We rob you in the game, not in real life.

Lootable collects what it needs to run the game and nothing else. No ads, no selling or sharing your data, no tracking you across other apps or websites, no contacts and no location (we keep your phone's time zone so clock times read right, and nothing more precise).

Lootable is made and run by Darren Duffy, an individual developer, who is responsible for your data. The rules for playing are in the Terms. Questions about your data: support@lootableapp.com.

We store your email address, when you signed up, which form you used, and the site or campaign that sent you (if your browser tells us). To stop spam we keep a scrambled one-way fingerprint of your internet address, never the address itself. We use your email only to tell you about Lootable, and keep it until you ask to come off the list or the waitlist closes.

Crew invitations by email are paused for now. When they're on, a player can invite a friend to their Crew by typing in the friend's email address. We use that address to send the invitation, to let you sign up, and to put the Crew invite in your account if you join with it. We email the same address at most once a week, whoever invites it, and never use it for anything else. Invitations nobody takes up are deleted after 30 days. If you want it gone sooner, emailsupport@lootableapp.com and we'll delete it.

• Account: your email (to sign in with a one-time code), your username, and, if you choose to give it, your first and last name (only players who share a Crew with you can see it, and you can change or remove it in Settings). Asking for a code creates your account; if you never sign in with it, the account is deleted after a day.
• Time zone: your phone's time zone (like "America/Chicago"), so times in the app and in notifications are on your clock. Other players can't see it.
• Signing in: to stop the code form being used for spam, each code request is logged with the email and a scrambled one-way fingerprint of your internet address, and deleted after a day. While you're signed in, our sign-in service (Supabase) keeps your internet address and device or browser type with each session, for security, until that session ends.
• Age (iPhone app): when you sign up, Apple may ask whether to share your age range with us. We only use it to stop sign-ups from children under 13, and we don't store it.
• Photos: the pictures you take of your Treasures and your profile picture. Other players see them; that is the game. We strip location and camera details from photos before upload.
• Gameplay: your Treasures, heists, cash, hiding schedule, Crews, chat messages, the players you block (each block is also sent to our moderators as a report), the reports you send and the feedback you send us.
• Fair play: automatic checks log signs of cheating (for example, two accounts that only ever trade with each other), so we can keep the game fair. Deleted after about 13 months.
• Moderation records: when our filter refuses, holds or hides something you posted, or someone reports it, we keep a record of what happened and why (see "How we moderate" below).
• Notifications: a push token for your phone or browser, so robbery alerts can reach you.
• Crash reports: when the app hits an error, the error message and its technical details, the screen you were on and your browser or device type, so we can fix it. Deleted after 90 days.

To keep Lootable safe, everything you post for other players to see is checked automatically before it appears: Treasure photos and names, profile pictures, usernames, real names, calling cards, Crew names and chat messages. The check is a list of banned words plus OpenAI's moderation service, which looks for things like sexual content, hate, threats and graphic violence. It doesn't make decisions about your account on its own: it can refuse a post, or hold a photo for a person to look at, and people (Lootable's moderators) make every decision after that. You agree to this check before signing up (the Terms box) and again before your first photo on a device.

• What OpenAI receives: only the photo or the words being checked, with nothing that identifies you. OpenAI's published data policy says it does not store moderation requests or use them to train its models.
• Held photos: a photo the filter isn't sure about is visible only to you until a moderator approves or removes it.
• Reports: when you report something, we keep the reason, your note and a copy of what you reported, so a moderator can review it. The person you report is never told who reported them. If 3 different players report the same Treasure or message, it is hidden until a moderator looks; a Treasure photo reported as sexual, or as a photo of someone who didn't agree to it, is hidden on the first report.
• How long we keep these records: the filter's log (what was checked, the result, the reason and, for refused text, up to its first 200 characters) and resolved reports are deleted after about 13 months. A photo a moderator removes for breaking the rules is kept privately, never shown in the game, for one year after the removal (even if the account is deleted), then deleted.
• Alerts to moderators: moderators are told about new reports and held or hidden posts by push notification and by email. These alerts say what happened, not what was posted.
• Child safety: if we find sexual content involving a minor, we report it, with the account's details, to the National Center for Missing & Exploited Children, as US law requires, and keep the record as that law requires.

Think we got something wrong? Email support@lootableapp.com and a person will look at it.

We count page views and waitlist signups with Vercel Web Analytics, which does not use cookies and does not identify you personally.

Lootable uses no advertising or tracking cookies. It uses a few of its own: one to keep you signed in, one for your time zone, one for a display setting, one to remember a Crew code from an invite link for a couple of weeks, and one that keeps HQ moderators signed in. The app also remembers small settings on your device, like whether sound is on.

Lootable runs on Vercel (hosting) and Supabase (database, sign-in and photo storage). Push notifications go through Apple and your browser's push service. OpenAI's moderation service checks photos and text before they go live (above). Resend sends Lootable's email: sign-in codes, Crew invitations and alerts to our moderators. Zoho hosts our support mailbox, so emails you send us are stored there. We also use service providers that help us build, maintain and support Lootable, who may access data only to do that work for us. They all process data only to provide those services to us, and none of them may use it for their own purposes. Your data is stored and processed in the United States.

• Your account, photos, gameplay, chat and feedback: until you delete your account.
• Sign-in code log and accounts that never signed in: one day.
• Crash reports: 90 days.
• Service logs (a sign-in email or notification that failed to send: when, which kind and why, nothing that identifies you): 30 days.
• Moderation log, resolved reports and fair-play checks: about 13 months.
• Crew invitations by email that nobody takes up: 30 days.
• Waitlist: until you ask to come off it, or the waitlist closes.

You can ask us for a copy of the information we hold about you, ask us to correct it (including your real name), or ask us to delete it. Email support@lootableapp.com from the address you play with and we'll answer within 30 days. We won't treat you differently for asking.

We do not sell or share your personal information, as California law defines those words, and we don't use it for targeted advertising. Lootable doesn't track you across other sites, so there is nothing for a Do Not Track or Global Privacy Control signal to switch off; we treat every browser the same.

If you live outside the United States, the law where you live may give you more rights over your data (for example in the UK or Canada). Email us and we'll honor them. You can also complain to your local data protection authority.

Lootable isn't for children under 13, and we don't knowingly collect their information. In the iPhone app, if Apple tells us an account belongs to a child under 13, we don't let it sign up. If we learn that a player is under 13, we delete their account and data. Parents: emailsupport@lootableapp.com with the player's username and we'll take care of it. Players can also report someone who seems to be under 13.

In the app, Settings → Delete my account deletes your account straight away: your login and email, real name, avatar, calling card, messages, time zone, hiding schedule, notification settings, crash reports, fair-play records, any email invitations you sent and every photo you took, and the Treasures you made leave the game. Two things stay for a while, for safety: reports and moderation records about what you posted stay until their 13-month deletion, and a photo a moderator removed for breaking the rules is kept privately for a year, as described above. We keep an anonymous record of past heists and money movements, with no name, email, photo or message attached, so other players' histories still add up.

Want off the waitlist, or would rather we delete your account for you? Emailsupport@lootableapp.com from the address you used and we'll take care of it.

If this policy changes, we'll update this page and the date at the top.