Privacy Policy - Cargo Horizons

Last updated: October 17, 2026

Cargo Horizons is a map-based logistics simulation game operated by Ares Technologies Limited ("we", "us", or "our"). This policy explains how we collect, use, share, and retain information when you use the mobile game, its online services, and player support. It also explains your choices, including how to delete your account.

1. Information We Collect

1.1 Accounts and Sign-In

You can start playing as a guest without providing an email address. A guest account still has a persistent player identifier, authentication credentials, and saved game progress; it is not an anonymous or unlinked analytics session. If you create an email account or link an email to a guest account, we also process your email address, password authentication records, verification and recovery requests, and sign-in sessions.

Account information includes your company name, language, preferences, account status, and the dates of account activity. Passwords are stored as hashes, not as readable passwords. We send verification, recovery, and other account-related emails through our email delivery service.

1.2 Gameplay and Personalization

We store the game state needed to operate your company: headquarters and vehicle positions on the game map, cargo jobs, routes and delivery progress, vehicles, level, XP, coin balance, inventory, licenses, cosmetics, businesses, guild membership and contributions, quests, leaderboard results, and subscription benefits.

We also process activity and preferences, such as last-active time, notification settings, and whether messages or announcements have been read. Game progress, activity, and purchase status can be used to provide relevant cargo or guild recommendations, select player segments, and show appropriate in-game offers.

1.3 Game Map Coordinates and Approximate Location

The headquarters, vehicles, cargo destinations, and routes shown on the map are locations selected or generated for gameplay. They do not represent continuous tracking of your physical movements. The current mobile app does not request or collect your device's GPS location, and device location sharing with OneSignal is disabled.

Our servers and service providers receive IP addresses when you connect. Analytics and performance services may derive an approximate country, region, or city from an IP address. This approximate location information can be processed even when the app has no permission to use your device's location services. Map requests also disclose the area of the game map being displayed to our map provider.

1.4 Images and Other Content You Submit

If you upload a profile/company logo, guild logo, or in-game billboard image, we receive the selected image and associated file information, account association, timestamps, and upload or review status. Billboard submissions also include the selected in-game map position. Choosing an image does not give us access to your entire photo library.

We also store content you submit through features such as guild descriptions and applications, player reports, support requests, and bug reports. Avoid including sensitive personal information in public content or support messages unless it is necessary for the request.

1.5 Chat, Private Messages, and Safety Reports

We process message text, sender and recipient identifiers, channel or conversation membership, timestamps, and read or deletion status to deliver global chat, guild chat, and private messages. Global chat is visible to other players; guild chat and private messages are delivered to the relevant participants. Authorized staff may access content when needed to operate the service, investigate reports, prevent abuse, or meet legal obligations.

Reports and blocking actions include the relevant player and message identifiers, report reason, any explanation you provide, and moderation outcomes. We use automated text filters and administrative review to enforce our community rules. Uploaded billboard images require approval before publication.

1.6 Automated Moderation and AI-Assisted Game Events

Global and guild chat messages may be checked for profanity using OpenRouter and the AI model provider selected for moderation. For these checks, we send message text and message identifiers. The text itself may contain information you choose to include in it. We do not intentionally include your account password, access tokens, or email address in moderation requests.

When AI-assisted delivery events are enabled, we may also send the in-game company name, language, delivery distance, and event context through OpenRouter to generate short game text. These providers receive and process the submitted information to perform the requested task. The game also uses predefined event text.

1.7 Purchases and Cargo Horizons Plus

Coin packs are consumable purchases. Cargo Horizons Plus is a monthly auto-renewing subscription. On iOS, payments are processed by Apple, and RevenueCat helps us verify purchases and manage subscription access. We process product, transaction, and player identifiers, purchase and renewal dates, subscription status and expiration, refunds, and records of coin credits or membership benefits.

RevenueCat uses our player identifier as its app user ID so purchases can be associated with the correct game account. Purchase records are also used for analytics, fraud prevention, support, and applicable accounting obligations. We do not receive or store your full payment card number or bank account details from Apple.

1.8 Device, Push Notification, and Connection Data

We and our providers process installation or device-level identifiers, IP addresses, device model, operating system, app version/build, language, time zone, network information, session activity, and notification permission status. A device identifier is not necessarily an advertising identifier.

OneSignal provides push delivery and notification engagement measurement. Its identifiers and subscription records are associated with your player account when the app signs you in to the notification service. Push tokens are processed when available. Some SDK session and device information may be collected even if you do not grant permission to display push notifications. Disabling notifications controls delivery; it does not by itself delete account or analytics records.

Server access and security logs may contain request times, IP addresses, requested paths and query parameters, response status, and technical errors. Queries entered into online features, such as guild search, may appear in these logs.

1.9 Analytics, Crash Reports, and Performance

We use Firebase Analytics and GameAnalytics to understand how the game is used and to improve onboarding, progression, features, and game economy balance. Measurements include sessions, screen views and interactions, delivery and quest events, virtual currency activity, purchases, and relevant player segments.

Firebase Crashlytics and Firebase Performance help diagnose crashes, handled errors, startup and loading times, network request latency, and device or operating system compatibility. Reports may include stack traces, technical logs, device and app information, and relevant game or interaction context.

Firebase Analytics and Crashlytics can receive the player identifier. Other SDKs use their own installation or device identifiers. These records may therefore be linked to your account or device, including when you play as a guest. We take steps to exclude email addresses, authentication secrets, precise game coordinates, and free-form player text from our custom analytics and diagnostic events.

