Privacy policy
For the game Human In The Loop by ghostbust555. Effective 14 September 2026.
The short version. The game works entirely offline and collects nothing unless you sign in. If you choose to sign in, your card collection and progress are saved to a cloud account so you can pick them up on another device. There are no ads, no analytics, no tracking, and nothing is sold or shared. You can delete the account, or just its data, at any time.
What the game stores on your device
Your collection, your progress, your settings and your current run are kept in the app's own storage on the device. They never leave it unless you sign in (below). Uninstalling the app removes them.
What is collected if you sign in
Signing in is optional. It exists for one reason — to keep a copy of your save in the cloud so it can follow you to another phone or a reinstall. If you sign in, the following is stored:
| Sign-in account | Your email address, the sign-in method you used (Google, or an email and password), and an account identifier. If you sign in with Google, the email address and the name on your Google account are taken from it, and nothing else. |
|---|---|
| Cloud save | Your profile (counters such as runs played and best room reached, settings, loadouts), your card collection, your discoveries, and a log of cards and relics gained and runs completed, each with a date and which edition of the game it happened in. |
That is the whole list. The game does not collect your name, contacts, location, device identifiers, advertising identifiers, or anything about other apps.
How it is used
- To restore your save when you sign in on a device, and to keep two signed-in devices in step.
- To answer your support and deletion requests, if you send one.
Nothing else. Your data is not used for advertising, profiling, or analytics, and it is not sold, rented or shared with anyone.
Who it is shared with
The account and the cloud save are held in Google Firebase (Firebase Authentication and Cloud Firestore), which acts as the game's storage provider on the developer's behalf and under Google's privacy terms. No other third party receives anything.
If you install the game from Google Play, Google Play's own terms and privacy policy apply to the download and to any statistics Google collects about installs; the game itself has no access to those.
Network access
The app asks for internet access in order to reach Firebase when you are signed in. Versions of the game distributed outside Google Play also use it to check for updates; that check fetches a small public file and sends nothing about you. Beyond those, the game makes no network requests.
How long it is kept
For as long as you keep the account. When you ask for deletion, the account and the cloud save are removed within 30 days, and nothing is retained after that. Data on your own device is under your control and is removed by uninstalling the app.
Deleting your account or your data
Follow the steps on the account deletion page. You can ask for the whole account to go, or for only the cloud save to be wiped while the sign-in stays.
Security
Data travels to and from Firebase over encrypted connections, and the storage rules allow each account to read and write only its own documents. No system is perfectly secure, but the amount collected is deliberately small so that the worst case stays small too.
Children
The game is not directed at children under 13, and no account should be created for one. If you believe a child has signed in, email the address below and the account will be deleted.
Changes
If the game ever collects more than this page describes, this page will be updated first and the date at the top will change. The current version always lives at this address.
Contact
Questions about privacy, or a request about your data: ghostbust555@gmail.com.