The App integrates no third-party analytics or tracking SDK. The only usage data we receive is the anonymous daily summary described in section 4.
The following stays in the App's sandbox on your device and is never sent to us: imported game files (ROMs); battery saves, save states, and cover images; play-time statistics; interface settings, skins, and cheat codes; remaining invite-reward time. Deleting the App removes all of it.
| Situation | What is sent | Recipient |
|---|---|---|
| Cover art download (optional) | Game title text, to match artwork | Public artwork repository |
| Achievements (Max tier, opt-in) | The RetroAchievements username and API key you enter, plus a checksum of the game file | RetroAchievements service |
| Anonymous daily usage summary (can be switched off) | Random install ID, date, tier, language, app/OS version, minutes played, console codes | This app's Apple CloudKit database |
| Invite code registration and binding | Your 8-character invite code and an anonymous identifier generated by Apple (CloudKit user ID) | This app's Apple CloudKit public database |
| iCloud sync (optional, opt-in) | Your save files and save states | Your own Apple iCloud account |
iCloud: sync uses your own private iCloud container. The data lives in your account; we cannot access it and hold no keys. Turning the switch off stops all uploads.
Achievements: disabled by default. Requests are made only after you enter your own RetroAchievements credentials and enable the feature. Credentials are stored locally only; we neither receive nor store them. RetroAchievements has its own privacy policy.
Invite codes: the invite feature needs shared storage both parties can read — otherwise a submitted code cannot be verified, and an inviter would never learn that someone used their code. We keep this in Apple's CloudKit public database and store only two things: the invite code itself, and an anonymous per-app identifier generated by Apple. That identifier contains no name, email, or directly identifying information and cannot be linked across apps. We operate no account system and collect no registration data. If you do not use the invite feature, no such record is created.
Cover art: the request contains only the game title text — no device or personal identifiers. You may skip this entirely and pick a local image instead.
To understand how many people use the App and which systems matter to them, the App sends one aggregated record per device per day. It contains:
| Field | Example | Why |
|---|---|---|
| Install ID | a random UUID generated on this device | So a device active on several days is counted once per day, and retention can be computed |
| Date and first-use date | 2026-08-11 | Daily actives and retention cohorts |
| Membership tier | free / pro / max | How many users each tier has |
| Interface language, app version, major OS version | zh, 1.0, 18 | Where to focus localisation and compatibility work |
| Minutes played that day, and console codes used | 42, ["GBA","GB"] | Which systems deserve more work |
What the Install ID is and is not. It is a random value created on your device on first launch. It is not the advertising identifier (IDFA), not your Apple Account, and not a device serial number. It cannot be linked to you, cannot be shared with or read by other apps, and changes if you reinstall the App or switch devices. We use it for nothing but counting.
What is never included: the names of your games, the contents of your saves, anything you type, your location, or any contact information.
Turning it off. Settings → "Anonymous usage stats". Switching it off stops all reporting immediately and also erases the Install ID stored on your device, so nothing is left behind.
These records go to this app's Apple CloudKit database. We do not sell, share, or transfer them to anyone, and they are never used for advertising.
The free tier shows interstitial advertisements when switching pages or opening a game. In the current version these are served by the App itself with no third-party ad-network SDK, so no advertising identifier is collected, no personalised targeting occurs, and no cross-app tracking takes place. Subscribing to any paid tier removes ads entirely. If a third-party ad service is integrated in a future version, this policy and the App Store privacy label will be updated beforehand.
Subscriptions are handled by the Apple App Store. Apple processes payment; we never see or store your payment method, billing address, or Apple Account details. The App only reads whether a valid subscription is currently active, in order to unlock features.
The App is not directed at children under 13 and does not knowingly collect information from them. The App collects no personal information from anyone; the anonymous usage summary described above contains nothing that identifies a person, and can be switched off in Settings.
Because we hold none of your data, you retain full control: access and export everything through the Files app; delete individual games in-app or uninstall to erase all data; turn off iCloud sync, achievements, and anonymous usage stats to stop all network transmission. These mechanisms cover access, deletion, and objection rights under GDPR, CCPA, and similar regimes. For anything further, contact us below.
App data resides in the iOS sandbox, protected by system-level isolation and device encryption. All network requests use HTTPS.
If this policy is updated we will revise the effective date above, and notify you in-app for material changes to how data is handled.
Privacy questions, requests, or complaints: haoyc666@outlook.com