Privacy policy

The short version

• There is no account. You are never asked for a name, an email address or a password.
• Your collection progress lives on your own device or in your own browser.
• There are no ads and no advertising identifiers.
• Nothing is sold, rented or handed to data brokers.

The iOS app: what stays on your device

Your ticks, custom lists, profiles and settings are written to storage on the device itself. They are not uploaded anywhere, and nobody but you can read them. Deleting the app deletes them.

The iOS app: iCloud sync

Supporters can turn on iCloud sync, which is off until you switch it on. When it is on, the same tracker data is written to your own iCloud storage under your Apple ID so your devices agree with each other. That data goes to Apple, not to us — there is no server on our side holding a copy, and no way for us to read it. Apple's handling of it is governed by Apple's privacy policy. Switching sync off in Settings stops it.

The iOS app: the Supporter purchase

The Supporter unlock is a one-time purchase handled entirely by Apple. Payment details are never seen by this app or by us. To know whether the unlock is active, the app uses RevenueCat, which receives a randomly generated app user id — not tied to your name, email or Apple ID — along with your device type, platform and purchase history. That information is used for one thing: deciding whether to unlock the Supporter features. See RevenueCat's privacy policy.

The iOS app: network requests it makes

• It downloads the item catalog from this website so new content appears without an app update. The request carries no progress data and nothing about you.
• It checks for over-the-air app updates through Expo, which receives the device and app version making the check.
• Wiki and legal links open in an in-app browser. Those sites have their own privacy policies.

As with any web request, the servers answering these keep ordinary logs — including the IP address the request came from — used to operate and secure the service.

The iOS app: what it never does

No ads and no ad SDK. No analytics SDK. No advertising identifier and no tracking-permission prompt, because there is nothing to track you with. It never asks for your location, contacts, photos, camera or microphone.

The website

• Your progress is kept in your browser’s local storage. It is never sent to a server, and clearing your browser data clears it.
• Save codes carry your progress in the part of a link after the # symbol, which browsers never transmit to a server. Sharing a save link is between you and whoever you send it to.
• Vercel Web Analytics counts page views. It is cookieless and records aggregate figures — pages visited, referring site, country, browser and device type — with no attempt to identify individual visitors.
• The site is hosted on Vercel, whose servers keep standard request logs.

Children

Neither the site nor the app is directed at children under 13, and neither knowingly collects personal information from anyone, children included.

Your choices

Deleting the app removes everything it stored on your device. Turning off iCloud sync stops anything further being written to iCloud, and you can remove the app's iCloud data from your Apple ID settings. Clearing your browser storage removes the website's copy. Records of your purchase are held by Apple and RevenueCat rather than by us; write to the address below if you have a question about them and we will help where we can.

Changes to this policy

If this policy changes in substance, the date at the top changes with it.

Contact

Questions about any of this go to codemackcreations@gmail.com.