Privacy Policy

Last updated October 8, 2026

SAPPER is built to be calm and private. It has no accounts, no ads, and no advertising or cross-app tracking — in the app and on the web. The two are separate products that keep separate data, so this policy describes each on its own.

SAPPER on iPhone, iPad and Mac

What the app stores

Your game data — daily attempts, Endless results, your best score, streak and settings — is kept on your deviceusing Apple's on-device storage. If iCloud is enabled, Apple may back it up or sync it across your devices under your iCloud account; we never see it.

Game Center

If you sign in to Game Center, your daily score is submitted to Apple's leaderboard so you can see your rank. That feature is operated by Apple under Apple's Privacy Policy. SAPPER never receives your Apple ID or contacts.

The shared web leaderboard

When you finish a Daily while signed in to Game Center, the app sends it to the leaderboard server at playsapper.com: your Game Center display name, the moves the run made (the server replays them to verify the score), and a signed proof from Apple that the entry is really yours. Your Apple ID itself is never sent. The server keeps the name, the verified score and your Game Center player ID, which allows one entry per player per day. It keeps the moves until the board closes at midnight UTC, so other players who finished the same board can replay your run in the app, and then deletes them. Settings → Web leaderboard(on by default) decides whether your name and score also show on the playsapper.com board; with it off you aren't listed there, and your run can still be replayed in the app. Entries are removed on request.

Purchases

The one-time Endless unlock is sold through the App Store. Payments are handled by Apple; we never receive your payment details. We use RevenueCat to validate and restore purchases — it processes a non-identifying purchase token and anonymous app/install identifiers to manage entitlements. It is not used for advertising.

Analytics

To understand how the app is used and improve it, we collect anonymous, privacy-friendly product analytics through PostHog (hosted in the EU). This records in-app events like screens viewed and features used — never your game content — with no advertising identifier (IDFA), no App Tracking Transparency prompt, and no cross-app tracking. The data is tied only to a random, anonymous install identifier, not to your identity, and is never used for advertising. This applies to the app only; the website is covered below.

SAPPER on the web (playsapper.com)

What the site stores

The board runs entirely in your browser. Your run and your settings (appearance, sound, language, controls) live in that browser's local storage. They stay there and are never sent anywhere. Clearing the site's data removes all of it. Nothing on the web is linked to the app, to iCloud or to your Apple ID.

Analytics on the site

The site counts page views with a self-hosted copy of Umami, on our own server. It uses no cookies, stores no IP address and no identifier, and cannot recognise you across sites or visits; it only tells us which pages are read and roughly where visitors come from. It is not used for advertising and nothing from it is shared.

The web leaderboard

Posting a score is optional. If you do, our server receives the name you typed, the moves your run made (it replays them to verify the score itself) and your IP address, and it sets one cookie— a random identifier for your browser, readable only by the leaderboard server, used solely to enforce one entry per browser per day. It is the only cookie on the site, it exists only for that purpose, and nothing is set until you post. We keep the name, the verified score, a keyed hash of the cookie (so the board knows the entry is yours) and a keyed hash of the address; the address itself is never stored, and the address hash is deleted three days after the board closes. The moves are kept until the board closes at midnight UTC and then deleted; runs posted from the website aren't shown to other players. The name and score are public on that day's board, and entries are kept so past boards stay browsable.

Pick a name you're happy to have shown publicly. To have an entry removed, email the support address with the name and the date. App players appear on the same board under their Game Center name, marked as verified.

What we don't do

• No ads and no advertising identifiers (IDFA).
• No accounts, email collection, or sign-up — a leaderboard name is just a label, not an account.
• No selling or sharing of personal data.
• No cross-app or cross-site tracking — the app's analytics are anonymous, and the website has none.

Children

SAPPER is suitable for all ages and does not knowingly collect personal information from children. There are no accounts, and the only thing a player can ever type is a leaderboard name — if a child has posted something identifying, email us and we'll remove it.

Changes

If this policy changes, we'll update the date above and post the revised version on this page.

Who's responsible

SAPPER is developed and published by Francisco Martinez, an independent developer and the party responsible for any data handling described in this policy.

Contact

Questions about privacy? Email support@playsapper.com.