Studio-wide

Privacy Policy

Last updated: April 18, 2026 · Effective: April 18, 2026

This is the privacy policy for Lowcore Games (“Lowcore Games”, “we”, “our”, “us”). It covers the lowcoregames.com website and every mobile application we publish, including but not limited to those listed on the games page.

1. The short version

Our games do not collect, transmit, or share any personal data about you. Every Lowcore Games app runs entirely on your device. There are no user accounts, no servers, no analytics, no advertising SDKs, no crash reporters, no third-party trackers, and no network permissions of any kind. If that is all you needed to know, you can stop reading here.

2. Who we are

Lowcore Games is an independent software studio operated by a single developer. For the purposes of data-protection law (GDPR, UK GDPR, CCPA, and equivalents), Lowcore Games is the “data controller” for any data described in this policy.

You can reach us at any time at privacy@lowcoregames.com. We typically reply within a few business days.

3. Scope

This policy applies to:

• The lowcoregames.com website and any subdomains we operate
• Every mobile application published under the “Lowcore Games” developer identity on the Apple App Store
• Any email correspondence you send us at an @lowcoregames.com address

Every game we release operates under this same policy. If we ever ship a game whose data-handling differs in any material way, that game will include its own explicit policy before it is made available for download, and this page will be updated to reflect the exception.

4. Data stored on your device

Our games may save small, non-identifying bits of gameplay state locally in the app’s own sandboxed storage — for example, a best-score integer, a preferred volume level, or a tutorial-completed flag. This information:

• Never leaves your device
• Is not linked to you, your Apple ID, Game Center account, or any other identifier
• Is not backed up to any server we operate
• Is automatically deleted when you uninstall the app (subject to whatever iOS / iPadOS backup settings you have enabled with Apple)

Because none of this data ever reaches us, we cannot “look up” your local state, transfer it between devices, or restore it if you delete it. That is by design.

5. Data we do not collect

To be explicit, our games do not collect:

• Your name, email, postal address, phone number, or any contact info
• Your Apple ID, Game Center ID, or any account identifier
• Your IP address, IDFA, IDFV, MAC address, or any other device identifier
• Location, contacts, photos, microphone, camera, motion, or health data
• Analytics, diagnostic logs, crash reports, or session telemetry
• Gameplay metrics, funnel data, A/B-test buckets, or engagement data
• Purchase history beyond what Apple handles for the App Store itself
• Any data from any third party, data broker, or advertising network

6. In-app purchases and paid apps

Some of our apps are paid downloads or may offer in-app purchases handled by Apple. Those transactions are processed end-to-end by Apple under Apple’s privacy policy; we receive an anonymised aggregate payout report and never see your name, billing address, or payment method. We do not maintain any purchase database of our own and cannot identify you from an App Store transaction.

7. App Store analytics (handled by Apple)

Apple provides developers with an aggregate analytics dashboard (App Store Connect → Analytics). This dashboard shows coarse-grained, opted-in, de-identified counts — for instance, how many devices installed the app in a given day, or total crash counts. It is produced and governed entirely by Apple and is subject to each user’s “Share With App Developers” privacy setting on their device. We do not operate this pipeline, do not receive any identifiers through it, and cannot use it to identify or re-identify any individual.

8. The lowcoregames.com website

The website is a static HTML site. It has no forms, no login, no analytics scripts, no advertising pixels, no cookies set by us, and no third-party scripts. Making a request to the site produces standard HTTP server logs, which for any given request contain:

• The requesting IP address
• The requested URL path
• The User-Agent string
• A UTC timestamp
• The response status code and byte count

These Nginx access logs are retained on the origin server for up to 14 days for abuse mitigation and operational troubleshooting, after which they are automatically rotated and deleted. They are never shared with third parties, never used for profiling or advertising, and never linked to any in-app identity (there is none).

The site is fronted by Cloudflare for DNS resolution and, optionally, CDN caching. When you request a page, Cloudflare sees the same standard HTTP metadata listed above. Cloudflare’s own privacy terms apply to that processing: cloudflare.com/privacypolicy.

9. Email

If you email us at support@lowcoregames.com, privacy@lowcoregames.com, hello@lowcoregames.com or similar, we keep the message so we can reply and refer back to it if you follow up. Mail is hosted by Proton Mail, which stores messages end-to-end encrypted at rest in Switzerland. We never use your email to send marketing, newsletters, or promotional material — we have none. If you want us to delete an email thread, tell us and we will.

