Privacy Policy
SORTALIS does not need an account and does not sell ads. The game saves progress on your own device. When it is online, it sends limited first-party gameplay metrics so we can understand where runs end, which cards are bought, and what needs balancing. The iPhone, iPad and Android apps also tell Meta when the app is installed and opened, so we can see which of our ads worked.
Last updated 6 November 2026. This policy covers the SORTALIS game on every platform we ship it to, and the website at playsortalis.com.
No account, no ads, limited gameplay metrics
The game has no login and no payment system inside the game, and it never reads your device’s advertising ID. Your save, settings, unlocks and Achievements stay on your device.
When the game is online, it sends aggregate gameplay events to our own database. Those events describe play: session start, run start, Stage reached, Bout wins and losses, Farkles, Banks, Store offers, Store purchases, Pack opens and Pack picks. This is true of the browser game and of the app builds alike, and they go to our own server and nowhere else. If the device is offline, the game does not send those metrics. If your browser sends Global Privacy Control or Do Not Track, the metrics sender stays off entirely, ahead of every other question.
Two other things reach us, and only because you pressed something. The in-game feedback box sends the message you typed. SHARE on the RUN CLEARED! board uploads that run’s board so a friend can open it. Both are described in full below.
The metrics use a random device id stored in site data. It is not made from your IP address, name, email, contacts, precise location, or hardware fingerprint. Clearing site data resets it.
The iPhone, iPad and Android apps share one more thing, with Meta. They carry Meta’s app-events SDK, which tells Meta when the app is installed and opened. That is how we learn which of our Facebook and Instagram ads led to an install. The browser game and the desktop builds do not carry it. Meta install measurement below says exactly what it sends.
Progress and settings stay on your device
SORTALIS saves your progress so you can close it and come back. All of it is written to local storage on the machine you played on, and none of it is personal information — it is dice.
What is saved
- The run in progress — your Bag, your Charms, the Stage and Bout you are on, and the seed.
- Your profile — unlocks, Achievements, Challenge results and lifetime stats.
- Your settings — audio levels, reduced motion, input preferences.
Where it lives
- iPhone and iPad — inside the app's own storage container. Deleting the app deletes the save.
- Browser — in site data for playsortalis.com. Clearing site data loses it.
- Android — inside the app's own storage. Deleting the app deletes the save.
- Mac, Windows and Linux — in the app's data folder, plus a readable sortalis-profile.json.
This save data is not uploaded and does not travel between platforms. Gameplay metrics are separate aggregate events and do not contain the save file itself. There is no cloud save because there is no cloud save service. Step-by-step instructions for erasing all of it are on the support page.
What the online game sends
These metrics help us tune SORTALIS. They are first-party events sent to our own server and stored in our Neon database. Nobody else receives them, and they are read as aggregates — what the whole player base does at Stage 5, not what you did.
What is included
- Progression — run starts, Stages reached, Bouts won, losses, skipped Bouts and abandoned runs.
- Decisions — Sets, Banks, Farkles, Rerolls, Hot Dice and Consumable Card use.
- Economy — Store offers, purchases, Store rerolls, Pack opens, Pack picks, sold Charms and signed Action Cards.
- Basic context — app version, language, timezone offset, viewport size, touch support and a random device id.
- Your profile’s name — only if you typed one. A profile still called Default sends none.
- Automation — whether the browser says it is being driven by automation software, so our own test bots are counted apart from players.
What is not included
- No account, real name, email address or contacts. The only name is the profile name above, and only if you chose one.
- No advertising id. These events go only to our own server, never to Meta or anyone else.
- No IP-based player id and no fingerprint-based player id.
- No hardware concurrency, device memory, full screen size or language list.
- No raw custom seed text.
- No save-file upload.
The two things you can send us
Neither happens on its own. Both are described here because a policy that only covered the automatic half would be leaving out the half you can see.
The feedback box
The game has a feedback popup — Cmd/Ctrl + K in the browser. When you send one, we receive the message you typed, plus the context that makes it actionable: the app version, the screen you were on, the run and session it happened in, and the same random device id the metrics use. We also store a one-way hash of your IP address, used only to rate-limit abuse; the address itself is not kept.
Put your email in the message if you want an answer — there is no field for it, so we have no way to reply unless you do.
Sharing a cleared run
SHARE on the RUN CLEARED! board uploads a snapshot of that run and gives you a link at playsortalis.com/runs/…. Anyone holding the link can open it, so treat it as public.
