Security updates and patches are only provided for the latest version and the main branch.
| Version | Supported |
|---|---|
| 0.8.x | ✅ |
| < 0.8.0 | ❌ |
Any change, contribution, or patch to this project must not introduce a greater security risk to the user than the Unity engine itself already carries. Contributions that add new attack surface, unnecessary network activity, unnecessary data collection, or unnecessary system access will be rejected.
This game is required to work without requesting any permissions or system rights from the user, with a single exception: on Linux, the OS-level permission to access the audio device (needed for sound/music playback) may be requested, as this is a standard requirement of the audio stack rather than a project-specific request.
The application does not need, and must never request, access to:
- Camera
- Gyroscope / motion sensors
- Microphone
- Bluetooth
- Wi-Fi (or any other network/radio access)
- Any other system permission not explicitly listed above
The Google Play build uses Google Play Games Services solely to handle achievements. This build is uploaded to Google Play exclusively by the project maintainer (GGalya1). All Google Play–related code is inactive and does not execute on platforms where it is not needed (i.e. outside of the Google Play build).
If you discover a potential security vulnerability in this project, please report it responsibly:
- Do not open a public issue.
- Submit a report via GitHub Private Vulnerability Reporting or send an email to
garturmail@gmail.com. - Please include a brief description of the issue and steps to reproduce it.
You can expect an initial response within 48-72 hours. Thank you for helping keep this project safe!