Lucky Splat is made by ZHIWEN SHI ("we"). Questions about your data: support@luckysplat.app. This policy was last updated on 21 October 2026.
The game has no ads, no tracking, no third-party analytics and no third-party code. It never asks for your email, phone number, age, contacts or location, and it never uses an advertising or device identifier.
What the app sends to our server, and why
- An install id and an App Attest key. A random id made for this install of the app (not a device or advertising identifier), and a key made by Apple's App Attest, so our server knows a request comes from the real app before it numbers a card.
- Your SSR and UR cards: what got you, the exact score, the run's random seed and the day, so each card gets its own number and the server can check it came from a real run.
- The name you choose, if you choose one, and its recovery code. The code is kept only as a keyed one-way hash and an encrypted copy, so it can be checked, and given back to you when you sign in with the same Game Center account on a new phone.
- The daily secrets and SECRET cards you found, your days in a row, and whether you own the Collector's Edition (yes or no only: never what you paid or when), and your choices about this website. They run the daily secret, show how rare each card is, and the website.
- Game Center, if you link your name: the player id Apple gives us for your account, with Apple's signature proving it, so your name can come back with it.
- Share counts: the kind of card, the score as a range, which app you shared it to, and a random id made for that one share (it is also in the link you share, so we can count how often the link is opened). Nothing in them says who you are: no install id, no name.
- Your internet address, to stop abuse (rate limits). It is never stored as it is: only as a keyed one-way hash, deleted within three days.
Apple
Game Center keeps your best score on the leaderboard and your achievements; the app loads your friends' scores to say how many of them a run beat, and that stays on your phone. Purchases are made and handled by Apple: we never see your payment details. If iCloud Keychain is on, your name and recovery code sync to your other devices through it. Apple's own privacy policy covers these.
Who else handles it
Our server and this website run on Cloudflare (Workers and D1), which stores and processes the data above for us only, under its data processing terms; it may be processed outside your country. We do not sell, rent or share your data with anyone else, and never use it for advertising.
What this website shows
While "Show my name in the website's lists" is on (it is in the app's name sheet), your name appears on the cards you framed with the Collector's Edition, on your player page (your SSR and UR cards, unframed ones without their numbers, and how many daily secrets you found), and, if you also chose to show your streak, in the day's top ten. Turn it off and your name leaves the website within a few minutes. Cards without a name show as anonymous.
On your phone
Your album, its pictures (drawn by the game: the camera is never used) and your settings stay on your phone. The app adds a picture to Photos only when you ask it to, and cannot see your photos.
How long we keep it
- Your name, its recovery code, its Game Center link, your finds and your streak: until you delete them.
- Numbered cards: for as long as the game runs, because each number is given only once. Deleting your name leaves them unsigned.
- The install record (the random id and the App Attest key, nothing about you): kept, so a card's number stays honest.
- Hashed internet addresses: at most three days. Share counts: as totals.
- A name hidden for being offensive is remembered, so it cannot be taken again.
Deleting your data
In the app's name sheet, "Delete my name" deletes your name, its recovery code, its Game Center link, the secrets you found and your days in a row from our server at once, and removes the name from iCloud Keychain; your cards keep their numbers, unsigned. To delete anything else we hold for your install, or to ask what we hold, write to support@luckysplat.app: we answer within 30 days. Deleting the app deletes everything it kept on your phone.
Your rights
Wherever you live, you can ask us to show, correct or delete your data, or object to how we use it, by writing to support@luckysplat.app. We use it to run the game you asked for, to keep it fair (stopping abuse) and to count shares, nothing else. If you are in the EU or the UK, you may also complain to your data protection authority.
Children
Lucky Splat is for everyone aged 9 and up. It asks no one their age or who they are; a name is optional, filtered for offensive words, and can be deleted at any time. A parent can write to support@luckysplat.app to have a child's data deleted.
Changes
If this policy changes, the new one is posted here with a new date before it applies.