1.10 Advertising in the Current Release

Third-party advertising and rewarded video ads are disabled in the current mobile release. We do not serve AdMob or Unity Ads in this release. Player-created in-game billboards remain available as moderated user content; their uploaded images and game locations are processed as described above.

If we introduce advertising or change how information is used, we will update this policy and the relevant store disclosures, and obtain permissions or consent where required.

2. How We Use Information

• Create and secure accounts, authenticate sessions, deliver account emails, and preserve game progress.
• Operate deliveries, fleets, headquarters, businesses, guilds, quests, rankings, maps, and social features.
• Validate coin purchases and subscriptions, provide benefits, and handle refunds and purchase disputes.
• Deliver relevant in-game recommendations, offers, announcements, and notifications according to the feature and your preferences.
• Measure usage and purchases, understand player engagement, and improve game balance and performance.
• Investigate support requests, moderate content, enforce blocks, and prevent cheating, fraud, spam, and abuse.
• Maintain the security and reliability of the service and comply with applicable legal obligations.

3. Infrastructure, Service Providers, and Sharing

Account and game records are held in our self-hosted backend and PostgreSQL database. Authentication runs on our servers using Better Auth. Hosting, storage, CDN, security, and email delivery providers process information needed to operate this infrastructure.

Depending on the features you use, information is also processed by:

• Mapbox: game map display and related SDK connection and usage data.
• Our external Valhalla routing service: selected in-game coordinates and vehicle routing parameters used to calculate game routes.
• Apple and RevenueCat: payment processing, purchase verification, subscription management, and purchase analytics.
• OneSignal: device and player identifiers, push delivery, session information, and notification engagement.
• Google Firebase: app analytics, crash reporting, and performance monitoring.
• GameAnalytics: sessions, gameplay, virtual economy, purchase, and related device measurements.
• OpenRouter and the selected AI model providers: submitted chat moderation text and AI-assisted game event context.

We share information with these providers for the service purposes described in this policy. We do not sell your personal information. Information may also be disclosed when required by law, to respond to valid legal requests, or when reasonably necessary to protect players, enforce our terms, or investigate fraud and security incidents.

Provider privacy information is available at:

• Mapbox Privacy Policy
• Apple Privacy Policy
• RevenueCat Privacy Policy
• OneSignal Privacy Policy
• Firebase Privacy and Security
• GameAnalytics Privacy Notice
• OpenRouter Privacy Policy

4. What Other Players Can See

Public game features can show your company name and logo, guild identity and membership, headquarters and active vehicle markers, level, completed delivery statistics, last-active information, Plus badge, leaderboard results, global chat messages, and approved billboard images. Guild messages and private messages are shared with their relevant participants. Company and guild identities may also appear alongside those messages.

Your account email, password records, payment details, private support requests, and player report notes are not intended to be displayed publicly. Information you put into a public message, name, description, or image can be seen by others, so choose that content carefully.

5. Retention and Account Deletion

We retain information for as long as needed for the purposes described in this policy. Relevant factors include whether your account is active, the operation of game features, support and safety investigations, fraud prevention, purchase disputes, applicable recordkeeping requirements, and the retention practices of our service providers.

You can request permanent account deletion in the app: tap your avatar or company name at the top of the main map, scroll down in your profile, select Delete Account, and confirm. When deletion completes, the authentication account and associated active player/gameplay records are removed and the session is ended. Registering again starts a new account; deleted progress is not restored.

Certain records can remain where needed for security, moderation, purchase disputes, or legal obligations. These may include deletion audit records, account identifiers, company name, email or an email-derived fingerprint, and relevant recent or reported message evidence. Retained records are restricted to those operational purposes. Backup copies and provider-held records may remain until they are removed under the applicable retention process.

Deleting a conversation from your inbox is not the same as deleting your account or erasing the other participant's history. Reported content and evidence may be retained for safety investigations. Contact us if you want to make a broader data request.

Deleting your game account does not cancel an Apple subscription. Manage or cancel Cargo Horizons Plus separately in your Apple Account subscription settings to stop future renewals.

6. Your Choices and Privacy Requests

• Guest play: start without an email address, or later link one from your profile to help retain access to your progress.
• Notifications: manage available notification categories in the app and notification permission in your device settings.
• Player safety: report messages or players and block other players using the chat actions and conversation menu.
• Images: choose whether to upload a logo or billboard image and manage the content through the relevant game feature.
• Subscriptions: use Manage subscription on the Plus screen or your Apple Account subscription settings.
• Account deletion: use the in-app Delete Account control described above.

Depending on the law that applies to you, you may also have rights to request access to, correction of, a copy of, or deletion of your personal information, or to object to or restrict certain processing. Send privacy requests to [email protected]. We may ask for information reasonably needed to verify your account or request. Some requests may be limited by security, other players' rights, or legal recordkeeping requirements.

7. Security

We use HTTPS/TLS, access controls, hashed passwords, server-side validation, and restricted operational access to protect information. No internet service can guarantee complete security. Protect your account credentials and contact us if you suspect unauthorized access.

8. Age Restriction

The Service is restricted to people aged 18 or older under our Terms of Use. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided personal information, contact us so we can investigate and take appropriate action.

9. International Processing

We and our service providers may process information in countries other than the country where you live. Where applicable, we use the contractual or other safeguards required for such transfers. The providers listed above explain more about their processing locations and privacy practices.

10. Changes to This Policy

We will update this page when our practices change and revise the Last updated date. Where applicable, we will provide additional notice or request consent before using information in a new way that requires it.

11. Contact

The operator responsible for this policy is Ares Technologies Limited. Contact us about privacy, account deletion, or player safety at [email protected].