Privacy Policy

Last updated: September 22, 2026

Plain-language summary: We collect account info (if you sign up), your gameplay progress, and basic analytics events so the game works and we can see what's fun and what's broken. We don't sell your data. You can ask us to delete your account and data at any time.

1. Who we are

Ambitious Sheep is an independent mobile/web game. This policy explains what data we collect through the Game and our landing page (allinsheep.com), and how we use it.

2. What we collect

Data	When	Why
Email address and authentication identifiers	If you sign up with email/password or Google sign-in	To create and secure your account, sync progress across devices
Guest / local save data	Always, if not signed in	Stored only on your device (browser local storage) so you can keep your progress without an account
Gameplay progress	Continuously while playing (signed-in accounts)	Stage completion, bankroll/XP/gems, unlocked content — synced to the cloud so you don't lose progress
Gameplay & analytics events	Continuously while playing	e.g. session start/end, logins, stage attempts, shares, friend requests — used in aggregate to understand engagement, balance difficulty, and fix bugs
Friends / social data	When you send or accept a friend request, or block another player	To operate the friends list, live-table invitations, and the block system
Live-multiplayer session data	While seated at a live table	Table state, seat assignment, and chat/actions needed to run the hand in real time; this data is transient and tied to the table's lifetime
Device / technical data	Always	Basic technical data such as IP address (used momentarily for abuse-rate-limiting on live tables) and general error logs

We do not collect payment card numbers, government ID, or precise location. We do not request access to your contacts, camera, or microphone.

3. How we use it

To operate core gameplay: save/load progress, run live-multiplayer tables, enforce friend blocks;
To secure accounts and prevent abuse (e.g., rate-limiting, fraud/cheat prevention);
To understand how the Game is played in aggregate (analytics), so we can fix bugs and improve content;
To communicate with you about your account if needed (e.g., a security notice).

We do not use your data for third-party advertising, and we do not sell your personal data.

4. Where data is stored

Account data, gameplay progress, and analytics events are stored with Supabase, our backend/database provider, which hosts data on cloud infrastructure. Live-multiplayer table state runs through Cloudflare Workers/Durable Objects for the duration of a table session. Guest progress with no account stays only in your browser's local storage and is never sent to our servers.

5. Third parties

Supabase — authentication, database, and event storage.
Google — optional sign-in provider, if you choose "Sign in with Google."
Cloudflare — hosts the live-multiplayer real-time infrastructure.

Each of these providers processes data under its own privacy terms as our data processor; we don't share your data with advertisers or data brokers.

6. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data. You can:

Delete local/guest progress at any time by clearing your browser's site data;
Request a copy of your account data, or request full account and data deletion, by contacting us at hello@allinsheep.com. We'll act on verified requests within a reasonable time.

7. Data retention

We retain account and gameplay data for as long as your account is active, so your progress persists. If you request deletion, we remove your account data within a reasonable period, except where we're required to keep limited records for legal or security purposes (e.g., abuse logs).

8. Children

The Game is not directed at children under 13 (or the minimum age of digital consent in your jurisdiction), and we do not knowingly collect personal data from children under that age. If you believe a child has provided us personal data, contact us and we will delete it.

9. Security

We use industry-standard practices (e.g., encrypted connections, provider-managed authentication) to protect your data, but no online service can guarantee absolute security.

10. Changes to this policy

We may update this Privacy Policy from time to time. We'll update the "Last updated" date above when we do; continued use of the Service after changes take effect constitutes acceptance.

11. Contact

For privacy questions, access requests, or deletion requests, contact us at hello@allinsheep.com.

This document is a standard, indie-appropriate template and is provided for general informational purposes. It is not a substitute for advice from a qualified lawyer or privacy professional in your jurisdiction.