Privacy Policy

Last updated: October 23, 2026

Introduction

Digital Horizon Software LLC ("we", "us", or "our") makes the following products: the mobile apps Open Verdict, Laneworks, and SC Ship Database; the SC Ship Database Hangar Exporter browser extension; and the websites digitalhorizonsoftware.com and openverdict.app. This is the single privacy policy for all of them. It explains what information each product collects, why, who we share it with, how long we keep it, and your rights. If you used a product of ours that we no longer offer and want any data about you deleted, contact us at the address below.

In short: we collect only what each product needs to work. We never sell your personal information. We never collect payment card numbers: purchases are handled by Apple and Google, and optional support payments by Ko-fi. Some products use AI services; when they do, this policy says exactly what is sent. You can delete your data, and for Open Verdict you can do it yourself from inside the app.

Information We Collect

The data we collect varies by product.

SC Ship Database

SC Ship Database does not require an account and has no login. Your saved loadouts, favorites, fleet, and cached ship data are stored locally on your device and are never transmitted to us.

Hangar Connect. If you choose to import your Star Citizen hangar, the app opens Roberts Space Industries' own website in an in-app browser, where you sign in to RSI directly. We never see, receive, or store your RSI username or password. When you tap to import, the app reads the list of ships and items on your RSI pledges page and saves it on your device as your fleet; it is not sent to us. RSI's sign-in session stays in the in-app browser until you choose Disconnect, which clears it.

Hangar Exporter browser extension. The SC Ship Database Hangar Exporter extension adds a Download Hangar button to your RSI pledges page. It reads that page in your own browser, with your existing RSI login, and saves the result as a file on your computer. It never sees your password, and nothing it reads is sent to us or anyone else: it has no server, analytics, or tracking. If you then import that file into SC Ship Database, it stays on your device as described above.

Fleet advisor. If you use the fleet advisor, the activities, budget, and size preferences you choose are sent to our server to rank suitable ships. They are not linked to you or your device and are not stored.

If you rate a ship using the in-app star rating, we store the rating together with an anonymous rating identifier. This identifier is a random value generated on your device the first time it is needed. It is not derived from your device hardware, your advertising ID, or any account, and it is not linked to your name, email address, or any other identifying information — we hold nothing that could connect it to you. Its only purpose is to prevent duplicate ratings for the same ship and to let you change a rating you previously gave. The identifier is removed from your device when you uninstall the app. To request deletion of ratings associated with your device, contact us at the email address below.

TFIC. TFIC is a Star Citizen player community with its own website and app at tficorg.org. SC Ship Database gets its ship data from the same server that runs the TFIC website, and its anonymous ratings are stored there too. Ratings are never linked to a TFIC member account, though average ratings may also appear on the TFIC website. If you have a TFIC member account, that account is covered by TFIC's own privacy policy, not this one. You don't need a TFIC account to use SC Ship Database.

Deleting your ratings. Ratings can't yet be deleted from inside the app, though you can change one at any time. Because a rating is tied only to the random identifier on your device, we can't find yours from your name or email. To have your ratings removed, email us the ships you rated and roughly when; we will remove the matching ratings we can identify. Once you uninstall the app, the identifier is gone and your ratings can no longer be connected to you by anyone.

Supporting us on Ko-fi. SC Ship Database and our websites link to our Ko-fi page. If you choose to support us there, Ko-fi processes your payment under its own privacy policy, and we receive only what Ko-fi shares with creators, such as your display name and any message you leave. We use it only to thank you and keep our records.

Laneworks

You can play Laneworks as a guest, without signing in. A guest gets an anonymous Firebase account: a random ID with no name or email address attached. A guest's progress is saved to that account, so if you sign out as a guest you lose it, unless you first save it to a Google or Apple account in Settings. Laneworks' online features (sign-in, saved progress, scores, leaderboards, daily challenges, seasonal events, and shared maps) all run on Google Firebase; we don't run a separate server for it. We collect:

Account data — if you sign in, your display name and email address, and with Google also your profile photo, via Google Sign-In or Sign in with Apple and Firebase Authentication. If you use Apple's Hide My Email, we receive Apple's relay address instead of your own.
Progress — your unlocked levels, map progress, achievements, and daily-challenge streaks, stored in Google Cloud Firestore so they follow you between devices.
Username and scores — the username you choose (3–16 characters) and your scores. If you opt in to the leaderboard, your username and score are visible to other players. Daily-challenge and seasonal-event scores are shown on those events' boards under your username.
Shared maps — maps you choose to share in the community gallery, and which maps you like. Shared maps are visible to other players.
Purchase verification — when you buy the premium unlock, the store's purchase token, which our server checks with Google Play or the App Store. We never receive your payment details.

