Privacy policy

Last updated 10 August 2026

The short version

Heirloom collects nothing. No accounts, no analytics, no advertising, no tracking. The app never connects to the internet at all. Your save sits on your phone and nowhere else.

This website collects nothing either. There is no sign up form, no cookies, no analytics and no tracking pixels.

I am Deniz. I build Heirloom on my own. My email is deniz1lapsekili@gmail.com.

1. What this policy covers

Two things, described separately because they behave differently.

2. The app collects nothing

The app collects no personal information and sends nothing anywhere. It cannot, because it contains no code that talks to a network.

The privacy manifest shipped inside the app declares no tracking, no tracking domains and no collected data types. The one required reason API it declares is UserDefaults, used to store your save, under reason CA92.1.

3. Where your save lives

On your phone. The whole save is written into the app's own storage using UserDefaults. There is no copy on any server. I cannot see it, read it or restore it.

To delete it, delete the app. The save goes with it. There is nothing to request from me, because I never had it. Starting a new life inside the game overwrites the previous one.

If your iPhone backs itself up to iCloud or to a computer, your save may be inside that backup. That backup belongs to you and to Apple, and Apple's privacy policy covers it.

4. Apple's App Privacy label

The App Privacy answer for Heirloom is Data Not Collected. That is accurate, and with no form on this website it is true of the whole project rather than only the app.

5. TestFlight

Heirloom is in beta through TestFlight, which is Apple's software rather than mine. When you join a beta, Apple runs the sign up, the install and the updates, and Apple collects tester information as part of doing that. I do not control any of it and I cannot switch it off.

Through App Store Connect, Apple shows me:

If you join using the public link, Apple does not show me your email address.

I use all of this for one purpose, which is fixing the game. Apple's own handling of tester data is described at apple.com/legal/privacy.

6. This website

This site sets no cookies. It runs no analytics, no tracking pixels and no advertising. It loads no fonts, scripts or images from anybody else's servers. Every request your browser makes while reading this page goes to playheirloom.app and nowhere else. Nothing here follows you to another website. There is no form on it, so there is nothing for you to submit and nothing for me to store.

The site is hosted by Vercel. Like every web host, Vercel's servers receive your IP address, your browser's user agent and the address of the page you asked for, because a page cannot be sent to you otherwise. Vercel keeps short lived operational logs containing that information, for delivery and for abuse prevention. That is Vercel's own processing. I do not build profiles from those logs and there is no analytics product attached to this site. Vercel's policy is at vercel.com/legal/privacy-policy.

7. Discord

Heirloom has a Discord server. Joining it is optional and it is not required to play or to test.

Discord is a separate company with its own privacy policy, at discord.com/privacy. Anything you post in a public channel there is visible to everybody else in that server. If you message me directly at 3arii, that message travels through Discord and their policy covers it, not this one.

8. Everybody who touches any of this

None of them are paid by me to advertise to you and none of them receive anything from me for marketing. I do not control Apple's, Vercel's or Discord's own handling of your data, and their policies apply to it.

9. Children

Heirloom is not aimed at young children. It deals with illness, death, grief, family breakup and social exclusion, and it is rated accordingly on the App Store. The app collects nothing from anybody of any age, so there is nothing for a child to hand over by playing it.

10. Your rights

If you are in the UK or the EU, you have the right to ask what I hold about you, to have it corrected, to have it deleted, to receive a copy of it, and to restrict or object to its use. You also have the right to complain to your local data protection authority. In the UK that is the Information Commissioner's Office, at ico.org.uk.

If you are in California, you have the right to know what is collected, to have it deleted, to have it corrected, and to opt out of the sale or sharing of personal information. I do not sell or share personal information, I have never done so, and I do not do cross context behavioral advertising.

In practice I hold nothing about you at all, so the honest answer to any of these requests is that there is nothing to produce, correct or delete. If you want to ask anyway, email deniz1lapsekili@gmail.com and I will reply within 30 days and usually much sooner.

11. Security

The site is served over HTTPS. There is no database attached to this project, no credentials to leak and no list of anybody. The only thing that exists is the game on your own phone.

12. Changes to this policy

If this policy changes, the date at the top changes with it, and anything meaningful is described on this page rather than slipped in. If I ever add something that does collect information, such as a mailing list, it will be described here before it goes live.

13. Contact

Email: deniz1lapsekili@gmail.com
Discord: 3arii

I am one person, so a reply usually takes a day or two.

Go to the front page