Privacy policy

Last updated: 17 October 2026

Who is responsible

The controller of your data is:

What the game sends us: anonymous play statistics

To learn how the game plays (where runs end, which jumps are too hard, whether the daily track is fair), Spinline sends short gameplay signals to TelemetryDeck, an analytics service that processes them for us. It only does this if you say yes (see below).

What a signal can contain:

• The game and your device, coarsely: the game's version, the kind of platform (for example iPhone, Android or browser), and a rough screen-size class and orientation. Never the exact screen size or the device model.
• Your settings in the game: whether sound is on.
• How you play: when a session and a run start and end, and how many runs a session has; a run's distance, score, duration, how far into the day's track it got, how it ended (finished, or the kind of crash and the kind of jump it happened on), flips and Perfect landings, and whether it was a new best; the day and city district of the track; ghost races (which ghost you raced and who won, whether a ghost code you entered or opened was accepted, and whether you shared your best); your day streak and how many days since you first played; and when you mute or unmute the sound.
• An install ID. Once you say yes to anonymous stats, the game makes a random number and keeps it on your device. Signals carry only a salted hash of that number, never the number itself, and TelemetryDeck hashes it again when it arrives. The ID lets us count returning players without knowing who they are. It isn't your device's advertising ID, and it isn't linked to your name, email, account or any other app.
• A session ID, a fresh random number each time the game starts.

What we never collect: your name, email address, phone number, contacts, photos, precise or approximate location (except at most the country, see below), advertising ID, the contents of a ghost code, or anything you type. The game has no accounts and no chat.

Like any server, TelemetryDeck sees your device's network (IP) address while it receives a signal. TelemetryDeck never stores IP addresses, not in its database and not in its log files. At most, it derives your country from part of the address. Signals are sent over an encrypted connection (HTTPS).

Why, and on what basis: to understand and improve the game. Our legal basis is your consent (Article 6(1)(a) GDPR). The first time you open the game, its start screen asks one short question: "Help improve Spinline with anonymous play stats?", with "Yes" and "No thanks". Until you answer yes, the game sends nothing and stores no install ID. If you play on without answering, nothing is sent and the game asks again the next time you open it; after three times without an answer it stops asking and treats that as no. The data cannot tell us who you are, and we never use it for advertising or sell it. You can withdraw your consent at any time with the Anonymous stats switch.

You can switch them off. Turn Anonymous stats off in Settings (the gear beside the sound icon at the top of the start and result screens). From that moment the game sends nothing, and it deletes its install ID and the day you first played. If you turn it back on, it makes a new ID that isn't connected to the old one.

Where and for how long: TelemetryDeck GmbH is based in Germany and processes the data for us under a data processing agreement. The data is stored only in the EU and never leaves the EU. Anonymous signals have no fixed deletion date: TelemetryDeck moves older data to cold storage and expects to delete it after 7 to 10 years. Because the signals carry nothing that identifies you, they can't be traced back to you. TelemetryDeck's privacy policy: telemetrydeck.com/privacy

What stays on your device

These are kept only on your phone (or, in the browser version, in your browser's storage). We never receive them:

• your best scores, your day streak, and a recording of your best run today, which the game replays as your ghost;
• your settings: sound and Anonymous stats;
• the install ID described above, and the day you first played (only after you say yes).

Deleting the app (or clearing the site's data in your browser) removes them. On iPhone, your iCloud backup may include them, under Apple's terms. They aren't included in Android backups.

Sharing a ghost code

If you choose "Share my best", the game creates a short code describing your run (the day, and when you pressed and let go) and hands it to your phone's share sheet or your clipboard. You decide where it goes. The code contains no name, account or anything that identifies you. The anonymous statistics only say that you shared, never the code.

The browser version

The browser version is hosted on itch.io, which has its own privacy policy: itch.io/docs/legal/privacy-policy. The anonymous statistics work the same there: nothing is sent until you say yes. The game sets no cookies.

Children

Spinline's content is suitable for all ages, and the game asks no one for their age, name or contact details. We don't knowingly collect personal data from children: the statistics are anonymous and are only sent after a yes. If you believe a child has given us personal data, write to us and we'll delete it.

Your rights

Under the GDPR you have the right to access your data, correct it, have it deleted, restrict or object to its processing, and to data portability.

Because the game has no accounts and we only hold a hashed, random ID, we usually can't tell which statistics are yours. Before we can act on a request, you would need to give us information that identifies your install, and the game never shows that information to you. In practice, the simplest way to stop all statistics is to turn Anonymous stats off, or to uninstall the game. Either way the install ID is deleted, and nothing links a new ID to the old one. We will still answer every request within one month: ian.deherdt@it-erate.be.

You can complain to the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données), Drukpersstraat 35 / Rue de la Presse 35, 1000 Brussels, dataprotectionauthority.be, or to the authority where you live.

Changes

If we change what the game collects, we'll update this page and the date at the top before that version is released.

Contact

iterate, ian.deherdt@it-erate.be