SPOOLBOUND

Spoolbound — Privacy Policy

Last updated: 6 September 2026 (was 27 August 2026). What changed: a check against the app found two things to fix, neither changing what the app actually does — only what this page said about it. First, the random identifier the app generates to tell your own devices apart should have been listed as one of the things we store in its own right, alongside the short caption already described below that is built from it — it is added now, under "If you make an account." Second, the sentence explaining why that caption exists described an on-screen notice the game does not yet show anyone; it has been struck and replaced with what the caption is actually used for today.

Spoolbound is made by Deadpan Labs LLC. This policy says exactly what the app stores, where it goes, and how to get rid of it. It is written to be read rather than to be survived, and it describes what the code actually does — every claim below corresponds to something in the app you can point at.

The short version

  • You can play the entire game without an account. No sign-up wall, no "continue with" screen, nothing to skip past. If you never make an account, nothing about you leaves your phone.
  • We do not use analytics, advertising, tracking or third-party SDKs of any kind. There is no ad network, no crash reporter, no attribution kit, no social login.
  • We do not sell or share your data. There is nobody to sell it to.
  • If you do make an account, we store your email address, your save file, and a device identifier for the single-session lease, so the game can follow you to another device. [CORRECTED 2026-09-06: this bullet used to name only two of the three.]
  • You can delete your account and everything in it from inside the app, and it is gone.

If you never make an account

Your save file is stored on your device using iOS's own storage, and it stays there. It is not uploaded, not backed up by us, and not visible to us. Deleting the app deletes it.

If you make an account

We store ~~two~~ three things. [CORRECTED 2026-09-06: this said "two things." The caption below was already described, but the random identifier it is built from was not called out as something we store in its own right — it is now, and it is the third thing.]

Your email address and password. Handled by Supabase Auth, our hosting provider. Your password is never stored in a readable form — we could not tell you what it is. We use your email to identify your account and, if you ask for one, to send a password reset. We do not send marketing email.

Your save file. The state of your workshop — cash, machines, research, layout. It is stored so you can pick the game up on another device, and so a lost or broken phone does not cost you your shop. We keep one previous version of it, so that a corrupted save can be rolled back rather than lost.

A device identifier. [ADDED 2026-09-06.] The app generates a random identifier for your device the first time it runs — a string of random characters from your device's own random-number generator, never a serial number, and never one of Apple's own IDFA or IDFV identifiers. It stays on your device whether or not you ever sign in. Once you do sign in, this identifier travels with your account, so that when two of your devices try to play the same shop at once, the game can tell them apart and stop one from silently overwriting the other's save. It is kept with your account until you delete it (below). The same identifier is also read locally, entirely on your device, to vary which raid targets the game shows you each day — that use never leaves your device and does not change anything below about who else can see it. [ADDED 2026-09-06.]

We also build a short caption from that same identifier, to tell your own devices apart. ~~It exists so the game can say which device an account "is being played on."~~ [CORRECTED 2026-09-06: the struck sentence described a specific on-screen notice that no screen in the shipping app actually shows. The network layer knows when another device holds the lease (GameSession.conflict_detected/status_changed, SessionClient's ELSEWHERE state in godot/net/), but nothing under godot/ui reads those signals yet, so the caption exists and is correctly described below, but the game does not yet say the sentence it was said to enable. See the audit's row 18.] It is not your device's name. It is the device type plus four random characters — "iPhone · 6997" — where the type is the platform the app is running on and the four characters come from the identifier above. It is never taken from anything you have named, and never from any hardware identifier.

That is the complete list. There is no location data, no contacts, no photos, no advertising identifier, no device fingerprint, no behavioural profile. ["Device fingerprint" means a signal built by watching your device's characteristics without it storing anything — a different thing from the identifier just above, which the app itself generates, keeps, and now discloses.]

Who else can see it

Supabase hosts the database and the sign-in system. They process this data on our behalf and under contract. They are the only third party involved in the app — verified against the app's actual dependency list, which at 1.0 is the Godot engine, our own native extension, and the Supabase client, and nothing else that reaches a network.

Apple knows you downloaded the app, in the ordinary way that Apple knows about every download. We receive only anonymous aggregate figures from App Store Connect, and we cannot connect them to an account.

Nobody else. There is no other integration, no data broker, and no analytics pipeline.

Deleting your account

Tap the shop name at the top of the screen to open the account panel, then "Delete my account". You will be asked to confirm in writing before it happens.

This deletes your login and your save file, together, permanently. It cannot be undone and we cannot restore it afterwards — including the retained previous version, which goes with it. If you want to keep playing after that, the game carries on offline on your device.

You do not need to email anyone, and there is no waiting period.

Children

Spoolbound is suitable for all ages and contains no objectionable content. It is not directed at children under 13, and we do not knowingly collect personal information from them. The game is fully playable with no account at all, which means a child can play it without any personal information existing anywhere. If you believe a child has created an account, delete it in the app or email us and we will remove it.

Your rights

Depending on where you live you may have the right to access, correct, export or delete your data, and to object to how it is processed. In practice, for this app:

  • Delete — in the app, immediately, as above.
  • Access or export — email us and we will send you everything we hold, which is your email address, your save file, and the device identifier(s) your account has signed in from. [CORRECTED 2026-09-06: the device identifier was missing from this list.]
  • Correct — the only personal detail we hold that you would ever need to correct is your email address, and you can change it yourself in the app: open the account panel and use "Change email". We send a confirmation link to the new address and nothing changes until you click it. (The device identifier is generated by the app, not by you, so there is nothing about it to get wrong or to correct.)

We will not charge you or make it difficult. There is very little data here, which is the point.

Security

Everything travels over HTTPS. Your save can only be read or written by your own account, enforced by the database itself rather than by the app being polite about it — a signed-in player cannot reach another player's data even with a modified copy of the game. Writes go through a small set of functions that check who you are, and direct table access is revoked.

We are a small company and we will not pretend to be uncrackable. What we can say is that we hold almost nothing worth stealing: an email address and a game save.

Changes

If this policy changes we will update the date at the top and, where the change is significant, say so in the app. We will not quietly broaden what we collect.

Contact

Deadpan Labs LLC <support@spoolbound.com>