SineOn — Privacy Policy

EFFECTIVE 2026-06-29 · APPLIES TO THE SINEON APP (com.sineongame.sineon) AND SINEONGAME.COM

The short version

SineOn has no ads, no behavioural analytics, and no third-party tracking SDKs. By default you play anonymously — no name, no email, no sign-up. The only data that leaves your device is what the global leaderboard and online multiplayer need to work, plus anonymous crash diagnostics. Linking an email to save your progress across devices is entirely optional. You can erase everything yourself, in the app, at any time.

Who we are

SineOn is built and operated by Mickaël Astier, an independent solo developer based in France, who is the data controller for the purposes of the EU/UK GDPR. Questions, requests, or complaints: [email protected].

What the app stores on your device

Settings, personal bests, ghost recordings, achievements and stats, your three-character initials, and a leaderboard identifier. This stays on your device. Your operating system may include it in its normal device backup (Google / Apple) — that is deliberate: it is how your scores and identity survive a reinstall or a new phone.

What we collect, why, and our legal basis

• Account identifier — to take part in the leaderboard, the app creates a random device id (not derived from you or your hardware) and exchanges it with our server for an account id and a session token. We store only a hash of that token, never the token itself. Why: to give you one persistent leaderboard identity. Basis: legitimate interest / performance of the service you requested.
• Leaderboard submissions — your account id, your chosen initials, and the run (score, variant, seed, and the input recording our server replays to verify the score is genuine). Kept until you delete them. Basis: legitimate interest in a fair, verifiable board.
• Optional email ("Secure your progress") — only if you choose to, you can link an email address so your progress survives a reinstall and travels across devices. We send a one-time code to that address (via our email provider, Resend) and store the address mapped to your account until you unlink or delete it. Why: account recovery and cross-device continuity. Basis: your consent.
• Online multiplayer — your lobby display name and live gameplay inputs pass through our relay to the other players in your match. The relay holds them in memory only; nothing about a match is recorded. Connection addresses are used transiently for abuse protection (rate limiting) and are not stored. Basis: performance of the multiplayer feature you initiated.
• Crash diagnostics — if the app hits an unexpected error it sends the error message, a stack trace, a coarse browser/OS string, and the game version. No account or personal identifier is attached. These sit in short-lived operational logs and may be posted to the developer's private Discord as an alert; we delete them on a rolling basis. Basis: legitimate interest in keeping the app working.

Who else can receive data (our processors)

• Hetzner — the server hosting our application and database (Germany, EU).
• Cloudflare — DNS and CDN that front this website and our API. This site loads no third-party scripts; everything (the 3D background library, fonts, styles) is served from our own domain.
• Resend — sends the one-time code, and only if you use the optional email feature.
• Apple / Google — distribute the app, process any in-app purchases, and may include your on-device data in their standard OS backup; their own privacy policies govern that.
• Discord — receives anonymous crash alerts (no personal data) and, for the daily challenge, the winner's public initials.

We do not use advertising or analytics networks, and we never sell or share your data for advertising or any other purpose.

What we never collect

No precise location. No advertising identifiers. No contact lists, photos, or files. No behavioural analytics or profiling. Unless you opt into the email feature, no name, email, or account of any kind.

Public visibility

If you submit to the leaderboard, your initials and score are public, and the top run's input recording is publicly downloadable (that is how the "world best" ghost works). Choose initials that do not identify you if you prefer to stay anonymous.

In-app purchases

SineOn is free to play. It may offer optional cosmetic items (such as ship skins or colour themes) for purchase. Payments are handled entirely by the App Store or Google Play — we never see or store your card or payment details. We store only a record of what you have unlocked (your entitlements), linked to your account, so your purchases restore across your devices. Cosmetics never affect gameplay, difficulty, or scores.

How long we keep it

Leaderboard rows and any linked email are kept until you delete them. Crash diagnostics live only in short-lived logs and are not retained long-term. Multiplayer data exists only for the duration of the match. One-time email codes are single-use and expire shortly after they are sent.

Your rights

You can access, correct, export, restrict, or delete your data, and object to processing. The fastest route is built into the app (below); for anything else, email [email protected] and we will respond. If you are in the EU/UK you may also complain to your local data-protection authority. If you are in California, we do not sell or share your personal information, and you have the right to know and to delete it.

Deleting your data

In the app: SETTINGS → RESET LEADERBOARD ID. This erases every leaderboard row you own on our server (including rows from past seasons and any linked email), deletes the account, and resets your local identity to anonymous. It is immediate and permanent.

If you can no longer use the app, email [email protected] and we will erase your data for you.

Security

All traffic to our servers uses HTTPS/TLS. Session tokens and one-time email codes are stored only as hashes, never in the clear. No system is perfectly secure, but we keep the data we hold to the minimum the features need.

International users

Our servers are in Germany (EU). If you use SineOn from outside the EU, your data is transferred to and processed there to provide the service.

Children

SineOn is not directed to children under 13 (or under the minimum age in your country, such as 16 in parts of the EU), and we do not knowingly collect personal information from them. The app collects no personal data by default; the only text you can enter is three-character arcade initials, a lobby name, and — if you opt in — an email address. If you believe a child has provided us an email, contact us and we will delete it.

Changes

If this policy changes, the new version appears at this address with an updated effective date. Material changes that affect data we already hold will be highlighted here.