Pop Loop privacy policy
Pop Loop (iOS, Android and web versions) · Last updated: 23 October 2026
The short version
- You don’t need an account, email or real name to play. The game uses an anonymous player ID.
- We collect gameplay analytics linked to that anonymous ID to run and improve the game. We don’t sell data.
- The game shows optional reward videos and a few ads between levels, served by Google AdMob. Where consent is required, Google asks you first, and ads are non-personalised unless you agree. Paying players and VIP members never see ads between levels.
- Payments are handled by Apple’s App Store on iOS and Google Play on Android. We never see your card details.
- We don’t use your location, camera, microphone or contacts.
- You can reset the game on your phone at any time and ask us to delete everything on our server.
Who we are
Pop Loop is made by Creative Coders sp. z o.o., ul. Płk. Zoltána Baló 6 lok. 5, 02-793 Warszawa, Poland (KRS 0001271368, NIP 9512657914), the controller of your personal data. Contact: support@quorumwork.com.
Our games share one backend that we run ourselves, the Creative Coders Hub (“the hub”). This policy explains what the Pop Loop app and the hub process, and which partners help us.
1. Anonymous player ID
When the app first goes online, it creates a random identifier on your device and registers it with the hub, which returns an anonymous player ID and a secret token. We don’t use your advertising ID, phone number, email or hardware identifiers for this. The ID links your cloud save, leaderboard scores, invites, redeemed codes and analytics. Legal basis: providing the game you asked for (Art. 6(1)(b) GDPR).
2. Gameplay analytics
The app sends gameplay events to the hub, linked to your anonymous player ID: for example session start and length, levels started and finished (stars, score, parking count), player level-ups, quests, boosts used, shop visits, purchases (product and price), watched reward videos, ads shown between levels and notification opens. Events are queued on your device and sent in batches. We use them to fix bugs, balance difficulty and understand which features people enjoy. Legal basis: our legitimate interest in running and improving the game (Art. 6(1)(f) GDPR).
3. Cloud save and moving to a new phone
Your progress (levels, stars, coins, gems, album, looks, settings) is saved on your device and backed up to the hub, so it survives updates and reinstalls. In Settings → Move to a new phone you can create a one-time transfer code (valid 30 days, stored only as a hash) to restore your progress on another device.
4. Leaderboards, invites and codes
- Leaderboards show the name you choose in your profile (up to 20 characters, filtered against a blocklist) and your score. Without a name you appear as “Player” plus a number.
- Use Report next to another player to choose a reason and send a private report for review. A successful report is stored with the reporter and reported player identifiers, reason and leaderboard context, and also blocks that player for you on the server. An error means the report was not confirmed. Use Hide to remove a player only from this device without sending a report; Settings → Hidden players lets you undo hiding. Unhide does not undo a submitted report or its server block. Local safety preferences store public player identifiers and the displayed names of hidden players; they are separate from your cloud save and are cleared when you delete the account on this device.
- Invite links carry your invite code. When a friend installs through your link, Google Play’s install referrer passes the code to the app so both of you can get a thank-you reward.
- Promo codes you redeem are recorded with your anonymous player ID so each code works once per player.
Reports are removed by the hub's 90-day cleanup. Report-related blocks remain until account deletion; deleting either associated account removes its reports and blocks. When a moderator removes a name, the hub may keep a hash of that name linked to the player ID until that account is deleted, to prevent the same name from being automatically published again. This moderation record stores a hash, not the removed name text.
There is no chat. Player-chosen names are public. For help with a safety concern, contact support@quorumwork.com; include the displayed name and game, never a secret account or transfer token.
5. Purchases (App Store and Google Play)
In-app purchases and subscriptions (VIP) are processed by Apple on iOS and Google Play on Android. We never receive your payment card or billing details. To deliver what you bought and to prevent fraud, the app sends the product ID and store transaction proof to the hub. Android purchases are verified with Google Play. Apple purchases are verified with Apple’s signed transaction and App Store Server API, associated with your anonymous player ID, and delivered only after verification. Transaction history may be retained for fraud prevention and legal obligations; deleting your account removes its player association. Google purchase tokens are stored as hashes on the server. Apple signed transactions and transaction identifiers are retained to verify entitlements and recover unfinished deliveries. On iOS, cancel subscriptions in Settings → Apple Account → Subscriptions. On Android, subscriptions can be cancelled any time in Google Play → Payments & subscriptions.
6. Ads (Google AdMob)
Pop Loop shows reward videos that you choose to watch (for example to continue a level or double coins), and occasionally an ad between levels: never during play, never before level 5, at most once every 3 levels and 3 minutes, and never for players who bought anything or have VIP. Ads are provided by Google AdMob.
- Where consent is required (for example in the EEA, the UK and Switzerland), we ask through Google’s User Messaging Platform consent form.
- AdMob may use your device’s advertising ID and information about your device and app use to show and measure ads and to prevent fraud.
- If consent is required and you don’t give it, only non-personalised ads are requested.
- You can change your choice any time in Settings → Ad privacy choices, and reset or delete your advertising ID in your phone’s settings.
More: How Google uses information from apps that use its services.
On iOS, the app always requests non-personalised ads and does not request Apple’s cross-app tracking permission. Ads are requested only when Google’s current consent information allows them. Changing your ad privacy choices pauses new ads while that permission is checked again. Non-personalised ads can still use identifiers, approximate location and diagnostics for ad measurement, fraud prevention and operation; they do not mean that no data is collected.
7. Notifications
Reminders (your daily gift, a streak about to end) are local notifications scheduled on your device, at most two a day. No push server is involved. Turn them off in Settings or in your phone’s settings.
8. Who helps us
- Render hosts the hub and this website. Like any web server it processes your IP address to answer requests and limit abuse.
- Apple processes iOS purchases and subscriptions; see Apple Privacy Policy.
- Google (Google Play, Play Billing, AdMob and its consent platform), as described above.
- OpenAI: if you leave a public review on Google Play, we may use an AI service to help draft our public reply. Your in-game data is not sent to it.
Some providers may process data outside the European Economic Area under appropriate safeguards such as the EU Standard Contractual Clauses.
9. How long we keep data
- On your device: until you reset the game or uninstall the app.
- On the hub: as long as your anonymous player exists, until you ask us to delete it.
- Purchase records may be kept for as long as tax and accounting laws require.
10. Deleting your data
Open Settings → Delete my data in the app and confirm permanent deletion. This deletes your anonymous account and cloud save and clears the save on this phone. An internet connection is required; if deletion fails, your progress remains available so you can retry. Active subscriptions must be cancelled separately in your store account. For help or an email request, see How to delete your Pop Loop data.
11. Your rights
Under the GDPR you can ask for access to your data, a copy, correction, deletion or restriction, and you can object to processing based on legitimate interests. Where we rely on consent, you can withdraw it any time. Write to support@quorumwork.com with your player code. You can also complain to a data protection authority; in Poland, the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw.
12. Children
Pop Loop is intended for players aged 13 and over and is not directed at children under 13. We don’t knowingly collect personal data from children. If you believe a child under 13 has given us personal data, contact us and we will delete it.
13. Changes
If we change this policy, we’ll update this page and its date, and tell you in the app if the change is important.