Privacy Policy

1. What information do we use, and why?

Accounts and guests. When you sign in, we receive an identifier from your sign-in provider and associate it with a Lolo account. Google sign-in gives us a stable account identifier, your email address, and information about its verification. We use these to recognize your account and support compatible sign-in methods. We do not request your Google profile photo, contacts, or messages. Your email address is not shown to other players. We also process the profile details you choose, such as a display name and avatar. Multiplayer guests receive identifiers even without an account. Signing in can associate guest progress or participation with your account.

Email sign-in. Where offered, we send a short-lived code to the email address you provide to verify access to your mailbox and sign you in. Cloudflare processes the recipient address and message to deliver it. We store protected code verifiers, temporary sign-in records, and abuse-prevention counters; codes expire after 10 minutes and temporary records are periodically deleted. We do not use sign-in email addresses for marketing without your permission.

Gameplay and preferences. We process game state, progress, scores, settings, and related activity information to provide the features you use. Multiplayer also involves membership, presence, invitations, and information exchanged during play. Some data stays on your device; other data reaches our servers or other players. Existing local progress may be imported or migrated when supported.

Technical information. Our infrastructure processes information such as IP addresses, browser or device details, connection records, and error information to deliver Lolo, maintain security, and diagnose problems. This is separate from the usage statistics described below.

Support. If you contact us, we receive your email address, message, and any information you choose to include, and use them to respond and resolve the issue. Please send only what is relevant.

Feedback. If you use Send feedback, we receive your message, the kind of feedback you chose, and, if you add it, your email address, along with the game and page you sent it from, the app version, and a general device type (for example, “iPhone · Safari”). We use it to understand problems and improve Lolo, and your email only to reply. Feedback is not linked to your account.

You choose whether to sign in, join multiplayer, send feedback, or contact support. Information necessary for a feature is needed to provide it; without it, that feature may not work. You do not have to provide account information to play games that support solo guest play.

2. Browser storage and usage statistics

We use cookies and similar browser storage to support sign-in, guest identities, gameplay, saved progress, and preferences. Some storage lasts only for a visit; other storage persists so a feature continues working when you return. You can manage or clear it through your browser, but doing so may sign you out or remove local progress. Browser controls do not delete information already held on our servers.

We use limited usage and reliability statistics to understand how Lolo is used, whether features work as expected, and how we can improve the service. These analytics are not tied to account or guest identities, and we do not use persistent player or device identifiers to build individual play histories.

We do not use advertising trackers or session replay, and we do not use browser storage to build analytics profiles or track people across unrelated websites.

3. Who receives information?

Other players. Players in a shared game can receive your display name, avatar, presence, and gameplay information. People with an invitation may see group details before joining. Other participants may keep copies of shared progress, so leaving a group or deleting your account does not necessarily erase their copies.

Direct connections. Multiplayer may connect devices directly. When it does, other participants can receive your IP address as part of establishing the connection, even if the game does not display it. Only join and share invitations with people you trust.

Service providers. We use providers for hosting, storage, content delivery, network services, and support email. Cloudflare supplies our core game infrastructure. These providers process information needed for their services under appropriate contractual arrangements. A sign-in provider also handles information about your interaction with its own service under its privacy policy.

Legal and business needs. We may disclose relevant information when legally required, to protect people or the service, to establish or defend legal claims, or as part of a genuine business transfer. Any transfer of personal information remains subject to applicable privacy safeguards.

We operate from the United States, and our providers may process information in other countries. Those countries may have different privacy laws.

4. How long do we keep information?

We keep account information and cloud progress while your account provides those features, until you delete the information or account, unless limited retention is needed for a legal or security reason.

Guest, session, and multiplayer information is retained for authentication, active or recoverable play, and related security needs. Different games may have different recovery periods; shared games are not permanent archives.

Feedback sent through Send feedback is deleted automatically after 12 months.

Support records are kept to resolve requests and necessary follow-up or disputes. Technical and security records are retained for the period needed to investigate faults or abuse and meet legal obligations. We consider the record’s purpose, sensitivity, ongoing need, and applicable legal deadlines when deciding that period.

We may keep anonymous usage and reliability statistics for as long as they are useful to operate and improve Lolo.

Deleted information may remain temporarily in restricted backup or recovery systems until those copies expire or are overwritten. We do not use those copies for ordinary operation. Information needed for a specific legal obligation or claim is restricted to that purpose. We use reasonable safeguards, but no service can guarantee complete security.

5. Your choices and rights

You can edit available profile settings, delete your account or guest data, and clear local data from your device through settings. Clearing local data from a device is separate from deleting server data. If you have questions or other privacy requests, contact hello@lolo.gg.

Depending on applicable law, you may have rights to access, correct, delete, receive a portable copy of, or restrict use of your personal information. You may also withdraw consent where processing relies on it, without affecting earlier lawful processing. Rights have limits and exceptions, which we will explain when relevant.

We may need to verify that a request relates to your information. When we cannot identify the relevant records or verify your connection to them, we may be unable to complete the request. We do not require an account just to submit a request. Depending on where you live, you may also have the right to contact an applicable privacy regulator.

6. Age requirement

Lolo is for people aged 13 and older. We do not knowingly collect personal information from anyone under 13. If you believe someone under 13 has given us personal information, contact hello@lolo.gg so we can look into it and delete that information.

7. Changes to this policy

We may update this policy as Lolo or legal requirements change. We will identify the current version, notify you of material changes through an appropriate service notice, and explain new uses before they begin. Where required, we will obtain consent rather than treating a policy update as permission.