10. Cookies and similar technologies

The website sets no cookies, no localStorage, no sessionStorage, and no other tracking technologies. Your browser may cache static assets (CSS, images) according to its own rules; that cache lives only in your browser.

11. Security

The website is served exclusively over HTTPS using TLS 1.2 or newer. We enable HSTS so browsers that have visited the site once will refuse to downgrade to HTTP. Our email is encrypted at rest by Proton Mail. For the apps themselves, the strongest security guarantee is the one architectural choice already described in this policy: the app never leaves your device, so there is nothing on our side to breach.

12. Data retention

Summary of every class of data described above:

Data	Where it lives	How long
In-app local state (e.g. best score)	Your device	Until you uninstall or reset the app
Website access logs	Origin VPS	Up to 14 days, then auto-deleted
Email correspondence	Proton Mail mailbox	Until you or we delete it; you may request deletion any time
App Store aggregate analytics	Apple (governed by Apple)	Per Apple’s retention policy

13. International transfers

The website origin server is hosted in the United States. Cloudflare caches content globally. Proton Mail stores email in Switzerland. By using the site or emailing us, you acknowledge that request metadata and email content may be routed through or processed in these jurisdictions. Because we do not collect personal data from the apps themselves, no cross-border transfer of app data ever takes place.

14. Children’s privacy

Our games are rated 4+ by Apple. They contain no chat, no user profiles, no social features, no in-app links to external content, and no mechanism for a child (or anyone else) to share personal information with us or with other players. Because we collect no personal information from anyone, we knowingly collect none from children under 13 (or under 16 in jurisdictions that apply that threshold). We comply with COPPA, GDPR Art. 8, and equivalent children’s privacy laws by simply not collecting the data those laws regulate.

15. Legal basis for processing (GDPR / UK GDPR)

If you are in the European Economic Area, the United Kingdom, or any jurisdiction with similar legislation:

• App usage. We process no personal data in the apps, so no legal basis is required.
• Website access logs. Processed under the legitimate-interest basis (GDPR Art. 6(1)(f)) for the narrow purpose of operating and securing the website. This is balanced against your rights by the 14-day retention cap and the fact that logs are never used for profiling, advertising, or enrichment.
• Email correspondence. Processed on the basis of your request and our legitimate interest in replying (GDPR Art. 6(1)(b) — steps at your request — and Art. 6(1)(f)).

16. Your rights

Depending on where you live, you may have some or all of the following rights with respect to any personal data we hold about you:

• Right to know what data we hold
• Right to access a copy of that data
• Right to correct inaccurate data
• Right to request deletion (“right to be forgotten”)
• Right to restrict or object to processing
• Right to data portability
• Right to withdraw consent where consent is the legal basis
• Right to lodge a complaint with a supervisory authority

In practice: because we don’t collect any personal data from the apps, there is nothing to disclose, correct, or port. For website logs or email correspondence, email us at privacy@lowcoregames.com and we will honour any of the above requests within 30 days at no charge. We will not retaliate against you for exercising any right under this policy.

17. California residents (CCPA / CPRA)

In the last 12 months, Lowcore Games has not sold or shared any personal information, as those terms are defined under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA). We do not use or disclose sensitive personal information for any purpose other than the limited operational purposes described above, and we do not use any personal information for cross-context behavioural advertising. California residents have the rights listed in § 16 above and may exercise them via privacy@lowcoregames.com.

18. Third parties we rely on for operations

We do not embed third-party SDKs or trackers into our apps. The website and email, however, are operated by infrastructure providers listed below. Each is subject to its own privacy policy; we do not share data with them beyond what is strictly necessary to serve the website or deliver email.

• Vultr — website hosting (United States). Privacy policy
• Cloudflare — DNS and edge caching. Privacy policy
• Let’s Encrypt / ISRG — TLS certificates. Privacy policy
• Proton Mail — email (Switzerland). Privacy policy
• Apple — App Store distribution and app-level aggregate analytics. Privacy policy

19. Changes to this policy

If this policy changes, the updated version will replace this page at the same URL and the “Last updated” date at the top will reflect the change. Material changes (anything that expands what we collect or how we use it) will additionally be announced on the home page for at least 30 days before taking effect. Your continued use of the site or apps after the effective date constitutes acceptance of the updated policy.

20. Contact

Privacy questions, requests to exercise your rights, data-deletion requests, or anything else: privacy@lowcoregames.com.

General support: support@lowcoregames.com.