Legal
Privacy Policy
Who operates Narco Toolbox
Narco Toolbox is operated by Leonard Żmij. You can contact us through the Support page or at contact@narcotoolbox.com.
Data on your device
Calculator inputs and results, saved calculation history, settings and a limited purchase-entitlement cache are stored locally in SQLite. The planning calculators are available in Free. Free gives access to the three newest saved calculations; Premium gives access to unlimited local history. If Premium ends, older entries are not deleted: the three newest remain accessible and older entries stay visible but locked until Premium is active again. Calculator values, results and history are not uploaded or synchronized by Narco Toolbox.
You can remove local app data by deleting individual saved calculations in the app, clearing app storage in Android settings or uninstalling the app. Clearing storage or uninstalling removes local history; we cannot restore it from a cloud account.
No game account or cloud sync
The app does not ask for a Narco Empire account, log in to the game or synchronize with a game or Narco Toolbox cloud account. It does not request access to your contacts, camera, microphone or photo library. A guide image is shared only when you choose the share action, through the Android system share sheet; the recipient you select may process that image under its own terms.
Purchases and subscriptions
Google Play processes subscription payments and RevenueCat manages purchase status and Premium access. They process the app-user identifier and data needed for billing and entitlements, including purchase history, product, subscription and transaction-status metadata. The app does not receive your payment-card details. Calculator inputs, results, saved history and game data are not included in billing requests. Google Play manages its store and payment records under its own responsibility. RevenueCat processes app purchase and entitlement data on our behalf under the applicable service and data-processing agreements.
Local guide reading status
Your read/unread marks and the indicators for new guide content stay in SQLite on your device. They are not uploaded as reading progress or sent to PostHog. Opening a guide may still generate the allowlisted guide_opened event; that event does not say whether you read or completed it.
Interface language in app analytics
Allowlisted app events also include ui_language: the current interface language code (en, pl, es, fr or de) at the time of the event. This is a language preference, not your location, nationality or guide-reading progress.
Promotional codes: Cloudflare Workers and D1
If you choose to check a promotional code in the app, it sends the code and its RevenueCat anonymous app-user ID over HTTPS to our promotion service on Cloudflare Workers. “Anonymous” is the SDK identifier name: in this processing it is a pseudonymous identifier, not proof of anonymity. Checking a code and making a promotional purchase require an internet connection.
The service checks campaign availability, binds a reservation to that RevenueCat identity and queries RevenueCat for subscription and entitlement history to check new-subscriber eligibility. Authenticated purchase confirmations from RevenueCat can contain app-user IDs and aliases, transaction ID, product/offer and subscription-period information. These are checked to match a purchase to its reservation and prevent duplicate use; the code itself does not grant Premium.
Cloudflare D1 stores keyed HMAC hashes of codes, RevenueCat identities and transaction IDs, with campaign information and reservation/redemption timestamps, plus temporary rate-limit counters. These hashes remain pseudonymous, not anonymous: matching is possible with the secret and relevant identifiers. The promotion tables do not store the raw code, raw customer ID or raw transaction ID. The Worker does not intentionally log these values or request payloads. Cloudflare nevertheless processes connection information such as IP addresses and network/request metadata to provide and secure the service; an IP-derived keyed hash is used for rate limiting. This is not a zero-data service or a guarantee of EU-only processing.
Promotion requests do not contain calculator values, results, history, reading marks or game-account data. Codes, RevenueCat identities and purchase-confirmation payloads are not sent to PostHog. We process the requested offer and its purchase verification under Article 6(1)(b) GDPR, and necessary abuse prevention and duplicate-use controls under our legitimate interests in Article 6(1)(f). See the Cloudflare and RevenueCat privacy information for their provider processing.
Promotion retention and deletion
Only expired attempt counters have an automatic cleanup handler in the current backend. They expire in short rate-limit windows and are deleted when the configured scheduled cleanup runs. Campaign expiry or cancelling checkout does not automatically remove reservations or purchase-confirmation records.