Whether or not you sign in, Laneworks uses Google Firebase Analytics (how the app is used, such as levels played) and Firebase Crashlytics (crash reports, with device model and OS version) to improve the game. Both are linked to your Firebase account ID (for a guest, the random guest ID), so we can tell which crashes and sessions come from the same player. Free players see ads from Google AdMob. On Android, these ads may be personalized using your device's advertising identifier. On iOS, Laneworks shows only non-personalized ads and does not track you across other companies' apps, so it does not show Apple's tracking prompt.

You can delete your Laneworks account from inside the app. This deletes your sign-in record, profile, progress, and leaderboard entry. To also remove your daily-challenge and event scores and any maps you shared, contact us.

Open Verdict

Open Verdict is an AI-driven detective fiction game. When you use it, we collect:

Account data. You sign in to play. We receive your email address (which may be an Apple private relay address) and a provider identifier from Sign in with Apple or Google Sign-In, or your email address and a securely hashed password if you register by email. We never store passwords in plain text. If you link more than one sign-in method (Apple, Google, or email), we store the provider identifier for each one so any of them can open your account. When you request a password-reset or email-confirmation code, we store a one-way hash of the code (never the code itself), the time it expires, and how many attempts were made. Codes expire after 10 minutes, except an account-recovery code sent by our support team, which expires after 24 hours.
Security records. To protect accounts from password guessing and to stop our code emails being used to flood an inbox, we record failed sign-in and code attempts and code requests, with the email address used, your IP address and the time. These records are used only to slow down repeated attempts and are deleted after 30 days.
Detective profile. The detective name, pronouns, and portrait you choose. Your portrait is chosen from the game's gallery; we do not collect photos of you.
Gameplay. The cases you start, the questions you ask in-game characters and their answers (so you can resume a case on any device), the notes you save, your accusations, case outcomes and grades, and career statistics we compute from them (such as cases solved and accuracy).
Questions balance. How many questions you have from purchases or rewards and how many you have used, so we can apply what you bought (see "Purchases" below).
Leaderboard. Your detective name, portrait, rank title, and score totals appear on the in-game rankings, which other players can see. A weekly "Detective of the Week" is shown to all players.
Feedback. If you send feedback from inside the game, we store your message with the screen and case it was sent from, your app version, and your platform.
Account recovery. If you lose access to your account and contact us, we first email a code to the address on that account and ask you to send it back to us. If that address no longer works, we may instead accept the order number from your Apple or Google receipt for a purchase made on the account; in that case we email a notice to the account's address and wait 7 days before moving anything, so its owner can stop it. We move your progress and purchases to a new account only after you ask us to in writing. We use this information only to verify you, and we keep a record of the recovery (the accounts involved, when, and the proof given) for as long as the new account exists.
Device data. A device identifier (Apple's identifierForVendor or the Android device ID), used only for fraud prevention and to limit how many accounts one device can create, plus your platform (iPhone, Android, or web) and app version. We don't record your device model or operating system version.
Notification token. If you allow notifications, a push token so we can send reminders about your own unfinished cases. These are never promotional, are sent at most once per case, and can be turned off in your device settings.
Install source. If you reached the app through one of our links, the campaign name on that link (for example, which social post you came from), as passed on by Google Play or our website. We use it only to learn which of our posts bring in players. We do not store ad-click identifiers.
Product analytics. A small set of structural events — for example, when a session starts, a case is started or completed, the store is opened, or a purchase completes. Each records the event type, the time, your account id, app version and platform, and only the ids and choices relevant to that event (such as a case id or product id). Analytics events never contain what you type to characters or what they say. Analytics are first-party only: they are stored in our own database and are not sent to any third-party analytics service.
Error reports. When the app hits an error, it sends us a report: the error message, a technical stack trace, which screen you were on, whether it was fatal, and the time, linked to your account. Like analytics, error reports are first-party only and stored in our own database.
Log data and approximate location. Our servers record your IP address and request details in operational logs. We may derive an approximate, coarse location from your IP address. We never collect precise location.
Purchase records. Which products you bought and when, as confirmed by Apple, Google, and RevenueCat. We never receive your payment card details.

