None. There is no server, sign-in or profile behind the app, and it never asks for your name, email, phone number or any other identifier. Everything described below is data you create inside the app, and it stays on your device.
To make the app work, BurrowRoster stores the following only on your device, using the operating system's local storage:
This data never leaves your device. It is not uploaded to BurrowRoster or to any third party. Uninstalling the app or clearing its storage deletes all of it permanently.
BurrowRoster requests no runtime permissions: no camera, microphone, location, contacts, photos or notifications — the app sends no notifications of any kind. The Android manifest declares the INTERNET permission, which ships with the standard Flutter template; the app makes no network requests, and because it is a normal (non-dangerous) permission you are never prompted for it.
BurrowRoster is fully offline. There are no API endpoints, no cloud sync, no remote configuration and no telemetry, and it works the same in airplane mode. The only way anything leaves the app is the "Share my standing" button, which hands a short line of your own totals to your device's share sheet — you pick whether and where to send it, and BurrowRoster itself transmits nothing.
None are integrated. The app is built only on open-source Flutter packages that run on the device: sqflite (local database), shared_preferences (local settings), flutter_riverpod (state), fl_chart (charts) and share_plus (system share sheet). There are no advertising, analytics, crash-reporting or attribution SDKs.
BurrowRoster is a general-audience utility and is not directed at children under 13. Because it collects and transmits nothing, it cannot gather personal information from a child, which keeps it consistent with COPPA and the GDPR provisions on children's data.
Everything the app holds is visible in the app itself, on the Today, Annals, Vessels and Roster screens. Swipe any entry on the Today screen to delete it, and change your goal, units, name, crest, weight or activity whenever you like. Uninstalling BurrowRoster removes the ledger, preferences, profile and badges with it — no copy exists anywhere else, so there is no account to close and nothing for us to export or erase.
If this policy ever changes, the "Last updated" date at the top of this page will be revised. Material changes will be noted in the app's release notes.
If you have any questions about this policy, please reach out: [email protected]