it is a fallback, used only when Health Connect permission has not been granted.
You can withdraw either permission in your phone's settings at any time.
Why you sign in
Jericho asks you to sign in before you make a hero. Your hero, its step history, your friends, your guild and your duels belong to your account, so the account is where they are kept: that is what lets you change or lose a phone without losing your progress, and what lets other players meet the hero you actually have. Before you sign in, nothing about you is sent to us apart from the one invite check on your first launch described under Invite links. If an older version of the app kept a hero on your phone without an account, signing in moves that hero to your account.
What signing in shares
You can sign in with Google, and with Apple where the app offers it. The sign-in provider gives us a stable account identifier, and may give us your name and profile picture. We do not store your email address, and we never receive your password. For a verified Gmail or iCloud address we keep only a one-way fingerprint of it (a SHA-256 hash, which cannot be turned back into the address), so that signing in with Google or Apple under the same email opens the same account instead of creating a second one. Apple's "Hide My Email" addresses are never fingerprinted.
Once you are signed in, the app sends your step total for each day, your all-time total and your hero save to our server. This happens whether or not you share steps with other players, because:
- it backs up your progress, so a new phone can pick up where you left off;
- it keeps the game fair: the server works out your energy and rewards from the steps it has banked, and runs duels on stats it derives itself, so an edited app can't claim steps or strength it doesn't have.
What is sent is one total per day: a date and a number. There are no individual samples, no times of day and no location.
Who can see your steps
- Other players see your steps only if you agreed in the step-sharing sheet. That covers friends, guildmates and guild totals. You can switch sharing off in Options at any time.
- Without sharing, friends and guildmates still see your hero card: hero name, class, look, level, rank and equipment. Your hero name and card also appear in duels, guild rosters and war results.
- Nobody else. We don't sell, rent or share your data, and your step data is never used for advertising. Apple's HealthKit terms and Google's Health Connect policy require this too.
Invite links
A player can share a link to Jericho: jericho.coders.ph/r/ followed by their invite code. When you open one:
- The website remembers the code in a cookie in your browser
(
jericho_ref, for 30 days), so a later visit to the site still shows who invited you. It holds the code and nothing else. - Our server records the visit for one day. It keeps the invite code, the time, and one-way keyed fingerprints (HMAC hashes) of your IP address and of a short description of the phone that your browser reports: the platform, the system version, the phone model where the browser gives it (Chrome on Android does, Safari does not), the screen size, the language and the time zone. Your address and that description are never stored, and the fingerprints cannot be turned back into them.
- Tapping a download or install key copies the invite to your
phone's clipboard, as
jericho-invite:followed by the code. When you create your hero, Jericho reads the clipboard once (your iPhone asks you to allow paste first) and keeps only an invite in exactly that form; anything else on the clipboard is ignored, never kept and never sent anywhere. - When Jericho first opens on a phone, signed in or not, and again when you create your hero, it sends the same kind of description of that phone to look for a matching visit. Each check is recorded for one day with the same kind of one-way fingerprints, whether it matched, and how old the matching visit was, so we can find out why an invite was missed; never your address. If a visit matches, the app asks whether that player invited you, and nothing happens unless you say yes. Saying yes counts the invite exactly as typing the code would.
- The visit record is deleted after one day, matched or not. It is used only to match an invite: it is not an identifier, it is not linked to your account, it is never shared with anyone, and it is never used for advertising or analytics.
