Effective date: 30 August 2026 · Last updated: 19 October 2026
This Privacy Policy explains what information the DECADES application and website ("DECADES", the "Service") handle, and how. The Service is operated by Aevest Studio, an independent developer operating from Malaysia ("we", "us"). Contact: hello@aevest.net. Our other game, Spellnest, has its own privacy policy.
We wrote this policy from the way the Service is actually built. It contains no account system, no third-party analytics or tracking software and no data brokers. The game sends us a few anonymous counts of its own (section 3), and our host counts page views (section 5). The free version shows advertisements: through Google AdSense in the browser and through Google AdMob in the Android app (section 5). DECADES Plus shows none while it is active, and a class life shows none at all. It is short because there is little to disclose.
DECADES is a work of fiction. Every company, person and price in it is invented. Nothing in the Service is financial advice.
The Service uses your browser's or the app's local storage to keep:
Share pictures. When you tap Share on your type or your life, the picture is drawn on your device and goes only where you choose to send it. It shows your character, your personality type and the life's results, never the name you typed, and nothing is sent to us.
On a teacher's own browser, the class page also keeps the teacher code the teacher typed and a list of their recent classes with their private class links. This information is not transmitted to us. If your Android phone backs up apps to your own Google account, Android may include the app's data in that backup; it stays in your account and we cannot see it. Clearing the app's or site's data in your device settings deletes all of it permanently.
The leaderboard is on when you first play, and Options › Online leaderboard › Off turns it off for good: no life is posted, no player identifier is sent and the usage counts below stop too. The one exception is a class life, which you choose by joining a class (see Class lives below). Reading the board still works with it off, because that request says nothing about you. While it is on, each finished life sends one record to our leaderboard server:
We process this information for one purpose: to run a leaderboard that shows the top scores to other players together with the display names. The server keeps one record per player identifier for each board and week: on the daily board, your best score of each day added up over the week; on the random-seed board, your single best life of the week. A display name is visible to other players; do not use your real name or anything that identifies you.
Your IP address is used by the server only as a short-lived counter key to limit abusive request volumes (hourly counters expire after one hour; the once-a-day checks on ratings and name reports expire after 24 hours); it is not stored with your record and not shared. Like any web service, our host also sees ordinary request metadata (IP address, browser type, time of request) in short-lived server logs used for security and reliability, not for profiling.
Usage counts. While the leaderboard switch is on, the app also sends us a handful of anonymous counts, to see whether the game works: that a life started or ended, on which platform (browser or app) and which board, the in-game age, score, grade and how the life ended, that the browser demo reached its last age, and taps on the app link. These counts carry no player identifier, no name, no seed and no IP address, so they cannot be linked to you. Each count is stored as a separate anonymous entry, with no identifier, in Cloudflare's analytics store, which keeps it for about three months. We only read them as totals.
Feedback. If you rate the game with stars in the browser, we receive the star rating, an optional note of up to 300 characters, the screen it came from and the start of your browser's user-agent text (browser, system version and sometimes the phone model). Bug reports sent from Help, and the link on Malay cards that reports a line reading wrong (it sends the card's number), arrive the same way. In the Android app, the rating ask opens Google Play instead, and we receive nothing. Feedback carries no player identifier and is deleted automatically after 120 days.
Transfer code. If you ask for a code to move a life to another device (Help), a copy of that saved life is stored on the leaderboard server for 30 days under a random ten-character code, then deleted. The copy holds only game state: no player identifier, no name and nothing about your device. Anyone who has the code can load that copy within those 30 days, so treat the code like a key. Asking for a code is limited to a few times an hour per address.
Class lives. A teacher can open a class and give their students a class code. Joining a class is your choice: you type the code and a nickname in the game. Because you chose it, a class life is sent even when the weekly leaderboard is switched off. When a class life ends, the game sends one record to that class's board:
Who sees a class life. The teacher who opened the class, using their private class link, sees every student's record, including the full final ledger. Anyone with the class code, such as the other students, sees the class board: nicknames, grades, scores, ages and how each life ended. A later life in the same class replaces your earlier one. Use a nickname rather than your full name. Nicknames go through the same filter as leaderboard names.
