Privacy Policy

Last updated: October 21, 2026

Basic policy and scope

totolab ("we") limits the information it handles in the game application DEBTSWEEPER (the "App") to what is necessary for providing the App and responding to inquiries.

This policy applies to the Android version distributed through Google Play and the iOS version distributed through the App Store. The App itself does not provide its own user accounts or an independent backend. Optional platform cloud saving is described in the CloudSave section below, and the contact form on the Support page is described in the Contact form section below.

For platform authentication, achievements, and leaderboards, the Android version uses Google Play Games Services and the iOS version uses Apple Game Center.

On-device data and support information

The App's save data and settings are stored on the user's device. When CloudSave is ON, the game-progress snapshot described below is also stored by Apple or Google. It is not sent to our servers and does not synchronize between Android and iOS.

During normal use, the App does not independently collect directly identifying information such as a name, postal address, phone number, or email address.

When contacted for support, we may handle information submitted by users, such as contact information, inquiry details, device information, OS version, and issue description, as needed to respond and provide support.

Contact form

When you submit the contact form on the Support page, we receive the following information:

• Your reply email address, and the type and content of your inquiry
• Attached screenshots (optional; they are resized before sending, and embedded image metadata such as the capture location is removed)
• App version, platform, OS version, device model, and app language (sent automatically when the form is opened from the App)
• Browser type (User-Agent) and a value derived from your IP address for abuse prevention (recorded in a form that cannot be turned back into the original IP address)

Submitted information is received in the Tokyo region of Google Cloud (Firebase), and its content is forwarded through an email delivery service (Resend, Inc.) to our mailbox (a service of SAKURA internet Inc.). Records on Google Cloud are deleted automatically 90 days after receipt.

To avoid receiving inappropriate images, attached images are checked with Google Cloud image analysis (Cloud Vision API). Images that are likely inappropriate are discarded instead of being forwarded to us. The images themselves are not kept in the records on Google Cloud.

This information is used only to respond to your inquiry, investigate issues, and prevent abuse of the form. The form does not send automatic reply emails.

Android: Google Play Games Services

The Android version uses the Google Play Games Services SDK. The SDK may transmit the following information to Google for processing:

• Play Games gamer identity, including a gamertag and avatar, a game-specific Player ID, and authentication status
• Achievement unlock status and in-game actions corresponding to achievement unlock requests
• Analytics information about interactions with and use of the SDK
• Diagnostic information used to maintain and improve the stability of the SDK and service

The Android version does not access the email address, postal address, phone number, or password associated with a Google Account, or the Play Games friends list. It processes the player ID, achievement progress, scores, and ranks for achievements and leaderboards. The platform leaderboard screen may show gamer information and scores according to profile visibility settings. Saved Games is used when CloudSave is ON. Multiplayer and events are not used.

iOS: Apple Game Center

The iOS version uses Game Center authentication, achievements, and leaderboards through Apple's GameKit framework. Game Center may process the following information on Apple's servers:

• Game Center player identifiers, nickname, avatar, and authentication status
• The fact that the App is played, gameplay activity, and achievement unlock status
• Usage and device information needed to provide and improve Game Center and prevent fraud

The iOS version processes player identifiers, achievement progress, and leaderboard scores and ranks. The Game Center leaderboard screen may show nicknames and scores according to profile visibility settings. Friends lists, multiplayer, and challenges are not used. CloudSave uses Apple CloudKit rather than Game Center Saved Games.

CloudSave (optional)

When CloudSave is ON, DEBTSWEEPER stores game-progress data in the Apple CloudKit private database on iOS or Google Play Games Services Saved Games on Android. The snapshot includes an interrupted SHIFT and board, in-game economy and rewards, tutorial progress, unlocks, achievements/statistics, and the gameplay report required by LOAD LOG. It does not include device-specific audio, control, language, or visual settings, raw platform account identifiers, diagnostic logs, crash logs, or telemetry. We do not create an independent account or operate an independent CloudSave server. Apple or Google may process account, service-usage, and diagnostic information under their own terms and privacy policies.

