LifeLine Privacy Policy
Last updated: 2026-10-04
Effective date: 2026-10-04
This Privacy Policy explains how Sean Lynch ("we", "us", the "Developer") handles information in connection with the mobile game LifeLine (the "Game"). If you do not agree with this policy, do not use the Game.
1. Summary
- The Game is single-player. Your life-sim save data stays on your device. We do not operate accounts and we do not have a server that stores your game. The one exception is the optional Wall of Thanks (Section 2.4): if you bought a thank-you tier and ask to be shown on the Wall, a small server of ours keeps the display name you chose until you take it off.
- We show ads and offer optional in-app purchases. The companies that provide those services (Google AdMob and RevenueCat) process limited technical data to make them work and to prevent fraud.
- On iPhone, TikTok's own measurement tool asks for tracking permission (the standard Apple prompt, shown a few seconds after first launch) so it can tell whether a TikTok ad led to your install and, if you buy something, which ad led to that purchase. Declining changes nothing else about the Game — ads inside LifeLine stay non-personalised either way, and this permission is unrelated to them.
- We use an analytics tool (PostHog) to understand how the Game is used in aggregate. Usage analytics are off by default and only begin if you turn them on, either when the Game asks once on the main menu or in Settings > Privacy. While they are off, nothing about how you play leaves your device. While they are on, the events listed in Section 2.3 are sent to PostHog, keyed to a random install identifier and never to your name, your character's name or your story. Turning them off again stops collection and discards anything not yet sent.
- We do not sell your personal information. We do not knowingly collect data from children under the age required by your local law.
2. Information processed
2.1 Data you provide
The Game does not ask for your name, email, address, phone number, photos, or contacts. Character names and choices you type exist only inside your local save file. The one name that can leave your device is a display name you choose to put on the Wall of Thanks (Section 2.4).
2.2 Data stored on your device
- Your game save (progress, characters, settings, purchase-entitlement flags). Stored in the operating system's app storage and, on Apple devices, the Preferences store. You can export or permanently delete it from Settings → Your data inside the Game.
- Up to three earlier copies of your save, so you can go back to one from Settings → Your data → Restore an earlier save. Deleted with the rest of your data.
- A short problem log: the last 15 errors the Game ran into (the time, the app version, the screen it was on, the error message and a few lines of code location). It never includes your character's name or anything you typed. It is never sent anywhere on its own. If you tap Report a problem in Settings (or Email us this report on the crash screen), your mail app opens with the log in a draft email that you can read, change or delete before you choose to send it. Deleted with the rest of your data.
- The display name you typed for the Wall of Thanks, and whether you asked to be on it, so your Hall can show where your request stands. Deleted with the rest of your data. What our server keeps is described in Section 2.4.
- The last copy of the Wall of Thanks list the Game downloaded, so it opens at once and works offline. Deleted with the rest of your data.
- The hours of the day you usually open the Game (the last thirty, one number each). If you turn reminders on, they are used only to send a reminder around the time you usually play. They are never sent anywhere.
