Sandpiper Privacy Policy

Sandpiper is built privacy-first. It is a game you play entirely on your device. This policy explains, in plain language, exactly what that means. It is written to match Sandpiper’s App Store privacy label.

No tracking, no analytics

Sandpiper has no accounts, no ads, no tracking, and no analytics. We do not profile you, build an advertising ID, or sell anything. We do not ask for any personal information. Your scores, your best runs, and your settings are stored on your device. How you play is never sent anywhere. The one thing that does leave your device is the optional purchase, described below.

On-device play

The game runs entirely on your iPhone. There is no server, no login, and no internet connection required to play. The ghost of your best run is recorded and replayed locally, on your device.

The love letter

If you share a love letter, it is created on your device as a plain image and shared by you, through iOS, to whomever you choose. We never see it.

Purchases

The optional one-time unlock is processed by Apple and by RevenueCat, the service we use to manage purchases. When you buy or restore the unlock, RevenueCat receives the purchase from Apple and assigns an anonymous identifier so your unlock can be restored on a new device or after reinstalling. This is used only to manage the unlock. It is not linked to your name, it is not used to track you, and we never receive your payment details. If you never buy the unlock, nothing leaves your device.

Children

Sandpiper does not collect data from anyone, including children.

Contact

Questions about privacy? Email [email protected].