Privacy

Effective November 2, 2026. Footloot is made by Seth Davis, who is responsible for your information. Questions: support@footloot.app.

Footloot keeps what the game needs to work, and nothing to sell. There is no advertising, no third-party tracking and no analytics kit in the app.

What we keep, and why

• Where you open a find. When you open one, the app sends your precise position so the game can check you're within reach. It's kept with that find's record under your account. Other collectors can see that you opened a find, which one and when: a find's card names its first and last opener, a stash says who left it, and a tag says who was there. Your position is never shown otherwise, and the app doesn't track you in the background.
• How you sign in. The account key Apple or Google gives us, or, if you sign in by email, your address kept as a one-way hash with a masked label (b•••@gmail.com) so you can tell which one it is.
• What other collectors see. Your display name, avatar, title, showcase and tags.
• What you buy. Apple's transaction id, the product, its price and currency, and the store environment. Never a card number or a billing address: Apple keeps those.
• Notifications. Your device's push token, while notifications are on.
• Your device's App Attest key id, which helps stop cheating. It identifies the app on your device, not you.
• The game itself: your collection, coins, levels, crafts, trades, friends and guild.

Who handles it

Cloudflare runs the game's server and stores its data (Workers, D1, KV) and sends sign-in emails. Apple provides the App Store, purchases, purchase notifications, push notifications and Sign in with Apple. Google provides Sign in with Google. Each handles only what its part needs.

How long

Notices are kept 90 days and email sign-in codes 10 minutes. Everything else is kept while your account exists. When you delete your account, your name, friends, tags and the rest of your profile are removed, and the game's records of finds, trades and purchases are kept with no name on them.

Deleting your account

In the app: Profile → Settings → Delete account. Or write to support@footloot.app. It happens at once.

Children

Footloot isn't directed at children under 13, and we don't knowingly keep information from them. If you think a child under 13 has an account, write to us and we'll delete it.

Your rights

In California: you can ask what we hold about you and have it deleted. We don't sell or share personal information.

In the EU and UK: you can see, correct, take a copy of, or delete what we hold, and object to its use; we use it to run the game you asked to play. You can complain to your data protection authority.

Write to support@footloot.app for any of these.

Changes

If this changes in a way that matters, we'll say so in the app before it takes effect.