Privacy notice
Last updated 4 October 2026. This notice covers our games, starting with Eggspedition, and this website.
The short version
- Eggspedition has no sign-up, no ads, no analytics and no tracking.
- To run the leaderboard it stores a random player ID, a random climber name (like PluckyPuffin42) and your climb results. It never asks for your name, email, location, contacts or photos.
- If you use our contact form, we use what you send only to reply to you.
- This website uses no cookies and no third-party scripts or fonts.
- We never sell your data. You can ask us to see or delete it at any time.
1. Who we are
High Explosive is the trading name of Charles Cohen, a sole trader based in the United Kingdom ("we", "us"). We are the controller of the personal data described here under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
To contact us about privacy, use our contact form and choose "Privacy or deleting my data".
2. Eggspedition
What the game stores on our server
The first time Eggspedition goes online, it creates a long random secret on your phone and registers you as a new player. There is no account to make and you never give us your name or email. Our server keeps:
| Data | What it is | Why |
|---|---|---|
| Player ID | A random identifier made by our server. | To link your results together. |
| Secret (hashed) | A one-way hash of the random secret on your phone. We can't turn it back into the secret. | So only your phone can submit results as you. |
| Climber name | A name made from our word lists, like GoldenPebble79. You can switch to another suggested name, but you can't type your own, so it can't contain your real name. | To show you on the leaderboard. |
| Climb results | For each challenge: which climb, how many ropes you used, whether you cleared it, your points, and when. Also your best run. | To run the leaderboard, show how others did on the same climb, and balance the difficulty. |
Your climber name and scores are shown to other players on the in-game leaderboard.
When the game talks to our server, your IP address is necessarily seen by our hosting provider and may appear in its short-lived technical logs. We don't use it to identify you or track you.
What stays on your phone
Your secret is kept in your iPhone's Keychain, so your scores survive a reinstall. Your settings (music, sound, camera zoom), your progress and any results waiting to be sent while you're offline are kept on your phone and are not sent to us, apart from the results themselves once you're back online.
What the game does not do
No advertising, no analytics or tracking SDKs, no tracking across other apps or websites, no location, and no access to your contacts, camera, microphone or photos. Eggspedition does not use Apple's App Tracking Transparency because it doesn't track you.
Our lawful basis
We rely on our legitimate interests in running the game's online features (the leaderboard and climb statistics), preventing cheating, and improving the game's balance. The data is pseudonymous and minimal, and you can ask us to delete it at any time.
Apple
You download Eggspedition from Apple's App Store. Apple handles your Apple ID, payment and download information under its own privacy policy. If you have agreed to share crash reports and app analytics with developers in your iPhone's settings, Apple may give us anonymous crash and usage statistics; we use these only to fix bugs.
3. This website
Contact form. If you send us a message, we receive your name, email address, the topic, which game (if any) and your message. We use it only to reply to you and help with your request. Our lawful basis is our legitimate interest in answering you, or taking steps you've asked for. The message is sent to us by email using our email delivery provider.
Server logs. Like any website, our hosting provider records technical information about requests (such as IP address, browser type and the page asked for) to keep the site running and secure. We also briefly keep a count of messages sent from each IP address, in memory only, to stop spam.
No cookies. This site sets no cookies, uses no analytics, and loads no fonts or scripts from other companies, so there's nothing to consent to.
4. Who we share data with
We never sell or rent personal data and we don't share it for advertising. We use a few service providers (processors) who handle data only on our instructions:
| Provider | What for | Where |
|---|---|---|
| Supabase, Inc. | Database and server for Eggspedition's player and results data | EU (Ireland) |
| Fly.io, Inc. | Hosting this website | UK (London), with a US-based company |
| Resend (Plus Five Five, Inc.) | Delivering contact form messages to us by email | USA |
| Our email provider | Receiving and replying to your messages | Varies |
We may also disclose information if the law requires it, or to protect our rights, our players or the public.
5. Where your data is stored
Eggspedition's data is stored in the European Union, which the UK recognises as giving adequate protection. Some of our providers are US companies and may process data in the United States. Where that happens we rely on the UK Extension to the EU-US Data Privacy Framework where the provider is certified, or on the UK International Data Transfer Addendum to the EU Standard Contractual Clauses in the provider's data processing terms.
6. How long we keep it
- Eggspedition player and results: for as long as the game's online features run, or until you ask us to delete them. If we ever close the online features, we'll delete this data.
- Contact messages: for as long as we need to deal with your request, and then up to two years so we have a record of the conversation, after which we delete them.
- Hosting logs: kept by our providers for a short period (typically days or weeks) for security and troubleshooting.
7. Children
Eggspedition is suitable for everyone. Because it doesn't ask for names, emails or any contact details, and has no chat, ads or tracking, it collects nothing that would let us or anyone else identify or contact a child. The leaderboard shows only made-up climber names. If you are a parent and want your child's results removed, contact us with their climber name.
Our contact form is intended for people aged 13 or over. If you're younger, please ask a parent or guardian to get in touch for you.
8. Your rights
Under UK data protection law you have the right to:
- ask for a copy of the personal data we hold about you;
- ask us to correct it;
- ask us to delete it;
- ask us to restrict how we use it, or object to our using it;
- ask for it in a portable format.
To use any of these rights, contact us. For Eggspedition, include your climber name (shown on the game's title screen) so we can find your data. Because we don't know who players are, we may ask you to confirm details only the player would know, to make sure we don't delete someone else's scores. We'll reply within one month.
If you're unhappy with how we've handled your data, please tell us first so we can put it right. You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office, at ico.org.uk or on 0303 123 1113.
9. Security
The game's database is locked so the app can only reach it through specific functions that check your player secret. Secrets are stored only as one-way hashes. The website and the game only connect over encrypted HTTPS.
10. Changes to this notice
If we change what we collect or how we use it, we'll update this page and the date at the top. If a change is significant, such as a new kind of data, we'll also tell you in the game before it takes effect.