Your privacy.

Pre-release draft, prepared October 14, 2026. Effective date, operator details and shipping behavior require final verification. This draft describes the planned release; it is not a statement that the app is already available.

Loop Loot is a puzzle game from Lakeline Labs LLC (“we,” “us”). You can contact us about privacy at hello@lakelinelabs.com. This policy covers the iOS game. The Lakeline Labs website has its own privacy notice for website activity.

The short version

You do not need an account to play. Your game progress and personal bests stay on your device; we do not operate a gameplay-history server. Ad-supported play uses Google AdMob and involves data processing described below. We do not ask for your contacts, photos, microphone, precise location or health information.

Data stored on your device

The game stores saved games, scores, daily challenge progress, settings, tutorial status and a broad advertising age preference locally. We ask only for an age band, not a date of birth. That answer is used to decide whether advertising may be enabled; it is not sent to us as an account profile. Your device backup settings may include app data in an Apple-managed backup. We do not receive that backup.

You can clear local game progress from the game's settings. Deleting the app also removes its local app data, subject to device backups and Apple's behavior. Clearing progress does not refund or cancel a non-consumable App Store purchase; you can restore eligible purchases through Apple.

Advertising and privacy choices

Eligible adults in ad-supported play may see a labeled banner below the home screen, game board (including the daily challenge) and results. The banner uses a separate area from game controls. Settings, tutorials, onboarding, Collection and privacy screens do not show advertising. Optional full-screen recovery ads and occasional ads between completed endless runs are described before their relevant actions. Remove Ads disables every ad format.

Advertising is disabled when you select Under 18 or Prefer not to say, or have not selected an age band. When a session starts with one of these preferences, the game skips Google advertising and consent setup. It also skips that setup when it verifies your Remove Ads entitlement before starting advertising. An explicit request to reopen previously available Advertising privacy choices can contact Google’s consent service so you can manage an earlier choice; it does not enable advertising in protected or paid play. If you change to a protected preference after advertising has started, the game stops future ad requests and clears ready ads; it cannot undo processing that already occurred.

For adults who use the ad-supported mode, Google AdMob and its consent service may process network information such as IP address and an approximate location derived from it, app/device identifiers, ad impressions and interactions, consent choices, and diagnostic/performance information. Some of this processing supports ad delivery, measurement, security, fraud prevention and troubleshooting. Non-personalized ads may still require data and local storage; they do not mean data-free ads.

The app requests non-personalized advertising and disables Google's publisher first-party ID. We do not ask for permission to track you across other companies' apps and websites, and the release is intended to operate without that tracking or access to IDFA. We do not provide your saved board or personal bests to advertisers as a targeting profile. Google explains its handling of information at Google Privacy & Terms and How Google uses information from apps and sites.

Where required, a privacy message appears before ads can be requested. You may review available choices using Advertising privacy choices in Settings when that option is required for your region. You may also select private play in the game's age/privacy preference to stop future ad requests; the app discards cached ads. These choices do not remove information already processed by Google. Requests about that information may also be directed to Google using its privacy tools. Refusing optional consent does not prevent ordinary gameplay.

Purchases

Apple processes any Remove Ads purchase. The app checks signed transaction/entitlement information to enable and restore the feature. We do not receive your card number or payment credentials. Apple retains purchase records under its own policy. We may receive store sales reports and information you choose to send when requesting purchase support.

Developer diagnostic access

Loop Loot includes a hidden, read-only diagnostic menu for app maintenance. It is not needed to play. Opening Settings or tapping the version label does not contact the verification service. Only when you explicitly submit the shared eight-digit developer PIN does the app send that PIN and the app's bundle identifier over HTTPS to Lakeline Labs' verification service, hosted by Netlify. Your saved boards, scores, purchase records and advertising preferences are not sent to that service.

The verification service stores a salted scrypt verifier rather than a plaintext PIN. It compares a submitted PIN for this request and does not write PINs or request bodies to its application logs. Netlify processes ordinary connection and request information, such as IP address, to deliver the request, enforce request limits and protect the service. This is separate from advertising.

The app does not save the PIN. It keeps failed-attempt counters and a cooldown in the device Keychain to limit repeated attempts; these records may remain after reinstalling the app. An unlocked diagnostic session stays only in memory and closes when you dismiss it, leave the active app, or reach the three-minute limit. The menu displays local status only and cannot change purchases, privacy choices or game progress.

Support and messages you send

If you email us, we receive your email address and the information you include, such as app version, device model, screenshots or a description of a problem. We use it to answer you, fix problems, handle privacy requests and keep necessary business records. Do not send passwords, card details, identity documents or unrelated sensitive information. Email and hosting service providers process communications on our behalf under their applicable agreements. We do not add support contacts to marketing lists merely because they asked for help.

Why we process information

Where European or UK data protection law applies, we use information as necessary to provide requested support and purchase functionality, to meet legal obligations, or for legitimate interests such as securing and maintaining the service, after considering your rights. We obtain consent for optional processing where law requires it, including advertising storage or data use when applicable. Consent can be withdrawn through the available privacy controls without affecting processing already lawfully performed. Google may act under its own responsibilities for the advertising information it receives, as described in its notices.

Sharing and international processing

Information may be processed by Apple, Google, and our email/hosting providers for the functions described here. We may disclose information where required by law, to protect legal rights and security, or in a business transaction subject to appropriate protections and notice where required. We do not sell your support correspondence or local gameplay history to data brokers. Advertising disclosures may be considered “sharing” or another regulated practice under some laws even without payment for data; applicable opt-out choices are provided through Advertising privacy choices and the private-play setting.

We are based in the United States, and providers may process information in other countries. Where required, transfers rely on applicable adequacy arrangements, contractual safeguards or another lawful mechanism. Contact us for information about safeguards relevant to your request.

Retention

Local game information stays on the device until you reset it, delete it or replace it through device backup/restore. We retain support correspondence only as needed for the request and associated follow-up, normally no longer than 12 months after resolution unless a legal obligation, dispute or security issue requires more time. Privacy-request records and financial records may be retained as required to demonstrate compliance or satisfy law. Google and Apple determine retention for information they hold under their own roles and policies; deleting the game does not delete their records. Hosting connection logs and request-limit information follow the hosting provider’s service configuration and security retention policies.

Your rights

Depending on your location, you may have rights to access, correct, delete or receive a copy of personal information, restrict or object to processing, withdraw consent, or opt out of certain advertising uses. You may contact hello@lakelinelabs.com with “Game privacy request” in the subject. We will take proportionate steps to verify a request; we do not need a government ID simply to explain local data controls. We will explain if information is only on your device and unavailable to us. You may use an authorized representative where applicable. We do not deny ordinary gameplay for exercising privacy rights.

If we decline a request, you may reply to request review or appeal where applicable. You may also complain to your local data protection authority or relevant state regulator. We respond within the applicable legal period.

Children and young people

The ad-supported mode is intended for adults. Under-18 and undisclosed-age preferences use the game without advertising requests. We do not knowingly collect children's personal information through an account system or advertising in that mode. If you believe a child sent personal information to us or encountered advertising after selecting the protected mode, contact us so we can investigate and take appropriate steps. A parent or guardian should handle support messages for a child.

Security and changes

We use reasonable safeguards appropriate to the limited information we process, but no system is completely secure. We may update this policy when the game, providers or law changes. The current version and effective date will be available from Settings and the game website. Material changes will receive additional notice or consent where required.

Contact

Lakeline Labs LLC — hello@lakelinelabs.com

Publication gate: add the verified business mailing address and any required EU/UK representative contact before releasing in those territories; remove this publication note from the final notice.