Privacy Policy

Effective October 11, 2026

This policy covers sandboxsinkhole.com and the apps and games published by Sandbox Sinkhole LLC.

The short version

We don’t want your data. Our apps are built to work without accounts, ads, or tracking.

This website

sandboxsinkhole.com is a static site hosted on GitHub Pages. We don’t run analytics, set marketing cookies, or collect personal information here. GitHub, as the hosting provider, may log standard technical information (such as IP addresses) for security purposes — see GitHub’s privacy statement.

Our apps and games

• No accounts. Our apps don’t require you to sign up or sign in. Some games use a random, anonymous session ID to run a game room; it isn’t an account and isn’t linked to your name, email, or contact details.
• No ads or trackers. We don’t include advertising or third-party tracking SDKs.
• Your data stays with you. Game progress and settings are stored locally — in your browser’s local storage for web games, or on your device for mobile apps.
• Multiplayer games (such as Countdown) transmit only what’s needed to run the session — game moves and a display name you choose. Game rooms live only in server memory and are deleted when the last player disconnects; we don’t store them. Our hosting provider (Google Cloud Run) keeps standard, short-lived technical request logs (such as IP address and timestamp) that never contain your name or what happened in the game.
• Party games that collect cards from guests’ phones (such as Shorthand) send only what’s needed to fill the bowl: the cards a guest types (up to 60 characters each), the difficulty picked for each card (1–3), and when they were sent. The cards go to a temporary game room, identified by a 4-letter code, hosted on Google Firebase.
  • No names or contact details. Instead, each phone, the host’s included, gets a random, anonymous session ID (Firebase Anonymous Authentication). There’s no sign-up, email, or name, and the ID isn’t an account. Apart from Google’s standard logs (below), we don’t collect any other device identifiers.
  • Only the host’s phone gets the cards. No other phone can read them: not other guests, and not the guest who wrote them once they’re sent. We don’t read them either. The host’s phone pulls the cards into the game when collecting finishes.
  • Rooms expire after about 6 hours. A room and its cards expire about 6 hours after the room is created. After that, guests can’t open the room or add cards, and Google’s automatic cleanup deletes the room and its cards, typically within about a day.
  • Anonymous IDs are deleted too. Firebase keeps a record of each anonymous ID with no game content attached: just the ID and when it was created and last used. Firebase’s automatic cleanup deletes these records some time after they turn 30 days old.
  • What stays on the guest’s phone. The join page remembers, in your browser’s local storage, that you’ve already sent cards to a room, and keeps your anonymous session there so you don’t submit twice by accident.
  • No analytics or crash reporting. The app ships with no Firebase Analytics, no Crashlytics, and no other tracking SDK. If that ever changes, this policy says so before the release that changes it. Google, as the hosting provider, keeps standard technical logs (such as IP address, browser or device type, and timestamp) for a few weeks to a few months; they never contain your cards. See Firebase’s privacy information.

This describes how our apps work today. If a future app — or a future version of one of these — needs to handle data differently, its own listing and support page will say so plainly, and this policy will be updated before that release, not after it.

Purchases

Purchases in our mobile apps are processed by the App Store or Google Play. We receive no payment card details — payment is handled entirely by Apple or Google under their privacy policies.

Contact

Questions about this policy: hello@sandboxsinkhole.com

Sandbox Sinkhole LLC, 240 S State St, Westerville, OH 43081, United States