Orbitlings Privacy

Last updated: September 25, 2026

Orbitlings uses Apple or Google sign-in to let you access your personal cloud save. This page explains how Orbitlings handles account, game, and optional advertising data.

Information stored

The account service stores the sign-in provider and provider account identifier, plus your email address when the provider supplies one. It does not receive or store your Apple or Google password.

Your personal cloud save can include your card collection, shard and Style Ticket balances, pack and collection progress, saved game activity, purchase receipt identifiers used to avoid duplicate rewards, and game settings. The service also keeps the session information needed to keep you signed in and to sync your save. Short-lived hashed network addresses help limit abusive sign-in attempts.

When a beta account moves to the verified Player Exchange collection, we archive its previous signed-in beta save for recovery. The fresh collection starts with new cards and shards issued by the game service. Your separate guest collection stays on your device. Deleting the account also deletes its archived beta save from our service.

How information is used

This information is used to sign you in, restore your personal game progress on your devices, and keep your cloud save current. The account API and its database run on Vercel and Neon.

Optional rewarded ads

Orbitlings may offer optional rewarded ads in Style Studio using Google AdMob and Google's User Messaging Platform. Watching an ad is your choice. Completing one earns the number of Style Tickets shown before the ad starts. Style Tickets can be used for cosmetic designs, not for cards, packs, or shards. Ad availability can vary by device and region.

Google's advertising SDK may process IP addresses (which can indicate approximate location), device identifiers, ad interactions, and diagnostic or performance information to deliver ads, prevent fraud, and measure performance. Orbitlings currently requests non-personalized, G-rated ads, applies child-directed treatment, and disables Google's publisher first-party identifier. Non-personalized ads can still use data for delivery, measurement, and fraud prevention. See Google's advertising privacy information.

Where Google requires a privacy choice, the app shows its consent form before requesting ads and offers an “Ad privacy choices” control. Orbitlings does not request permission to track you across other companies' apps and websites.

A completed ad can send a random reward receipt to Google. Google can send a signed confirmation to our service containing that receipt, an ad transaction ID, the reward, ad unit, and completion time. We use this to verify rewards and detect duplicate callbacks. We do not send your sign-in email or Orbitlings account identifier to Google for reward verification.

Player Exchange

When you list a card, signed-in collectors can see the card, its condition, grade, serial number if any, asking price, and listing time. Your sign-in email and provider account identifier are not shown to other collectors. The service records listings, purchases, withdrawals, card ownership, and shard transfers to complete sales and prevent duplicate transfers.

For shard purchases, the service checks Apple's signed transaction details and stores the transaction ID, product, and account connection to prevent duplicate delivery. Apple may send signed refund notices. If a credited shard purchase is refunded, we pause that account's Exchange access while the balance is reviewed.

The Player Exchange uses your personal Apple or Google account and cloud collection.

Deletion and local data

You can delete your account from the account controls in the app. Deletion removes the account, its cloud save, and its listings from this service. Cards already sold remain with their buyers; records of card copies may remain without a link to your deleted account to prevent duplication. Deletion also removes this account’s local collection and recovery backups from the device where you delete it. Your separate guest collection remains. Copies on other devices or device backups can be removed through their app storage controls.

Contact

For privacy questions, contact jon.fleschler@gmail.com. For help using Orbitlings, visit Orbitlings Support.