2.3 Data processed automatically by third-party services
Depending on your consent and region, the following may be processed:
| Purpose | Data | Provider |
|---|---|---|
| Serving ads (opt-in rewarded video only, and the Game shows no other ads) | Coarse device and app info, IP address (used transiently for ad delivery and fraud prevention), ad-interaction events. No advertising identifier (IDFA) is requested or used, and every ad request is marked non-personalised. | Google AdMob |
| Measuring and preventing invalid ad traffic | Device and network signals | Google AdMob |
| Processing in-app purchases and restoring them | Store transaction identifiers, purchase receipts, a randomly generated app-install identifier | RevenueCat + Apple App Store / Google Play |
| Confirming which thank-you tier an install owns, only when you ask to be on the Wall of Thanks (Section 2.4) | The randomly generated app-install identifier, answered with the tier it owns | RevenueCat, asked by our own server |
| Running the Wall of Thanks server, only when you ask to be on the Wall or take your name off | The display name you typed, your platform, the app-install identifier, and the IP address the request comes from, as any web host sees it | Cloudflare (Workers) |
| Measuring which Apple Ads campaign, if any, led to your install and purchase (iOS only) | Apple's AdServices attribution token, which Apple issues without the tracking permission and which names a campaign and keyword, not you | RevenueCat + Apple |
| Measuring which TikTok ad, if any, led to your install and purchase (iOS only) | A device identifier, app install/launch events, and the purchase event described above, linked to TikTok's own ad-click data so TikTok can tell which ad worked. Collected only if you grant the tracking permission it asks for — declining means none of this is collected. | TikTok (Business SDK) |
| Aggregate usage analytics (opt-in, off until you turn it on) | Sent with every event: a randomly generated install identifier made on your device, your platform (iOS, Android or web), the Game's language, whether you own Plus, which content packs you own, how many lives you have played, your character's age in decades, and your character's birth country (a country in the Game, not where you are). The events themselves: app opened and closed, a life started (generation and starting origin), a birthday (every tenth year, with the character's age), a death (the character's age, the cause of death as the Game words it, and a net-worth band), which story event was shown and which numbered choice was picked (the event's id, never its text), an ad offer seen, tapped, rewarded or failed (which offer, and how long the clip took to load), the store opened and from where, a purchase started, completed or restored (the product id), a pack tried and kept, a rewind used, a daily streak count, a reminder offered, answered or opened (which kind of reminder and which day, never its text), a tip shown or dismissed, a save exported, imported or deleted, a review prompt shown, and your answer to the analytics question. Never sent: your name, your character's name or any other name, anything you type, story text, stat values such as health or happiness, your exact net worth, an advertising identifier, your contacts, or your location. We instruct the provider not to build a profile of you and not to derive a location from your IP address, and the provider is configured to discard the IP address a request arrives from. | PostHog (PostHog Inc., US cloud) |
We do not receive your real-world identity from any of these providers.
2.4 The Wall of Thanks (only if you ask)
If you bought Supporter, Patron or Founder, your Hall offers to show a display name on the Wall of Thanks, which every player can see. Nothing is sent until you type a name and tap "Show me on the Wall". When you do:
- The Game sends the name you typed, your platform (iOS or Android) and RevenueCat's anonymous app-install identifier (a random code, not your name or email) over HTTPS to a small server we run on Cloudflare.
- The server asks RevenueCat which tier that identifier owns and takes your tier from the answer, never from the Game. A refunded tier is no longer accepted.
- The server keeps your display name, your tier, the date, your platform, whether the purchase was a store test purchase, your request's status (waiting, approved or removed) and a one-way hash of the identifier, not the identifier itself. For up to two hours it also keeps a request counter under a one-way hash of your IP address, so one device cannot flood the server. It keeps no record of how you play.
- Once the server confirms your purchase, your name appears on the Wall for every player. Names are screened for links, email addresses and rude words. A name the screen flags is held, and stays private until the developer reads it. We may decline or remove any name, for example an offensive one or one that names another person. If we remove a name ourselves, we keep a record with the name blanked so the same purchase cannot post it again.
- Every Game downloads the approved names (the name and tier only, with no identifier and nothing about the reader) so it can show the list.
Taking your name off: tap Take my name off in your Hall, or email us. Either removes it from the list. Delete all data in Settings erases only what is on your device and does not contact our server, so take your name off first or email us. If you reinstall the Game or change phones, it gets a new anonymous identifier and the Hall can no longer find your old name: email us the name and we will remove it. Every name on the Wall has a Report a name link that opens a draft email to us.
3. Legal bases (EEA / UK users)
- Consent, for storing and reading information on your device for advertising, and optional analytics, and for showing your display name on the Wall of Thanks (you give it by tapping the button and can withdraw it by taking your name off).
- Legitimate interests, for non-personalised advertising and fraud prevention.
- Contract, for processing an in-app purchase you request.
You can withdraw consent at any time in Settings → Privacy & ads or through your device's ad-settings and tracking controls.