Device permissions. Besides Apple's tracking prompt on iOS (see "Cookies, Advertising, and Tracking"), Open Verdict asks for one optional permission, notifications (the case reminders above); declining it does not limit the rest of the game. Open Verdict does not record audio. The current Android version (1.0.3) declares the microphone permission because an audio library we use adds it by default, but it never requests or uses it; the next version removes it. On phones, dictating a question uses your keyboard's own dictation, handled by your phone. On the web version, if you use the dictation button, your browser asks for microphone access and turns your speech into text itself; only that text reaches us, as your question. We never access your contacts, calendar, photos, camera, or precise location.

Open Verdict: how AI is used

Each suspect and staff character (the Captain, the Coroner, and the Forensics specialist) is an AI agent with its own authored persona, running on Anthropic's Claude. When you ask a character a question live — by typing it, picking it from Suggestions, or presenting evidence — the question is sent to our backend and forwarded to Anthropic, together with that character's persona, your detective name and pronouns, and the case context (the conversation so far and the evidence you have collected), so the character can answer in role. Before it is sent, each message is automatically screened for prohibited content; if something is flagged, we record only the type of content flagged, never the text itself.

Free cases can always be played with prepared questions, which are answered from the case file and never use AI. Each free case also includes one live run in which questions are answered by AI as described above. If you send feedback, it may be summarized for our review using Anthropic's API.

Open Verdict: purchases and questions

Live AI questions on paid cases are bought as questions: every answer a character gives you live uses one. Questions come from in-app purchases (Quiet Desk, Starter Pack, Detective's Edition), from a Bureau Premium subscription's monthly allowance, or from in-game rewards. We store your question balance and your monthly allowance usage as numbers on your account. These contain no personal information beyond the counts themselves.

How We Use Your Information

We use the information described above to:

Provide, operate, and maintain our products, including saving your progress and syncing it across your devices;
Create and manage your account;
Send you account and security emails you request or need, such as password-reset and email-confirmation codes, and a notice when your password or sign-in methods change;
Process purchases and subscriptions and apply what you bought;
Respond to your requests and provide support;
Send optional reminders about your own unfinished Open Verdict cases, if you allow notifications;
Protect our products, including fraud prevention and abuse detection;
Show advertising to free Open Verdict players through our advertising partner (see "Cookies, Advertising, and Tracking");
Understand how our products are used so we can improve them; and
Comply with our legal obligations and enforce our terms.

We do not send marketing or promotional communications.

Legal Bases (EU and UK users)

If you are located in the EU or UK, we process your personal information only when we have a valid legal basis: to perform our contract with you (providing the products you use); for our legitimate interests (such as security, fraud prevention, and improving our products); with your consent (for example, notifications and, on iOS, personalized advertising); or to comply with legal obligations.

Third-Party Services

We share information only with the service providers that help us run our products. Each is listed with the product it serves:

