The short version
Yumloop is one person. There is no sign-up form, no email address and no password to invent, and nothing here is sold or handed to advertisers. Your game progress lives on your device, backed up to your own iCloud, Google account or Steam Cloud. A small Yumloop account keyed to your Game Center, Google Play Games or Steam identity keeps the shared Daily leaderboard, and, with Sightline+ (or on Steam), a copy of your save so it can follow you between an iPhone, an Android phone and a Steam Deck. The only thing you can type into it is an optional display name, and you can delete it at any time from inside the game. If you play Sightline's online Elimination mode, that display name is shown to the other players in your match, and the match itself is forgotten minutes after it ends. A small amount of anonymous usage data tells me which parts of a game people actually play, and that's the extent of it.
Your progress
Your progress, settings, and anything you've unlocked are stored locally on your phone, and your save is also backed up to your personal iCloud storage under your own Apple ID so it can follow you to a new device or survive a reinstall. That backup is handled entirely by Apple, lives in your iCloud, and is never uploaded to me — I have no way to read it. On Steam the same job is done by Steam Cloud under your Steam account, and on Android by Google's app backup under your Google account, handled by Google. Separately from those, Sightline can keep a copy of your save in a Yumloop account so that it can move between different kinds of device; that is described under Yumloop account below. Deleting the app removes the local copy; the iCloud backup stays with your Apple ID.
What leaves your device
Yumloop games send anonymous gameplay events, things like a level being started or finished, or a menu being opened, through TelemetryDeck, a privacy-focused analytics service. The events are aggregated and are not tied to your name, email, or advertising identifier. I use them to see where players get stuck and which features get used. No advertising or cross-app tracking identifier is collected, and no App Tracking Transparency prompt is shown, because nothing here tracks you across other apps or websites.
If you sign in to Game Center on iPhone and iPad, leaderboards and achievements are handled by Apple under Apple's privacy policy; on Android the same job is done by Google Play Games under Google's privacy policy. Your nickname on that service and your score are visible on leaderboards you take part in. Signing in is optional and the game is fully playable without it.
Everyone gets the same Daily Sightline, and its leaderboard is shared across iPhone, Android and Steam. When you finish one, your completion time and the display name you chose are sent to the Yumloop account service described below so they can appear on that day's board. On iPhone your time is also posted to Game Center's leaderboard under Apple's privacy policy. No email, real name or device identifier goes with it, and skipping the daily means nothing is sent.
Sightline's online mode runs each match on the same Yumloop account service. While you play, it receives your display name, which kind of device you're on (iPhone or iPad, Android, or Steam), and your moves: the tiles you reveal, the boards you clear and the bomb that knocks you out, so it can keep every player's board in step and decide who wins. The other players in your match see your display name, your device type, how far you've got and where you finished, and once you're out you can watch another player's board live, as they can watch yours. There is no text or voice chat. A private room is found by a short code you choose to share, and a room link opens a page on the same service that only shows that code. Everything about a match is deleted ten minutes after it ends, and a room invitation expires after ten minutes; no IP address is kept.
When you tap Invite friends in a multiplayer room, Sightline asks your platform for your friends list (on iPhone, only if you've allowed it to see your Game Center friends) and sends those friends' player IDs, the same pseudonymous IDs described under Yumloop account, to the account service. It checks which of them already have a Yumloop account and adds those to your friends list in the game, and you to theirs, so you can invite each other. IDs that don't match anyone are discarded, not stored. Nothing else about your friends is sent, and deleting your account removes these links on both sides.
Any in-app purchase is processed entirely by Apple or Google Play. I never see your card details, billing address, Apple ID or Google account. The store shares only whether a purchase was completed, which is what unlocks the content on your device.
If you turn on streak reminders or update notifications, they're local notifications scheduled entirely on your device. Nothing about them is sent anywhere, and they can be switched off in the game's settings or in your phone's notification settings at any time.
Some screens load typefaces from Google Fonts, which means Google's servers see the request and the IP address it came from. No other information is sent, and I don't receive anything from it.
If you follow an in-game feedback link, it opens a Google Form. Only what you choose to type into it reaches me, subject to Google's privacy policy.
If you write to me, I have your email address and whatever you put in the message, for as long as I keep the thread. I use it to answer you and nothing else.
Sightline uses a small account service I run on Cloudflare. It is keyed to a pseudonymous identity from the platform you're on — a Game Center player ID that Apple issues for this game alone, a Google Play Games player ID, or your 64-bit Steam ID, each proven to me by Apple, Google or Valve rather than typed by you. For every player it can hold your Daily completion times, the display name you choose to show beside them, and the friend code and friends list you build inside the game, including friends found through your platform as described above. With Sightline+ on iPhone or Android, or on Steam where it is included, it also holds your compressed save (levels, stars, streaks, statistics and settings — nothing that identifies you) and the time it was last updated, so progress can follow you between devices. No email, real name, IP address or device details are kept. Saves only ever move forward, so a linked device can never overwrite a newer save with an older one. Linking two devices uses a short code or QR that expires after a few minutes and works once; on iPhone the camera is used only while you're on the Scan a code screen, and nothing from it is stored or uploaded. Settings → Account → Delete account removes everything the service holds about you immediately; the older save code transfer via dpaste.com has been retired and issues no new codes.
On Steam, friends, multiplayer invitations, leaderboards, achievements and the cloud backup of your save are handled by Valve under Steam's privacy policy; the Steam version (Windows, Mac and Steam Deck) sends the same anonymous usage events as the iPhone version to TelemetryDeck, tagged with the platform they came from. The only identifier is a one-way hash of your Steam ID, so the same person on a Steam Deck and a PC counts once and the hash can never be turned back into an ID.
What Yumloop never does
- No advertising, and no ad networks embedded in the games.
- No selling, renting, or sharing of personal data with anyone.
- No tracking you across other apps or websites, and no advertising identifier.
- No sign-up form, email address, or password anywhere in a Yumloop game. The only thing you can type in is an optional display name.
- No location, contacts, photos, or microphone access. The camera is used only while you scan a link code, and never records or uploads anything.
This website
yumloop.net is a static page hosted on GitHub Pages. It sets no cookies and runs no tracking scripts. GitHub keeps standard server logs, including IP addresses, as described in the GitHub privacy statement. The page loads its typefaces from Google Fonts, with the same consequence described above.
Children
Yumloop games are not directed at children under 13, and I don't knowingly collect personal information from them. There is nothing in a Yumloop game that asks a player for personal information at all, and online play has no chat: other players only ever see the display name you chose. If you believe a child has sent me something through email or a feedback form, write to me and I'll delete it.
Your choices
- Delete everything held on your device by deleting the app.
- Delete your Yumloop account from Settings → Account inside the game; the service forgets you at once.
- Stay out of Game Center or Google Play Games by declining the sign-in prompt, or signing out in your phone's settings.
- Ask about analytics. The usage events are anonymous and aggregated, so there is no per-person record for me to look up or delete. But if you have a question about what is collected, ask and I'll answer honestly.
- Ask me to delete an email thread and I will.
If you're in the EU or UK, the lawful basis for the anonymous usage analytics is legitimate interest in understanding how the games are played; for email, it's answering the message you sent me.
Changes
If this policy changes in a way that matters, the date at the top changes with it. Yumloop is a small operation and the honest summary is unlikely to move far from where it is now.