Privacy
Almost nothing is collected, on purpose
The goal was never "compliant". It was: hold as little as possible, so that compliance is nearly free and a breach would be nearly boring. What follows is the complete list, not a summary of one.
1 · What is stored
| Field | Why it exists |
|---|---|
| A hash of your Apple identifier | So you can sign in again as the same person |
| Username | So other players can find and recognise you |
| Avatar seed | A random string that generates your picture; no photo is ever uploaded |
| Language | So notifications arrive in the right one |
| Notification token | So your phone can be told it is your turn |
| Games, moves, scores, ratings | The game itself |
| Chat messages | The game itself |
| Friends, blocks, reports | The social features |
That is the complete list.
2 · What is not
- No email address. Sign in with Apple is asked for no scopes at all — not your name, not your email, not a hidden relay address. Nothing is requested, so there is nothing to leak.
- No real name.
- No contacts, photos, location, calendar, microphone or camera. The app asks for no such permission, which is why you never see the dialog.
- No advertising identifier, no third-party SDKs, no cross-app tracking.
- Not even your Apple identifier in a usable form. Apple's identifier is the same across every app from one developer, so it is salted, hashed and the original thrown away. A stolen database cannot be matched against any other service.
Analytics, where a deployment turns it on at all, is counts and durations only: games started, games finished, how long a match took. No event carries a user, a username, a board or a chat message, and the numbers are bucketed — "25–49", not 41 — because an exact score with a timestamp is a surprisingly good fingerprint.
3 · Your rights
| Access | Settings → Export my data. The whole thing, as plain JSON, immediately. |
| Erasure | Settings → Delete account. Irreversible, and it happens at once. |
| Rectification | Change your username whenever you like. |
| Restriction | Every notification category switches off separately, and you can block anyone. |
| Objection | There is no profiling and no advertising to object to. |
4 · What deleting actually does
One transaction, and then it is done:
- Your running games are resigned first, so your opponents get an ending rather than a board that silently stops.
- Devices and matchmaking entries are deleted outright.
- Chat messages are anonymised rather than removed — deleting them would tear holes in other people's finished games, and their history is their data too.
- Your account row is kept only as an empty marker with every field cleared, so that a deleted account cannot be silently resurrected by signing in again.
5 · How long things are kept
| Account and profile | Until you delete it |
| Games and moves | Until the account is deleted; finished games keep an anonymous seat |
| Sent notifications | 30 days |
| Expired login tokens | 30 days |
| Matchmaking queue | 10 minutes |
| Server logs | Method, path, status, duration. No request bodies, no chat, no tokens. |
6 · Where the data lives
LOOPLY is self-hosted: whoever runs the server picks the host and the jurisdiction and is the controller of the data on it. Nothing is sent to a third party except Apple, which delivers the notifications and verifies the sign-in. There is no analytics vendor, no crash reporter, no content network and no ad network.
7 · Children
There is nothing age-inappropriate in the game itself, but random matchmaking puts you in a chat with a stranger, which is why the listing recommends 9+. There is no age gate: LOOPLY does not know how old you are and does not want to, and asking would mean storing a birth date for no other purpose. Anyone who wants a closed environment can play private group games only — invited players, no strangers.
8 · Contact
Questions about your data, or a request you cannot make from inside the app: support@playlooply.com. A material change to what is collected requires a new version of this page and of the privacy text in the app, shown before you carry on playing.