Privacy Policy
The Loop, made by 2Buns LLC. Last updated 15 September 2026.
The Loop is built to collect as little about you as it can while still doing its job. This page explains what we collect, why, and how to get rid of it.
The short version
- You can play without an account. Your progress is saved on your own device.
- Analytics are off until you say yes, and are never required to use the app.
- Ads are optional, non-personalised, and only ever shown when you tap to watch one.
- We never see your card details. Payment processors handle those.
- Crash reports have personal data stripped before they reach us.
- You can delete your account and its data at any time.
- We do not sell personal information, and we never have.
What we collect, and when
Using The Loop
Some basic technical information is generated just by loading a page or opening the app: your IP address and browser type are visible to Firebase Hosting, which serves this site and the app, in the way that is true of any web server. We do not read this information ourselves.
Your progress
The Loop is playable without an account, and by default your saved game never leaves your device: it is kept in your browser's or your phone's local storage. Copying a save to the cloud is something you choose, slot by slot, from inside the game; only then is it stored in Firebase, attached to your account, and only then can it follow you to another device. Deleting your account deletes those cloud saves with it. The copy on your own device is yours to remove by clearing the app's data, or by using the reset option in the game's settings.
The game's artwork
The game's images, and its music and voice if any is playing, are not built into the app: they are downloaded from Firebase Hosting as the game needs them, and cached on your device so they are not fetched twice. Those are ordinary web requests, so the server sees your IP address and the file requested, in the same way as any other page load. Nothing about your game, your account or your progress is sent with them, and the requests carry no cookies or credentials.
If you create an account
Signing in uses Firebase Authentication, so your account can follow you between the web app and your phone. Depending on how you choose to sign in, this may include your email address, your name and a profile photo from the sign-in provider you pick.
| What | Why |
|---|---|
| Your email address, name and photo, as provided by sign-in | To identify your account and personalize the app |
| An account identifier | To attach your data and any subscription to you |
| The data you create in the app | Stored in Firestore so it survives reinstalling or changing device |
If you buy something
Everything The Loop sells is a one-time purchase: there is no subscription. We never receive or store your card number. On the web, payment is handled by Stripe, and a purchase there needs an account so we know whose it is. In the iOS and Android apps payment is handled by Apple or Google, with RevenueCat telling us only which items the purchase covers.
On a phone you can buy without an account at all. RevenueCat then identifies the purchase by an anonymous identifier it generates for that install, which is not linked to you; if you later sign in, that identifier is attached to your account so the purchase follows you. What we store either way is the item, when it was bought, and the store's own transaction identifier — kept, rather than deleted, if it is later refunded, so we can tell a refunded purchase from one that never happened.
If you agree to analytics
Analytics are handled by Google Analytics 4, through Firebase. They are opt-in and can be switched off at any time in Settings. Declining does not limit the app in any way, and it means the analytics code is never loaded at all, rather than loaded and told to keep quiet. Switching it off later shuts the running code down for the rest of that session and stops it being loaded again from the next launch. What we send is a list of things that happened — a screen opened, a purchase completed, an ad watched — not free text and not anything you typed.
Errors
When something crashes we send a report to Sentry so it can be fixed. These are configured to strip personal data before the report leaves your device: authentication tokens, sign-in links, query strings and full URLs are all removed first.
Ads
The iOS and Android apps can show ads from Google AdMob. They are rewarded ads: they appear only when you tap a button offering something in exchange for watching one, and never on their own. There are no ads on this website, and no ads at all for anyone who has bought the ad-free upgrade.
They are non-personalised: they are chosen by context rather than by anything about you, and we do not ask for tracking permission. Before any ad code is downloaded, the app asks Google's User Messaging Platform whether consent is required where you are, and shows its form if it is. Until that answers, no ad is requested. Where UMP offers one, a "Privacy options" entry in Settings reopens its form so you can change your answer. That answer governs ads only; the separate "Share usage analytics" switch governs analytics, and neither changes the other.
Push notifications
If you turn on notifications, the app registers a device token with Firebase Cloud Messaging. That token identifies your device for the purpose of delivering a notification; it does not identify you personally, and you can turn notifications off at any time in Settings or in your device's system settings.
This website
This site uses the same Google Analytics property as the app, to count visits. It tells us how many people arrived and roughly from where; it does not tell us who you are.
Where the data is
Account data, cloud saves, purchase records and analytics are all stored with Google, through Firebase, in the United States. The game's artwork is served from Firebase Hosting. If you are in the UK or the EEA, using an account or agreeing to analytics means your data is transferred to the United States under Google's standard contractual clauses. A save you have not copied to the cloud stays on your device and is transferred nowhere.
How long we keep it
Account data, cloud saves and the data you create in the app are kept until you delete your account. Purchase records are kept for as long as the account exists, because they are what entitles you to what you bought. Analytics events are kept for twelve months. Error reports are kept for ninety days.
Deleting your data
There is a Delete my account option in Settings inside the app, which removes your account and everything attached to it. You can also ask us to delete it by writing to support@theloopidle.com. The full instructions are here.
Your rights
If you are in the UK or the EEA you have the right to access, correct, export or delete your data, to object to processing, and to complain to your data protection authority. If you are in California you have the right to know what is collected, to delete it, and not to be discriminated against for asking. We do not sell personal information, and we never have. Write to support@theloopidle.com and we will answer within thirty days.
Children
The Loop is not directed at children, and we do not knowingly collect anything from anyone under 13.
Changes
If this policy changes in a way that matters, we will say so in the app before the change takes effect rather than quietly updating the date at the top of this page.