The snapshot is a photograph of a game of dice: the Bag, the Charms, the Patterns, the dice and the totals. It deliberately carries no device id, no session id, no profile, no settings and no name. Nothing is uploaded unless you press the button, and a snapshot once written is never edited.
The three things that happen around the game
Everything above is us. But a website is served by a computer, and an app arrives through a store, and those parties keep their own ordinary records. Here is all of it.
The website
Loading playsortalis.com makes a request to our host, Vercel, which keeps standard server logs — IP address, browser type, page requested, timestamp — for security and reliability. Our own gameplay metrics are separate first-party events and are used for aggregate product and balance decisions.
The app stores
If you install SORTALIS from the App Store or Google Play, or download a desktop build, that store or download host sees the download and handles it under its own privacy policy. Apple may share aggregate, anonymised crash and usage reports with us if you have opted into sharing them with developers in your device settings. We do not receive names, contacts or identifiers.
Email support
If you write to support@playsortalis.com, we have your email address and whatever you chose to put in the message. We use it to answer you, and for nothing else — no list, no marketing, no sharing. We keep the correspondence only as long as it is useful, and delete it on request.
Meta install measurement
We advertise SORTALIS on Facebook and Instagram. To learn which ads led to an install, the iPhone, iPad and Android apps include Meta’s app-events SDK. It does that one job. The browser game and the desktop builds do not include it.
What Meta receives
- Installs and launches — that the app was installed, and each time it is opened.
- Device and app details that Meta’s SDK attaches to those events: app version, OS version, device model, language, timezone, and an install ID the SDK makes up at random.
- Your IP address, as Meta’s servers see it when the event arrives.
- Crash reports about Meta’s SDK, if that SDK itself fails, so Meta can fix it. They are not linked to you.
What Meta does not receive
- No advertising ID. The apps have it turned off, and the Android app does not have permission to read it.
- No tracking prompt on iPhone or iPad. The app never asks to track you, so iOS keeps your advertising ID hidden. Meta counts installs through Apple’s SKAdNetwork and Meta’s Aggregated Event Measurement, which report delayed totals, not you.
- No purchase events.
- No Facebook login, no sharing, and no Meta account is needed.
- Nothing you type, no save, no run data, no gameplay metrics and no feedback.
Meta handles what it receives under its own privacy policy, and your rights over that data are with Meta. We do not sell it, and there are still no ads inside the game.
What we never do
- No accounts. There is nothing to sign up for and no password to lose.
- No third-party analytics on gameplay. The game sends limited first-party gameplay metrics, to our own server, only while online.
- No ads in the game and no advertising ID. The apps never read it, and never ask iOS for permission to track you.
- One third-party SDK, in the mobile apps only. Meta’s app-events SDK, for install measurement as described above. The browser game and the desktop builds have none. No crash reporters of our own, no social logins.
- No in-app purchases. We never see a payment card, because we never take one in the game.
- No sale of personal information, for any purpose, to anyone. Beyond the Meta install and launch events above, we pass nothing on.
Under 13
SORTALIS is not directed at children under 13, and we do not knowingly collect personal information from children. There is no account to create and no profile to fill in. The gameplay metrics are aggregate play events, not a way for a player of any age to send us personal information through the game.
If you are a parent or guardian and believe a child has sent us personal information some other way — an email to support, most likely — write to us and we will delete it.
Access, correction and deletion
Privacy laws such as the GDPR and the CCPA give you rights to see, correct, export and delete the personal information a company holds about you.
The gameplay metrics and any feedback you sent are tied to a random device id, not an account. If you contact us with that id, we can delete matching rows where technically practical. We will also delete support emails, and take down a shared run, on request.
Your game data is already entirely in your hands. You can delete it yourself at any time, without asking us, by deleting the app or clearing the site data — the exact steps for each platform are on the support page. We cannot delete it for you, and we cannot recover it either.
Ask a person
Privacy questions go to the same address as everything else, and are read by the people who wrote the code. We aim to reply within two business days.
Who "we" are
- Publisher
- Schmoyer Games, Inc.
- Game
- SORTALIS, on iPhone, iPad, Android, macOS, Windows, Linux and browser
- Contact
- support@playsortalis.com
- Effective
- 4 September 2026
If this policy ever changes, the updated version appears on this page with a new date. We will say material changes plainly, not bury them in a revision.