Privacy Policy

Last updated: June 22, 2026

CASEFILE (“CASEFILE,” “we,” “us”) is a cold-case detective game operated by Cornerstone Technology Consulting. This policy explains what information we collect when you use CASEFILE on the web or in our mobile apps, how we use it, who we share it with, and the choices you have. CASEFILE is an online game: it needs a live connection to play, and an account to save your progress across devices.

Information we collect

• Account information. When you create an account, we collect your email address and a password. Your password is never stored in plain text; it is salted and hashed before storage.
• Gameplay data. Your progress through cases, the notes you write in the in-game notebook, your evidence board, scores, and ranks. This is saved to your account so it follows you between devices.
• Interrogation messages. When you question a suspect in the interrogation feature, the messages you type are sent to our AI provider to generate the suspect’s reply (see “Service providers” below). The conversation is stored with your game session.
• Communications. If you verify your email or reset your password, we send a one-time code to your email address through our email provider.
• Subscription status. If you subscribe, payment is processed by the app stores (Apple, Google) or our web payment processor. We receive your subscription status and the information needed to grant access; we do not receive or store your full card number.
• Limited technical data. Basic information necessary to operate and secure the service, such as request and error logs. We do not use third-party advertising networks or cross-app tracking.

How we use your information

• To run the game and save and sync your progress.
• To authenticate you and keep your account secure.
• To generate suspect replies in the interrogation feature using your typed messages.
• To send transactional emails you request (email verification, password reset).
• To process subscriptions and grant the access you paid for.
• To prevent abuse, debug problems, and meet legal and security obligations.

Service providers we share data with

We share data only with the providers that help us run CASEFILE, and only as needed to provide the service. We do not sell your personal information.

• Convex — our backend and database, which stores your account, progress, and interrogation transcripts.
• Vercel — hosting for the web application.
• OpenAI — processes the interrogation messages you type in order to generate suspect replies. OpenAI acts as our service provider for this feature; per its API terms, data submitted through the API is not used to train its models.
• Resend — delivers transactional email (verification and password-reset codes).
• Apple, Google, and our web payment processor — process subscription payments and report subscription status.

We may also disclose information if required by law, to enforce our terms, or to protect the rights, safety, and security of our users and the service.

How we protect your data

Data is encrypted in transit using HTTPS. Passwords are stored using a salted, iterated hash (PBKDF2), and login tokens are stored hashed. No method of transmission or storage is perfectly secure, but we take reasonable measures to protect your information.

Data retention and deletion

We keep your information for as long as your account is active. You can delete your account and associated data at any time:

• In the app or website: sign in, open Account, and choose “Delete account.” This permanently removes your account, progress, and interrogation transcripts.
• Without signing in: visit our account deletion page for instructions and a contact path.

After deletion we may retain a limited amount of information where we are required to for legal, security, or fraud-prevention reasons; we keep only what is necessary and for no longer than required.

Children

CASEFILE is a crime-themed game intended for a mature audience and is not directed to children. We do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us and we will delete it.

Your rights

Depending on where you live, you may have the right to access, correct, or delete your personal information, or to object to certain processing. To make a request, use the deletion options above or contact us at the email below. We will respond as required by applicable law.

Changes to this policy

We may update this policy from time to time. When we do, we will revise the “Last updated” date above. Significant changes may also be communicated in the app.

Contact us

Questions about this policy or your data? Email us at info@xautomate.io.

CASEFILE is operated by Cornerstone Technology Consulting.