Privacy policy
Last updated October 7, 2026
The short version
The Spitball app doesn't collect any data. There's no account, no analytics, no advertising SDK and no tracking in the game. We never receive anything you do in it. If you're signed in to iCloud, your Locker Room syncs to your other devices through your own iCloud account, which we can't see.
This website, spitballgame.io, does count anonymous page visits, with analytics of our own. Here's exactly what.
What's stored, and where
The game saves your run in progress, your Locker Room profile (unlocks, card sets and season records), your Record Book and your settings (like music on or off) on your device: in the app's own storage on iPhone, iPad and Mac, or in your browser's local storage on the web version. Deleting the app (or clearing the site's data in your browser) deletes it.
iCloud sync (App Store version). If you're signed in to iCloud, the app also keeps your Locker Room profile and your recent Record Book runs in iCloud key-value storage, in your own iCloud account, so the same Locker Room is on your iPhone, iPad and Mac. Apple stores it under its privacy policy; we have no access to it and never receive it. Your run in progress and your settings stay on each device. A device that isn't signed in to iCloud doesn't sync; everything stays on it. Deleting the app leaves the synced copy in your iCloud, so reinstalling brings your Locker Room back.
Network
The App Store version plays fully offline and talks to no server of ours; iCloud sync, when it's on, goes through Apple's iCloud, handled by iOS. This website is served by Cloudflare, which may keep standard server logs, such as IP addresses, for security, under Cloudflare's privacy policy. The old address, spitball.naveed.io, only forwards here; its host (GitHub Pages) may do the same under GitHub's privacy statement. The game itself sends nothing.
The website
This applies to the pages of spitballgame.io only, never to the app. We count visits with our own analytics, not an outside company's. It notes which page was viewed, the site or link that sent you, your general device, browser and language, your approximate country and region, and how quickly the page loaded. It sets no cookies: a random ID kept in your browser's own storage tells one visit from another. It doesn't know who you are. There's no account, name or email in it, and nothing that follows you to other sites.
We don't store your IP address. It's read once, in memory, when a visit is counted, to work out that rough location, and then dropped. A scrambled code made from your network address, which can't be turned back into it and changes every month, is kept to estimate how many different visitors there were. Detail about each visit is deleted within 30 days, leaving only daily totals.
Children
Spitball doesn't collect personal information from anyone, including children under 13.
Changes
If what's stored or where it goes ever changes, this page will say so before the update ships, and the App Store privacy label will be updated with it. Website visit counts were added on October 7, 2026.
Contact
Questions: support@spitballgame.io.