How long a class is kept. A class and everything sent to it are deleted automatically when the class expires, 7 days after the teacher opened it, or sooner if the teacher closes the class. Class lives show no advertisements. The class feature is meant for players 13 and over, like the rest of DECADES.
Teachers. Only teachers we have verified by email can open a class. A teacher writes to hello@aevest.net with their name and school; we keep the teacher's name, school and email address in our mailbox to issue and manage their teacher code. The teacher code is stored on our server only as a one-way hash, beside a short note of the teacher's name and school and whether the code is active. There is no teacher account and no password. For each class, the server keeps the class name the teacher typed, the level, the seed of the shared life, when it was opened and when it expires, a one-way hash of the teacher's private class key, and a short one-way reference to the teacher code that opened it. It keeps no email address with a class.
Abuse limits for classes. Class requests have their own short-lived counters keyed by IP address: how many classes an address opened today (kept one day) and how many class requests it made this hour (kept one hour). The number of classes opened with each teacher code today is counted the same way, under the one-way reference, never the code. The IP address is never stored with a class or a class life.
The leaderboard server runs on Cloudflare Workers with Cloudflare KV storage (Cloudflare, Inc., USA), which processes this information on our behalf under Cloudflare's own terms and security standards.
DECADES Plus is a subscription (monthly, every three months or yearly, as offered) sold through Google Play. It is sold only inside the Android app, through Google Play. Google LLC processes the payment under its own privacy policy and terms. We receive no payment card details. The app stores a purchase token on your device so the purchase can be recognised and, through Google Play, restored on your other devices signed in to the same Google account.
beacon.min.js): it sets no cookie, keeps no identifier for you and tells us only totals, such as how many pages were opened, from which countries, in which browsers, and which sites linked to us.We use no third-party analytics provider, no social sign-in and no data brokers. The anonymous counts in section 3 and the page counting above are the only measurement there is. If any of this changes, this policy will be updated first and the change will be described here.
DECADES is a financial-literacy game intended for teenagers and adults (Google Play target audience: 13 and over). It is not intended for children under 13 and does not knowingly collect personal information from anyone. The class feature is meant for players 13 and over as well, and teachers should not use it with younger children. Parents or guardians who believe a child has submitted a leaderboard name may ask us to remove it (section 8).
Device-stored information stays until you delete it. Each weekly leaderboard record is deleted automatically 28 days after it was last updated. Feedback is deleted after 120 days and report records after 90 days. A transfer-code copy of a life is deleted after 30 days. A class, and every class life sent to it, is deleted when the class expires, 7 days after the teacher opened it, or sooner if the teacher closes it. A teacher code record, and the email a teacher sent us to get it, are kept while the code may be used and deleted when the teacher asks us. Abuse-limit counters expire after one hour, and the once-a-day checks on ratings and reports and the daily counts of classes opened after 24 hours. Anonymous usage counts are kept for about three months in Cloudflare's analytics store.
The website and leaderboard are served over HTTPS. Leaderboard and class submissions are size-limited, rate-limited and sanitised before storage, and display names are sanitised again before they are shown to other players. Teacher codes and private class keys are stored only as one-way hashes. No system is perfectly secure; if we learn of a breach affecting leaderboard data we will publish a notice on the website.
Some artwork, sound effects, music and written scenarios in DECADES were produced with the assistance of AI tools and edited by us. The Service does not send anything you type to any AI service.
We may update this policy when the Service changes. The dates at the top will change, and material changes will be noted in the app's update notes.
Aevest Studio · hello@aevest.net
Aevest Studio · Privacy · Terms · Delete data · Copyright & DMCA · Aevest Studio