4. Advertising and your choices
- Ads are never personalised. Every ad request the Game makes is flagged non-personalised, regardless of your settings or region. We do not build an advertising profile of you and we do not sell or share your data.
- Tracking permission, when you see it, is TikTok's alone, and only for attribution. On iPhone, TikTok's own measurement tool (Section 2.3) asks Apple's standard tracking-permission question a few seconds after first launch, so TikTok can tell whether one of its ads led to your install or purchase. It is not used to target ads at you inside the Game — ads here stay non-personalised regardless of your answer — and declining it does not change anything else about how the Game works.
- In the EEA and UK you will see a consent prompt from Google's consent tool on first ad load. It covers storing and reading information on your device, which non-personalised ads still do. It does not cover personalisation, which we do not do either way.
- Every ad is opt-in. The Game shows no banners and no interstitials, and never interrupts play with one. Ads appear only when you choose to watch one for a bonus, and the whole Game is playable without ever watching one.
- Owning Plus or the Everything Pass gives you every ad bonus free, so you never need to watch an ad at all.
More about Google's ad data practices: <https://policies.google.com/technologies/partner-sites>
5. In-app purchases
Purchases are handled by the Apple App Store or Google Play and by RevenueCat. We receive confirmation that a purchase or restoration succeeded and a non-identifying transaction reference. We never receive your card number or billing address. Refunds are handled by the store, not by us.
6. Data retention
- On-device save: kept until you delete it or uninstall the Game.
- Ad and anti-fraud data: retained by the ad provider per its own policy.
- Purchase records: retained by the stores and RevenueCat as required for tax, accounting, and dispute resolution.
- Usage analytics (only if you turned them on): kept by PostHog for the retention period of our plan and then deleted. The events carry a random install identifier and nothing that names you. The Game ships no crash reporting tool, so no crash data is collected.
- Wall of Thanks (only if you asked): kept until you take your name off or ask us to remove it. Request counters under a hashed IP address expire after two hours.
7. Sharing
We share data only with the service providers listed in Section 2.3, acting on our instructions, and only as needed for the stated purpose. A display name you ask to put on the Wall of Thanks is shown to every player once your purchase is confirmed (a flagged name is held until we have read it), which is the point of it. We may disclose information if required by law or to protect our rights. We do not sell personal information and do not share it for cross-context behavioural advertising beyond the ad function described above (which you control via consent).
8. Children
The Game is rated for mature audiences and is not directed to children. We do not knowingly process personal data from anyone under the minimum age set by their local law (for example, 13 in the United States, 16 in parts of the EEA). If you believe a child has provided data, contact us and we will delete it.
All advertising in the Game is non-personalised, for every user, in every region, including any user for whom age-appropriate treatment applies.
9. Your rights
Depending on where you live, you may have the right to access, correct, delete, or port your personal data, to object to or restrict processing, and to withdraw consent. Because the Game stores your save locally, you can exercise deletion directly in Settings → Your data → Delete all data. A name on the Wall of Thanks is held on our server, so remove it with Take my name off in your Hall or by email (Section 2.4). For anything held by our providers, email temveno@gmail.com and we will pass the request on or action it within the time your law requires. Usage analytics are keyed to a random install identifier rather than to you, which means we cannot look your events up from a name or an email address. You can stop any further collection yourself at any time in Settings → Privacy, which also discards anything not yet sent.
California residents: we do not sell or "share" personal information as those terms are defined by the CCPA/CPRA, and we do not use sensitive personal information for inferring characteristics.
10. Security
We rely on the operating system's app sandbox and on our providers' security programmes. No method of transmission or storage is perfectly secure.
11. International transfers
Our providers may process data in the United States and other countries. Where required, transfers rely on Standard Contractual Clauses or an equivalent safeguard offered by the provider.
12. Changes
We will update this policy as the Game changes and will revise the "Last updated" date. Material changes will be surfaced in the Game.
13. Contact
Sean Lynch Email: temveno@gmail.com
We aim to respond to any privacy request within 30 days.