Privacy
Effective September 28, 2026. Top Level Ventures, LLC, d.b.a. Lathe & Lumber Woodworks, LLC.
This covers the ENDGRAIN game and this site. Plain language, because you should be able to read it.
The short version
Your shop lives on your device. There is no account, no login, and no cloud save. Purchases are handled entirely by the app store you bought from — we have no payment system of our own and no third party in between. We collect anonymous play data to tune the game, and you can switch it off in the game's settings. We show ads through Google. Nothing is sold to anyone.
Your save stays on your device
ENDGRAIN stores your shop in the app's own storage on your device. We do not upload it, we cannot read it, and we cannot restore it.
If you delete the app, your shop is gone. There is no backup and no sync. We would rather say that plainly than have you find out.
Anonymous play data
The game sends gameplay events to our own server so we can tune the economy and find bugs. Each event carries:
- A random install identifier and a random session identifier. These are generated by the app. They are not your name, your email, your Apple Account, your Google Account, or your advertising identifier, and they cannot be traced back to you.
- Gameplay counters — boards made, market results, coins, vouchers, calendar position, pile size, and similar figures.
- Timing and performance figures, so we can find the parts of the game that run slowly on real devices.
- When you buy something, which item it was and the price the store showed you. Never a payment method, never anything that identifies you. We use it to understand whether the game's economy is working.
- The app version, the platform (iPhone, iPad, Android or web) and the device model, so a bug can be tied to the build and the device it happened on.
- A short note when something in the game breaks: the error's message, with web addresses and file paths removed, so we can find and fix it.
- For a purchase, the store's transaction number, so a duplicate record can be told apart from a duplicate purchase. Never your payment details.
- If you installed the game from an ad on the App Store, which ad it was, as Apple reports it to the app: the campaign, ad group and search keyword's numbers and the day of the tap. Apple works this out without your advertising identifier and without tracking you, and it never tells us who you are. We use it to learn which ads bring players who enjoy the game.
No names, no email addresses, no contacts, no photos, no location, no browsing history. We use this to make the game better. We do not sell it, and we do not share it with advertisers.
How long we keep it
Play events arrive at our own endpoint on Vercel and are held in a hosted database run by Upstash, which is our only data processor. They are deleted there automatically after 90 days. The expiry is set on the data when it is written, so it happens whether or not anyone remembers to do it.
The two companies that receive data from this app — Google, for ads, and Upstash, for play notes — are bound by terms that protect it at least as well as this policy does.
Before that, we copy the events onto a computer we own. We keep that copy for as long as the game exists, because the point of it is to see how a shop changes over years. Nothing in it is a name, an email, or an account — it is counters against a random install identifier.
We use no third-party analytics service. There is no Firebase, no Amplitude, no Mixpanel, and no data broker of any kind in this path.
Purchases
Purchases are handled by the store you bought from — Apple's App Store on iOS, or Google Play on Android. We never see your card number, your billing address, your Apple Account, or your Google Account.
There is no purchase server and no third-party purchase service. When you buy or restore the Business License, the game asks the store directly, and the store answers yes or no. We keep no record of who bought what.
The license is recorded on this device when the store confirms it. The game does not check again afterwards.
A purchase is tied to the store account you made it on. A Business License bought on the App Store cannot be restored on Google Play, or the other way round. That is how the stores work, not a choice we made.
Ads
ENDGRAIN shows ads through Google AdMob: a rewarded ad you choose to watch at a market close, and an interstitial at the turn of the year. The Business License removes ads entirely.
Google collects device and advertising data to serve and measure those ads. Google's own description of that, and the list of its advertising partners, is at policies.google.com/technologies/partner-sites.
Google's ad software may estimate a rough location from your internet connection to choose which ad to show. We never see it.
On iOS you will be asked whether the app may track you across other companies' apps and websites. Say no if you want to. The game and its rewards work exactly the same either way — declining only makes the ads less well aimed. You can change your answer any time in iOS Settings, under Privacy & Security → Tracking.
On Android, ads use your advertising ID. You can reset it or delete it entirely in Settings → Google → Ads.
If you are in the EEA or the UK, you will see a consent screen before ads load on either platform. You can reopen those choices at any time from inside the game: BACK OFFICE → PRIVACY → AD PRIVACY CHOICES.
Children
ENDGRAIN is rated 4+ and there is nothing in it unsuitable for any age: no violence, no chat, no user-generated content, no social features, and no way for one player to reach another.
It is not directed to children. It is designed for adults, it shows advertising, and we do not knowingly collect information from anyone under 13. If you believe a child under 13 has played and sent us play data, write to us and we will delete it — see Your choices for what we need to find it.
Your choices
- Turn play data off. In the game: BACK OFFICE → PRIVACY, and switch analytics off. Nothing is sent after that, and nothing already sent identifies you.
- Stop the ad identifier. iOS: Settings → Privacy & Security → Tracking. Android: Settings → Google → Ads → delete or reset your advertising ID.
- Delete everything local. Delete the app. The save goes with it.
- Ask about play data. Write to us and we will answer. Because the data is keyed to a random install identifier with nothing personal attached, we may need that identifier from you to find anything at all — and if we cannot identify it, there is nothing to look at, which is the point of collecting it that way.
- EEA, UK, and California residents have rights of access, deletion, and objection under their own laws. Write to us and we will honour them.
The launch list, on this site
The form on this site records your email so we can tell you when ENDGRAIN launches.
The list is held as contacts with our email provider, Resend. We email when there is something to say. Leave any time using the unsubscribe link, or write to us. The list is not sold.
Changes
If this changes, the date at the top changes with it. Material changes get a notice in the game.
Contact
Top Level Ventures, LLC
522 W Riverside Ave Ste N
Spokane, WA 99201
USA