On iOS, the app creates a one-way SHA-256 alias from CloudKit's container-scoped user-record ID and retains only that alias on the device. It is used for account-change checks and to bind pending deletion to the same iCloud account. The raw user-record ID is not persisted or included in the saved-game snapshot, logs, or data sent to a DEBTSWEEPER server. The Game Center account is not used as the CloudSave owner.

CloudSave works only between devices on the same operating-system platform; saves do not synchronize between iOS and Android. The app saves an upload snapshot after SHOP closes, GAME OVER is confirmed, DAY7 CLEAR is confirmed, or play returns to the title screen. Failed uploads remain on the device for retry at a later startup, app resume or other synchronization opportunity, after account and conflict checks. Losing the device or uninstalling the app may remove pending data, leaving progress after the last successful checkpoint unavailable. If startup cannot retrieve CloudSave within five seconds, the game starts offline and does not overwrite the cloud based on an assumption. A real conflict is resolved by choosing the local or cloud save on the title screen.

CloudSave can be turned OFF in SETTINGS. DELETE SAVE removes local progress immediately and requests deletion of CloudSave progress for the same platform account. If offline, the deletion request is retained on the device; old cloud progress is not restored and new cloud progress is not uploaded until deletion succeeds. Uninstalling the app while deletion is pending may remove the request and leave cloud data in the provider account. DELETE SAVE does not delete the Apple or Google account, Game Center or Play Games profile, or platform achievements.

Purpose of use

Information collected and transmitted is used for the following purposes:

• Providing platform authentication, achievements, leaderboards, and game-progress storage and restoration on the same operating-system platform
• Maintaining, analyzing, and improving the Google and Apple services and preventing fraud
• Identifying, investigating, and resolving issues with the App
• Responding to inquiries and contacting the requester
• Preventing abuse of the contact form
• Responding as required by law or applicable terms

We do not use this information for advertising or marketing. Google's and Apple's respective policies apply to their own use of information.

External services and security

On-device save data and settings are stored in app-specific storage isolated by Android and iOS. When CloudSave is ON, game progress is transmitted to and stored in Apple CloudKit or Google Play Games Services. It is not sent to our servers.

Information handled through Google Play Games Services is encrypted in transit using HTTPS and processed on Google's servers. For details, see the Google Privacy Policy and Play Games Services data collection disclosure.

Information handled through Game Center is managed by Apple. For details, see the Apple Privacy Policy and Game Center & Privacy.

We do not store copies of information processed by these platform services on an independent backend. Other than processing by the service providers described above, we do not sell information we handle or provide it to third parties without the user's consent, except as required by law.

Data retention

The App's save data and settings remain on the device until the user deletes them. CloudSave may remain with the provider until deletion completes. Information retained by Google Play Games Services is subject to Google's policies and the user's settings. Apple retains information collected by Game Center for as long as the Apple Account remains associated with the Game Center account.

Information submitted by a user for support will be retained only for as long as necessary to respond and meet legal obligations, then deleted or anonymized. Contact form records on Google Cloud are deleted automatically 90 days after receipt.

Data deletion and controls

• On-device save data: Use DELETE SAVE in SETTINGS. It also requests CloudSave deletion, which remains pending while offline; see CloudSave above. It does not delete platform achievements, leaderboard entries, or profiles.
• Google Play Games data: Open your Play Games profile, select Your Data, Delete Play Games Account & Data, and Delete individual game data, then select Delete for DEBTSWEEPER. For more information, see Google's guide to deleting Play Games data or a Play Games profile.
• Game Center data: The App does not provide a feature for resetting or deleting Game Center achievements or leaderboard entries. Sharing and sign-in settings can be managed by opening Game Center in iOS Settings. Requests to access, correct, or delete personal data managed by Apple can be made through Apple's Data and Privacy page.

CloudSave is managed separately from platform achievements, leaderboards, and profiles. DELETE SAVE does not delete platform achievements, leaderboard entries, or profiles.

Changes to this policy

If the information handled, external services used, or features of the App change, we will update this policy and the privacy disclosures in each store. Material changes will be announced on this page or in the App.

Contact

For inquiries about this policy or the handling of data, use the contact form on the Support page or email hello@totolab.app.

Please do not send passwords or other secrets when contacting support.