An administrator manually deletes unredeemed promotion reservations from the active D1 database no later than 30 days after the campaign ends. Code-redemption confirmations are deleted no later than 90 days after the campaign ends to allow promotion problems to be resolved. If a complaint is ongoing, only the records necessary to resolve it are retained until the case is closed; records whose normal deadline has passed are then deleted. This is an administrative deletion process, not an automatic Worker purge. Provider backups and technical records follow the provider’s applicable retention and safeguards; deleting an active D1 record is not a promise of instantaneous erasure from every backup.
For access or deletion requests concerning promotion data, contact contact@narcotoolbox.com. We may need minimal information to securely locate and verify the relevant record; do not send full codes, receipts, payment tokens or other sensitive data unsolicited. We can act on identifiable records under our control, subject to applicable rights and retention exceptions. The app has no promotion-data deletion button or deletion API. Clearing app storage or uninstalling does not delete server-side promotion records, cancel a subscription or remove Google Play/RevenueCat records.
PostHog EU analytics in the Android app
In configured production builds, limited PostHog EU analytics is active automatically. There is no in-app analytics opt-out switch. Events are linked to a random, pseudonymous installation identifier and marked app_source: mobile_app. The allowlisted events cover app opening or returning to the foreground; opening a section, guide, related content, calculator or Enforcer; opening a Premium preview or offer; starting or completing a Premium checkout; completing a calculation; and saving history. Depending on the event, properties are limited to the section, guide/calculator/Enforcer/content identifier, Free/Premium guide access, calculator mode, Premium entry point or monthly/annual plan. The SDK may add app version, build, app name/namespace and operating-system name.
We do not send calculator inputs, results or history contents, player resources, game-account data, notes, search text, files, email addresses, support messages, receipts, purchase tokens, transaction IDs or RevenueCat identifiers to PostHog. IP geolocation, Session Replay and person profiles are disabled. PostHog receives technical request information needed to deliver the service and processes these events in its EU infrastructure under its privacy notice.
For this limited app analytics we rely on our legitimate interest under Article 6(1)(f) GDPR in understanding feature use and improving the app. Installing the app is not treated as consent. Where applicable, you may object for reasons relating to your particular situation by contacting us; we will assess and honour applicable rights. This does not create an in-app opt-out switch.
Optional analytics on this website
Website analytics is separate and operates only after your optional consent. The website may send to PostHog EU a page view, consent-granted event, Google Play click, language change, cheat-sheet open or download, and FAQ opening. Events carry app_source: website, page path and language, a random identifier limited to the browser tab, and only the relevant CTA placement, language, guide/cheat-sheet/calculator content identifier or FAQ number. The website does not send URL query strings, form answers, email addresses or game/calculator data.
We store the consent choice in browser local storage and the tab identifier in session storage. We do not use cookies for website analytics; automatic capture, Session Replay, person profiles and IP geolocation are disabled. You can decline or reopen Analytics settings in the footer at any time. Declining does not affect the website.
Earlier beta applications
Beta registration has ended. If you previously applied through Google Forms, your submitted email and answers were used to organize testing and contact applicants, not sent to PostHog by this website. Responses are deleted or anonymized for no more than 30 days after the beta programme ends, unless longer retention is needed to establish, exercise or defend legal claims. Google may process account and technical information under its own terms.
Support, retention and requests
If you email support, we and the email provider receive the address, message and any information you choose to include. Do not send payment-card details, receipts, purchase tokens or calculator history. We use messages to answer your request and keep correspondence only as long as reasonably needed to resolve it and meet legal obligations.
For access, correction, objection or deletion requests about information we handle, write to contact@narcotoolbox.com. Explain the request without sending sensitive app data. We handle requests for data under our control, including data RevenueCat processes on our behalf, and instruct the processor where applicable, subject to identification and lawful retention requirements. You delete local data on your device; Google Play separately manages its store records. There is no Narco Toolbox account or cloud-history deletion feature.
Children and changes
Narco Toolbox is not directed to children. We may update this policy when app behavior, providers or legal requirements change; the effective date above identifies this version.
Unofficial companion app. Not affiliated with or endorsed by the creators of Narco Empire.