Star Citizen Wiki (SC Ship Database) — hosts many of the ship images shown in the app; images are loaded directly from their servers, which receive your IP address. See: Star Citizen Wiki Privacy Policy
FleetYards (SC Ship Database) — hosts ship thumbnails and supplies supplementary ship data; images are loaded directly from their servers, which receive your IP address. See: FleetYards
Roberts Space Industries (SC Ship Database) — the in-app news feed is fetched from the public RSI Comm-Link page, which receives your IP address. See: RSI Privacy Policy
Google Firebase (Laneworks) — Authentication (sign-in), Cloud Firestore (progress, profile, scores, shared maps), Cloud Functions (score submission and purchase verification), Analytics (app usage), and Crashlytics (crash reports). See: Firebase Privacy and Security
Google Play and the Apple App Store (Laneworks) — process in-app purchases
Ko-fi (SC Ship Database, our websites) — processes optional support payments. See: Ko-fi Privacy Policy
Anthropic, PBC (Open Verdict) — runs the AI characters, and summarizes feedback for our review, as described above. See: Anthropic Privacy Policy
RevenueCat, Inc. (Open Verdict) — in-app purchase verification and subscription status across iOS and Android. See: RevenueCat Privacy Policy
Apple App Store and Google Play (Open Verdict) — process in-app purchases on iOS and Android
Sign in with Apple and Google Sign-In (Open Verdict) — sign-in for players who choose them
Resend (Plus Five Five, Inc.) (Open Verdict) — sends account and security emails, such as password-reset and email-confirmation codes, to the address on your account. See: Resend Privacy Policy
Google AdMob (Open Verdict, Laneworks) — shows advertisements to players without a paid purchase (in Open Verdict, between cases); may collect device identifiers, IP address, approximate location, and app usage data. Every paid Open Verdict purchase turns off ads. See: Google Privacy Policy
Expo (650 Industries, Inc.) (Open Verdict) — delivers push notifications to your device using your notification token. See: Expo Privacy Policy
Railway Corp. (Open Verdict, SC Ship Database) — hosts our backend servers and databases. See: Railway Privacy Policy
Cloudflare, Inc. (Open Verdict, our websites) — hosts game images and audio, and provides DNS and website delivery. See: Cloudflare Privacy Policy

We may also share or transfer information in connection with a merger, sale of company assets, financing, or acquisition of all or part of our business. We do not sell your personal information.

AI-Generated Content Disclosure (EU AI Act)

In line with the EU AI Act and similar content-transparency requirements elsewhere, we identify which Open Verdict content is produced or assisted by artificial intelligence:

AI-generated, in real time: what suspects and staff characters say when you question them live — on paid cases, and during a free case's live run — is generated by Anthropic's Claude in response to your questions. It is generated fresh each time and is not pre-recorded.
Authored, not AI-generated: the prepared questions and answers in free cases are written by the developer in advance. No AI is used when you play a free case with prepared questions.
AI-generated voice acting: all voice acting (Captain narration, suspect alibi readouts, victim background, accusation reveals, era character introductions) is synthesized with ElevenLabs from scripts written by the developer. No player data is sent to ElevenLabs.
AI-assisted artwork: character portraits, victim portraits, scene art, and decorative interface art are produced in advance with AI image models (fal.ai's FLUX models), guided by hand-written prompts and finished by the developer. No player data is ever sent to fal.ai; the app and our servers don't use it.
Authored game design: cases, suspects, motives, evidence, the killer's identity, clues, and storylines are written by the developer. The AI does not invent crimes or choose killers; it plays a pre-written character within a pre-written case.

This disclosure is also shown inside the app's About screen.

Cookies, Advertising, and Tracking

Our mobile apps do not use cookies. In Open Verdict, and in Laneworks on Android, Google AdMob uses your device's advertising identifier to deliver and measure ads. Laneworks on iOS shows only non-personalized ads. In Open Verdict on iOS, personalized advertising is shown only if you allow it through Apple's App Tracking Transparency prompt; you can change this at any time in Settings → Privacy & Security → Tracking. On Android, you can reset or limit ad personalization in your device's ad settings. In Open Verdict, until we add an EU consent tool, we show only non-personalized ads to players in the European Economic Area, the UK and Switzerland, and we do not use personalized advertising there. Laneworks uses Google Firebase Analytics and Crashlytics, described above. Open Verdict and SC Ship Database use no third-party analytics; Open Verdict's own gameplay analytics stay in our database. Our websites may use cookies for consent management and do not use Google Analytics.

Most web browsers include a Do-Not-Track ("DNT") setting. There is no agreed standard for responding to DNT signals, so we do not currently respond to them.

International Transfers

Our servers are located in the United States. If you use our products from outside the United States, your information is transferred to, stored, and processed in the United States. Where required, these transfers are protected by appropriate safeguards, including the European Commission's Standard Contractual Clauses.

