Sugar Sorter has not yet launched. This privacy policy describes how the game is expected to process information when launched. The information will be updated if the implementation changes.
31 October 2026 · v5.2
Who controls your data
Data controller: Jesper Bertram Graff, individual developer of Sugar Sorter, Denmark. Contact: sugarsorterapp@gmail.com
Age requirement
Sugar Sorter is intended for people aged 13 or older. Before creating an online player profile, the player must confirm they are at least 13 years old. We do not request a date of birth.
Data we collect
Where needed, we process:
• A unique pseudonymous player identifier for secure identification (the final sign-in method will be decided before launch).
• Nickname, avatar, level progress, stars, points and leaderboard positions.
• Last activity and timestamps relevant to Daily, Weekly and All-time leaderboards.
• Two separate coin balances: free/earned coins and unused purchased coins, plus booster transactions.
• Necessary Apple purchase references, purchased-coin entitlements, permanent full-game unlock status and the minimum details needed for secure recovery of purchased entitlements.
• If you contact support: your email address and the contents of your request.
Technical data
The app uses local device storage for game data and settings. The planned online service will use Cloudflare Workers (server functions) and Cloudflare D1 (database). To handle network requests, Cloudflare and the selected sign-in provider may process technical data such as IP address, access time and request/security information. The final sign-in provider, logging and associated retention periods must be checked before launch. Apple handles payments; we do not receive payment-card numbers.
Why we use data / legal bases
Player profiles, progress, leaderboards, coins, purchased entitlements and secure recovery are processed to provide the game and perform the purchase contract (GDPR Article 6(1)(b)). Necessary security, abuse prevention and support are processed based on a documented balancing of legitimate interests (Article 6(1)(f)). Records required by law are processed under Article 6(1)(c) where applicable. Data is not kept longer than necessary for its specific purpose.
Public leaderboard
Your nickname, selected avatar and score/rank may be visible to other players. Your anonymous player ID, purchase information, IP address and support emails are never shown on the leaderboard.
Service providers
Cloudflare is the planned processor for online player data using Cloudflare D1 and the game API using Cloudflare Workers. A separate identity/sign-in solution has not yet been selected; this policy will be updated if an external provider is used. Apple handles App Store purchases and payments. Our email provider handles support requests. No advertising or third-party analytics SDKs are planned at launch.
International transfers
The Sugar Sorter D1 database is planned to be created with Cloudflare's EU jurisdiction, meaning the database itself runs and stores data within the European Union. EU jurisdiction must be selected when creating the database; it cannot simply be enabled later. This does not mean all processing takes place in the EU: Workers, network traffic, sign-in, security services, support and subprocessors may involve processing outside the EU/EEA. Any international transfers will be reviewed before launch and rely on a valid transfer mechanism, such as EU Standard Contractual Clauses where required.
How long we keep data
Ordinary player profiles and personally linked gameplay data will be automatically deleted after 24 months of inactivity, measured from the last recorded activity. This covers, among other things, nicknames, avatars, progress, points, earned coins and related leaderboard records, unless another lawful retention basis applies. Deletion must be performed by a scheduled Cloudflare Workers job even if a player never opens the app again.
Unused coins purchased through App Store in-app purchase never expire. Automatic 24-month deletion must therefore never remove those coins or make them inaccessible. Purchased and earned coins are stored separately. Only necessary, limited purchase/entitlement records and a secure means of recovery are retained, without maintaining an active public player profile. Permanent full-game unlock must likewise remain restorable. Any statutory accounting records or records needed for specific legal claims are kept separately under the applicable lawful basis and retention period.
Support requests are normally deleted within 12 months after a case closes unless there is a specific lawful need to keep them longer. Deleted data may remain in Cloudflare's technical recovery history for a limited period; for D1 Free, the current recovery window is up to 7 days. Restoring from recovery history must respect deletions that have already been completed.
Delete My Data
In Settings → Delete My Data, a player can request deletion of their account and related information, including nickname, avatar, progress, stars, points, earned coins and personally linked leaderboard data. Deletion must also take effect in the live server database and the selected identity system, not only on the device.
Before a voluntary full account deletion, the app must clearly explain if the action could mean that unused purchased consumable coins can no longer be linked to or recovered for that player. The player must be able to make an informed decision. Information is only retained after deletion where there is a specific lawful basis. Permanent Full Game Unlock can generally be restored through Apple's purchase restoration; Apple does not automatically restore consumable purchases. We must therefore provide a separate, secure purchased-coin recovery mechanism for an existing account.
Your EU/EEA/UK rights
Where applicable, you may request access, correction, deletion, restriction, objection and data portability. You may also complain to your local data-protection authority. In Denmark, the supervisory authority is Datatilsynet. Requests can be sent to sugarsorterapp@gmail.com.
U.S. privacy rights
Where applicable under U.S. state privacy law, you may have rights to know/access, correct, delete and obtain a copy of personal information. Sugar Sorter does not sell personal information and does not share it for cross-context behavioural advertising.
Children’s privacy
Sugar Sorter is not intended for children under 13. Online player profiles must not be created for users under 13. If we learn that a child's data has been processed without a valid basis, we will delete it without undue delay unless law requires particular records to be retained.
Security
Player data must be protected through access controls, secure connections and server-side verification of purchases and balance changes. Players must not be able to edit their own or other players' purchased-credit entries directly from the app. Security, logging, access permissions and deletion workflows must be tested before launch. No electronic system can be guaranteed entirely risk-free.
Automated decisions
Sugar Sorter does not use your personal data to make solely automated decisions that produce legal or similarly significant effects, and we do not use personal data for advertising profiling.
Changes to this policy
We may update this Privacy Policy if the game, service providers or legal requirements change. The current effective date will always be shown. Material changes will be communicated in the app before or when they take effect.
Contact
For questions or personal-data requests, email sugarsorterapp@gmail.com. The final policy will be published at the URL provided in App Store Connect once the described systems are implemented.