Security

Last updated: 1 August 2026

Ferrostorm is a single-player game that runs entirely on your device. That keeps its attack surface deliberately small: there are no accounts to steal, no servers holding your data, and no network play. Still, we build and ship it with care - the team behind Cauldron One Development builds security software for a living, and the same habits apply here.

How the game is built and shipped

• Offline by design. The game makes no network connections. All game data stays local to your device.
• No third-party SDKs. No ad networks, no analytics libraries, no embedded trackers - which also means none of their vulnerabilities.
• Signed, store-distributed builds. Ferrostorm is distributed only through the Apple App Store and Google Play, so every build is code-signed and passes the platforms' review and malware scanning. We do not distribute installers through other channels; if you find a "Ferrostorm" APK or installer elsewhere, it is not ours.
• Minimal permissions. The game requests no permissions beyond what it needs to run, and asks for nothing that touches your contacts, location, camera or microphone.
• Maintained engine. Ferrostorm is built on the open-source Godot engine, and we track engine and dependency updates, shipping security-relevant fixes with regular releases.

This website

The site is static, served over HTTPS, sets no cookies and loads no third-party resources.

Reporting a vulnerability

If you find a security issue in Ferrostorm or this website, we would like to hear about it. Email support@cauldron.one with a description of the issue and, if possible, steps to reproduce it.

• We aim to acknowledge reports within two business days.
• We will not pursue legal action against researchers who report in good faith, keep the issue confidential until it is fixed, and do not harm other users.
• We will credit you for the find if you want us to.

Please be proportionate: this is a video game about a magnetic storm, not an online banking platform. But every honest report gets a serious answer.