Data Retention

SC Ship Database ship ratings and their associated anonymous rating identifier are retained for as long as the rating stands, so that the average shown in the app stays accurate. You can change a rating you previously gave, which replaces the earlier value; the app does not currently provide a way to delete a rating outright. The identifier is removed from your device when you uninstall the app, but ratings already submitted remain until you ask us to remove them — you can do so by contacting us at the address below. Your saved loadouts, favorites, and cached ship data never leave your device and are cleared by uninstalling the app.

Laneworks account data, progress, and scores are kept in Google Firebase for as long as your account exists. Database backups are kept for 30 days and then deleted automatically. Shared maps stay in the community gallery until removed. Firebase Analytics and Crashlytics data are kept under Google's retention settings for those services. Progress stored only on your device is cleared by uninstalling the app.

Open Verdict keeps your account, detective profile, gameplay (including the questions you asked and the answers you received), purchase records, question balance, feedback, and analytics events for as long as your account exists. When you delete your account — in the app under Profile → Delete account permanently, or by contacting us — all of it is permanently deleted from our database immediately, except security records of failed sign-in attempts made with your email address, which are deleted 30 days after the attempt. Sign-in and verification codes are deleted within a few hours of being used or expiring, and security records of failed attempts are deleted after 30 days. Our server logs record only your account id and the time of the deletion, so we can show it happened; like all our operational server logs, these are kept only as long as our hosting provider retains them, and are not copied anywhere else. We keep backups of our database so we can recover from a failure; deleted data can remain in those backups for up to 90 days, until they expire. Backups are used only to restore service, and if we ever restore one, we delete again any accounts that were deleted after it was made. Anthropic's retention of the requests we forward is governed by its own privacy policy.

Data Storage and Security

Our apps may store data locally on your device for offline access and better performance. Laneworks stores signed-in players' progress, profile, and scores in Google Firebase. Open Verdict stores account and game data in our PostgreSQL database hosted on Railway; game images and audio are stored on Cloudflare R2.

We use organizational and technical measures to protect your information, including hashed passwords, encrypted connections (HTTPS), and server-side authorization checks. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Children's Privacy

Our products are not directed at children under 13, and we do not knowingly collect personal information from children under 13. Open Verdict asks players to confirm they are at least 13. If we learn that we have collected personal information from a child under 13, we will deactivate the account and promptly delete that data. If you believe we have, please contact us.

Your Rights

Depending on where you live, you may have the right to access, correct, delete, or obtain a copy of your personal information; to restrict or object to its processing; and, where processing is based on consent, to withdraw that consent at any time. In the EU, EEA, and UK these rights come from the General Data Protection Regulation.

United States residents. Residents of California, Virginia, Colorado, Connecticut, Utah, and other states with comprehensive privacy laws may have additional rights, including the right to know, access, correct, and delete personal information, to obtain a copy of it, and to opt out of the "sale" or "sharing" of personal information and of targeted advertising. In the past twelve months we collected these categories of personal information: identifiers (such as email address and device identifiers); commercial information (purchase history); internet or other electronic network activity (usage data); approximate geolocation (derived from IP address); and inferences (game statistics). We do not sell personal information for money. However, the use of the device advertising identifier by Open Verdict, and by Laneworks on Android, with Google AdMob to show personalized ads may count as "sharing" or a "sale" under some state laws; you can opt out using the device controls described above. We do not offer financial incentives in exchange for personal information.

To exercise any of these rights, including the right to appeal a decision we make, contact us at support (at) digitalhorizonsoftware.com or by post at the address below. Open Verdict players can also delete their account directly in the app. We respond within the time required by applicable law (generally within 30 days), and we may need to verify your identity first.

Changes to This Policy

We may update this privacy policy from time to time. Changes are posted on this page with an updated "Last updated" date and take effect when posted.

Contact Us

If you have questions about this privacy policy, or to exercise any of the rights described above, contact us at support (at) digitalhorizonsoftware.com or by post:

Digital Horizon Software LLC
176 Mine Lake Ct
Raleigh, NC 27615
United States of America