Privacy Policy
Last updated: May 2026
The Wayward Herald is a work of fiction. Wayward is not a real town; its citizens never existed. But the website you’re reading runs on real software, and that software can collect real information. This policy explains what we collect, how we use it, and your rights.
Information We Collect
Account Data (optional)
You can read the Herald and the Wire without signing in. Most pages are free and public.
If you choose to sign in (to buy content packs or to submit story ideas), we store:
- Your Apple ID token (for authentication)
- Your display name, if provided by Apple
- Your email address (may be an Apple relay address)
Purchase Data
If you buy content packs (character expansions, locale packs, etc.), we record the transaction and the entitlement so you can access the unlocked content on any of your devices signed in to the same Apple ID.
Payment processing is handled by Stripe on the web and by Apple’s App Store on iOS. We never see or store your payment method details. See Stripe’s Privacy Policy and Apple’s Privacy Policy for details on how they handle payment data.
User Submissions
If you submit a story idea, go on the record as a witness, or post to the Wire, the content you submit is stored on our servers and may appear in future Herald editions (with any moderation we deem appropriate). Witness names are stored alongside submissions. You can delete your own submissions from your account screen.
Push Notifications (optional, mobile app only)
If you grant notification permission on the mobile app, we register your device with Apple Push Notification service (iOS) or Firebase Cloud Messaging (Android) to deliver edition-drop announcements and pack release news. The device token is stored on our servers, associated with your account if signed in. You can revoke notification permission at any time from your device settings.
Analytics Data
We use Mixpanel to collect anonymous app usage data so we can understand which features readers use and improve the product. Analytics data includes:
- Sign-in and account events (sign-in completion, sign-out, account deletion)
- Pack purchase events (paywall view, purchase started, purchase completed, purchase failed, restore)
- Push notification events (permission grant, token registration, notification tap-through) — mobile only
- App lifecycle (app open, app background) — mobile only
- Page views — web only, auto-captured by Mixpanel
Analytics data is associated with an anonymous identifier and these non-identifying attributes: app name, app version, family (Wayward’s product family), platform (iOS / Android / web), and which packs you’ve unlocked.
Analytics data does NOT include:
- Your name, email address, or Apple ID
- The text of any story submissions, witness names, or Wire posts
- Your physical location
We do not use advertising identifiers (IDFA) or track you across apps. Analytics data is retained for 12 months.
See Mixpanel’s Privacy Policy for details on how they handle data.
Local Data
Your reading preferences and recently-viewed pieces are stored locally on your device using standard browser storage (web) or iOS / Android storage (mobile). This data is not transmitted to our servers.
Third-Party Services
Supabase
We use Supabase for authentication, data storage, and serverless functions. Supabase’s infrastructure is hosted on AWS. See Supabase’s Privacy Policy.
Stripe (web payments)
We use Stripe Checkout to process pack purchases on the web. Stripe receives your payment method details directly; we do not see or store them.
RevenueCat (mobile payments)
We use RevenueCat to manage in-app purchase entitlements on iOS and Android. RevenueCat receives the App Store / Play Store transaction details to track which packs you’ve unlocked. See RevenueCat’s Privacy Policy.
Mixpanel (Analytics)
We use Mixpanel to collect anonymous feature usage data as described above. No personal information is shared with Mixpanel.
Apple Push Notification service / Firebase Cloud Messaging
Push notifications are delivered through Apple’s APNs (iOS) or Google’s FCM (Android). Device tokens are technical identifiers used solely for delivering notifications; they are not used for advertising or cross-app tracking.
Data Sharing
We do NOT:
- Sell your data
- Share personal data with third parties beyond what’s needed to operate the service
- Display advertising
- Track you across apps or websites
Your Rights
You can:
- Read the Herald without providing any personal information
- Sign in to buy packs and sync entitlements across devices
- Delete your account and all associated data at any time from the Account screen — this removes your account record, your pack entitlements, your submissions, and any analytics identifier associated with your account
- Export or request a copy of any personal data we hold by emailing the contact below
If you are in the EU, UK, or California (and other jurisdictions with similar laws), you have additional rights under the General Data Protection Regulation (GDPR), UK GDPR, and California Consumer Privacy Act (CCPA) — including the right to access, correct, port, restrict, or object to our processing of your personal data. To exercise these rights, contact us at the address below.
Children’s Privacy
The Wayward Herald is not directed at children under 13. We do not knowingly collect personal information from children.
Contact
If you have questions about this privacy policy or wish to exercise any of your rights, contact us at:
Email: support@stalefishlabs.com
Changes to This Policy
We may update this policy from time to time. Changes will be reflected in the "Last updated" date above. Material changes will be communicated via in-app notice or email to signed-in readers.