Privacy policy

Updated September 17, 2026

Sumloop is a daily number puzzle from PSB Ideas, operated by Paul Steinberg LLC. Players under 13 can use local puzzle play without an account, online rankings, advertising or optional analytics.

Web play

The web game saves progress and preferences in your browser. It has no advertising or optional usage analytics. Cloudflare hosts the site and processes connection information to deliver and protect it.

Players under 13

The same daily puzzle is generated on the device. Progress and the selected age range stay in local storage. In under-13 mode, the Android app does not initialize Firebase Authentication, App Check, Analytics or the advertising plugin, does not request ads, and does not send scores to our server. Unanswered age selections also leave these services off. Downloading the web game and opening external policy links still sends ordinary connection information to the hosting provider. Device storage can be lost if the app is uninstalled or browser data is cleared.

Changing to under-13 mode signs out the device and restarts the Android app to stop previously active services. It does not delete an existing online account or previously collected data. A parent or guardian can contact us using the address below for account-data requests.

Android accounts and scores (ages 13+)

Google sign-in is optional. Firebase Authentication processes your Google account identity to authenticate you. We store your account identifier, automatically generated public name, verified scores, tile-visit totals and play and ranking statistics. Your automatically generated public name and leaderboard results are visible to other players; your Google name, email and photo are not displayed publicly. Firebase App Check and server request limits help prevent abuse.

Age choice and advertising

Your selected age range is saved on your device; we do not ask for your birthday. An age choice and acceptance of the Terms of Use and acknowledgement of this policy are required before play. A versioned acceptance record is saved on your device. There are no ads for players under 13. Version 1.0 (version code 5) has no advertising for any age group. The advertising plugin is disabled and no banner or advertising consent requests are made. Older internal-test versions may have displayed Google test banners.

The version 6 ad-supported update can display Google AdMob banners for players aged 13 and older. We request non-personalized ads with a general-audience content limit. Players aged 13-17 are marked as under the age of consent. Google may process IP addresses (including approximate location), ad interactions, diagnostics and device or app identifiers to deliver and measure ads and prevent fraud. Android advertising-ID and AdServices permissions remain excluded from this build. Non-personalized ads can still use local storage and process data; they are not anonymous. Google consent messages are shown when required, and ads are requested only when its consent system permits them. Use Ad privacy choices in Settings when available to review or change choices. If consent cannot be obtained or refreshed, advertising stays off and gameplay remains available. Google processes data under its privacy policy. Under-13 and unknown-age players receive no ads.

Optional analytics

Adults can choose to share usage analytics in Settings. This is off by default and unavailable to anyone under 18. If enabled, Firebase Analytics processes app-instance identifiers, device/app information, sessions and events such as starting play or completing a target. We do not send your Google account identifier, nickname, email or full tile paths to Analytics. Advertising-ID collection for Analytics is disabled. Turning analytics off stops future collection and resets the local Analytics identifier; it does not erase previously processed reports. Saved scores and rankings work without optional analytics.

Your controls and deletion

You can change privacy choices in Android Settings. Clear browser storage to remove local web progress. Use the in-app Delete account action to remove your Firebase account, profile and daily score entries, or follow our account-deletion instructions. Account data is retained until deletion. A durable deletion job retries interrupted requests automatically. After completion, a minimal account-identifier marker is retained for seven days to prevent stale requests from recreating deleted data, then removed. Service providers may retain limited operational or security records under their retention policies; aggregate reports may remain.

Service providers and requests

We use Google Firebase and Cloudflare. Earlier internal-test builds also used Google AdMob for test advertising. These services may process data outside your country. Read Google’s privacy policy and Cloudflare’s privacy policy. Contact us to request access, correction or deletion, or to report an account belonging to someone under 13.

PSB Ideas, operated by Paul Steinberg LLC
support@psbideas.com