The short version. If you play without signing in, nothing about you leaves your phone — exactly as before. If you sign in with Apple or Google, your island is copied to a server so it survives losing or replacing your phone, and other players can see the name and face you choose. There is still no analytics, no advertising and no tracking of any kind.
Who this is about
Loot Lagoon is published by Guy Maslawi, an individual developer in Israel. Questions about this policy or about your data go to guymuslave@gmail.com.
Playing without an account
Signing in is optional and the game is complete without it. If you play as a guest, your island is written to a file inside the app’s private storage area on your device and stays there. It is not uploaded, shared or sold, and I have no way to read it. Nothing in the sections below applies to you.
The trade is worth stating plainly: a guest island exists only on that phone. Delete the app and it is gone, and I cannot restore it — including any coins or spins you paid for.
If you sign in
Signing in with Apple or Google creates an account and copies your island to a server, so that deleting the app or changing phone no longer loses it. From that point the following is collected:
- An account identifier from Apple or Google, and the identifier the game assigns you. These are what connect you to your island.
- An email address, passed on by Apple or Google when you sign in. If you used Sign in with Apple and chose Hide My Email, what I receive is Apple’s relay address rather than your real one. The email is never shown to other players and is never used to match accounts.
- The name and face you choose, which other players can see. The name is first suggested from your Apple or Google profile, and you can change it at any time in Options.
- Your game state — coins, spins, island level, buildings, cards, collections, quest progress, notification preferences, and a record of which purchases have been delivered to you.
- Raids — that a raid happened between two islands and what was taken, so the player who was raided can be shown it when they next open the game.
- Reports and blocks you make, so the person reported stops being offered to you and so repeated reports can be acted on.
What other players can see
Only the name and face you chose, your island number, your star count and how much is in your vault — the same things you can see about them. Your email address, your account identifiers and your purchase history are never shown to another player.
If a name is aimed at you or is offensive, the flag beside it on the leaderboard reports it and stops that player being matched with you again.
Where it is stored
On servers operated by Supabase, in the European Union, acting as my data processor. Supabase also handles the sign-in itself. No other company receives any of it: there is no analytics provider, no advertising network and no data broker involved at any point.
Why it is collected
For the app to work, and for nothing else. The account exists so your island survives your phone; the game state is the island; the raid records are the game. None of it is used to profile you, to advertise to you, or to personalise what you are shown.
Tracking
Loot Lagoon does not track you. It does not use the Advertising Identifier
(IDFA), does not request App Tracking Transparency permission, contains no
analytics or advertising SDK, and shares nothing with anyone for advertising
purposes. The app’s privacy manifest declares
NSPrivacyTracking = false.
Purchases
In-app purchases are processed entirely by the store you installed the game from — Apple on the App Store, Google on Google Play. I never receive, see or store your payment card, your billing address, or your Apple or Google account. What is recorded is only which purchases that store has confirmed, so that a pack interrupted mid-delivery can be handed over on the next launch, and so that what you paid for is restored with your island.
The store’s own handling of a purchase is governed by Apple’s Privacy Policy or Google’s Privacy Policy, not this one.
How long it is kept
For as long as you have an account. When you delete your account the island is marked deleted immediately and stops appearing anywhere in the game, and the sign-ins attached to it are removed at once. The island itself is erased after thirty days — that window exists so that a deletion made by mistake, or the wrong island chosen when two are merged, can still be undone if you write to me.
Children
Loot Lagoon contains simulated gambling and randomised paid items. It is rated 17+ on the App Store and 18+ on Google Play, is not directed to children, and is not part of any children’s category. I do not knowingly collect information from children. If you believe a child has created an account, write to me and I will delete it.
Your rights
Options → Delete account & data deletes your account from inside the app, without emailing anyone: it removes your island from the server and from this device, along with the sign-ins attached to it. Deleting the app alone removes the copy on your phone but not the one on the server, so use the in-app option if you want it all gone.
If you are in the EEA or the UK, I am the controller of the data described above and Supabase is the processor. The lawful basis is performance of the contract between us — providing the game you asked for. You have the right to access, correct, export, restrict or erase your data, and to complain to your local supervisory authority. Write to guymuslave@gmail.com and I will answer.
Changes to this policy
If what is collected changes, this page is updated and the effective date above changed before that version is released.