Everything we store about a signed-in player
| What | Why |
|---|---|
| Account id from Google or Apple sign-in, and which providers you linked | To know which save is yours, on any phone |
| Name and profile picture link from the sign-in provider, if given | Shown only where you haven't set a hero name |
| Hero name | So other players can find and recognise you |
| Hero save and save history: your last 10 saves and one a day for the past week, plus copies replaced by a different hero | Backup, and recovery if a sync goes wrong |
| Step total for each day, and your all-time total | Energy, rewards, guild standings and fair play |
| Hero card: class, look, level, power, equipment | So other players see your actual character |
| Friends, friend requests and your invite code | To connect you with people you add |
| Guild membership, your title in it, and war records | To run guilds and guild wars |
| Duels, their turns, your duel rating and record | To run live duels and ranked matchmaking |
| Inbox gifts and messages | To deliver rewards and notices |
| Referral records: who invited you, and whom you invited | To pay the one-time referral reward |
| A device identifier | To keep one active device per account |
| A one-way fingerprint (SHA-256) of that device identifier and of your sign-in, beside each day's step total it was credited to, kept for 7 days | So one phone's walk for a day counts toward one account only, even after an account is deleted and made again |
| When you were last active | To show friends who is online for a duel |
| How long the app was open each day, and how many monster fights you won and lost that day, kept for 90 days | To understand how the beta is being tested, and to thank the most active testers |
| The app version and phone platform (iOS or Android) | To know which players an update has reached |
| When the app crashes: the error message, where in the app it happened, the app version and platform, kept for 30 days | To find and fix crashes. It holds no step or health data and nothing you typed |
| A session token, kept on your phone | So you stay signed in for up to 30 days |
Logs. The server keeps a short operational log that can include your account id beside events such as reward claims, referrals, gifts and errors. It does not log requests one by one or record step counts in the log. The server and this website sit behind Cloudflare, which processes connection data such as IP addresses to deliver and protect the service, under Cloudflare's privacy policy.
We do not collect your location, contacts, photos, browsing or advertising identifier. There is no analytics service, no advertising network and no third-party tracking.
How long we keep it
- We keep your account for as long as it exists.
- Deleting your account erases your live data immediately: the account, your saves and save history, every day's steps, how long the app was open each day, friends, guild membership, duels, inbox and referral records.
- Some records are kept only as long as the game needs them: duel turns for 7 days and finished duels for 90; fight records for 7 days; the detail of energy earned and spent for 30 days (after that, only the balance); claimed inbox gifts for 90 days; unanswered friend requests for 90 days; how long the app was open each day for 90 days; an invite-link visit, and each check for one, for one day.
- A record with no name or contact details is kept for up to two years after an account is deleted: when it was deleted, play totals (level, steps, days walked), coin balances and coin-shop purchase totals, counts of items, and one-way fingerprints (SHA-256 hashes) of the sign-in and device. It is used only to investigate fraud and abuse, such as one person deleting and returning to collect a reward again.
- An account that abuses the game can be suspended. The suspension record (its reason, its dates, and one-way fingerprints of the sign-in and device) is kept after the account is deleted, so a suspension cannot be escaped by deleting and signing up again. A suspended player can still delete their account, and can appeal from the app.
- Which phones an account has used. We keep a one-way fingerprint (a SHA-256 hash) of each phone an account signs in on, with the dates it was first and last seen, for up to a year after that phone was last used, and delete it with the account. Game staff use it only to see which accounts share a phone or a sign-in when deciding on a suspension. They see hero names, never the phone or the sign-in.
- Database backups roll off after 14 days, so a deleted account is gone from them within two weeks.
How to delete your account
- In the app: Options, then Account, then Delete account.
- By email: write to support@coders.ph with your hero name. We will confirm and delete it within 30 days, usually much sooner.
Signing out keeps your hero on the phone. Revoking the health permission stops new steps being read. Neither deletes anything from our server.
Children
Jericho is for people aged 13 and over. It is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child has an account, email us and we will delete it.
Security
Traffic between the app and our server is encrypted. Your session token only works with Jericho's own server; it can't reach your Google or Apple account. No system is perfect, and we will tell affected players promptly if anything goes wrong.
Your rights
Depending on where you live, you may have the right to a copy of your data, to correct it, to delete it, or to object to how it is used. Email us and we will do it. There is no charge and no form.
Changes
If this policy changes what we collect or who sees it, we will update the date at the top and say so in the app first.
See also the Terms of Service and the support page.
← BACK TO JERICHO