Privacy Policy
Lazy Sheep · last updated 26 September 2026
The short version. Lazy Sheep does not ask for your name, your email address or your phone number. You play as a guest.
To save your progress and let you play against other people, the game creates a random player number for you and stores what you have done in the game on our own server in Germany. With it we keep your IP address, the country it belongs to and basic facts about your device, such as its model, system version and language. We use them to keep the game fair, to fix problems and to see where our players come from.
We do not sell your data and we do not use any third-party analytics. We advertise the game on Facebook and Instagram, and only if you allow it the game tells Meta that you installed and opened it, so we can see which of our ads work. You can change that answer at any time under Privacy Choices on the start screen.
1. Who is responsible
Lazy Sheep is made and operated by Filip Jelev, an individual based in Bulgaria, acting as the data controller for the purposes of the General Data Protection Regulation (GDPR).
You can reach us about anything in this policy at goalquesters@gmail.com.
2. What the game collects
Everything below is tied to the random player number the game creates the first time you play. None of it requires you to identify yourself.
| What | Why |
|---|---|
| Player number - a random identifier generated on your device | So your progress can be saved and found again |
| Username, and optionally a display name and chosen avatar | So other players can find you and see who they are playing against |
| Progress - best distance, coins, upgrades bought, levels completed and unlocked, arenas reached | So the game continues where you left off, on any device |
| Records of your runs - the aim angle, power and boosts of each shot, how far the sheep travelled, which upgrades were active, and when you restart or finish a level | To replay your run as a "ghost" for opponents in multiplayer, and to understand whether levels are too hard or too easy |
| Connection and device details when your account is created - your IP address, the country and network it belongs to (for example your mobile carrier), whether you play on iPhone, iPad or Android, the device model, its operating system and version, the game's version, the screen size and memory, the language and region your device is set to, and whether Apple or Google confirmed the game is genuine (section 11) | To keep the game fair and stop abuse, to fix problems that only happen on some devices, to decide which languages to translate the game into, and to see which countries our players come from |
| Connection and device details with each run - the IP address and the same device and game details as above, at the time of the run | To recognise runs sent by modified games or scripts, and to see which versions of the game are being played |
| How you found the game - whether one of our ads brought you, and which one (section 5) | To see which of our ads bring new players |
| Friends - the connections you make with other players | To show your friends list and let you race them |
| Purchases - the transaction identifier Apple or Google gives us when you buy coins | To confirm the purchase is genuine and add the coins to your account |
| Ad measurement, only if you allow it - that the game was installed and opened, in-app purchases, basic information about your device (such as its model, operating system and language) and, if you also allow it on your device, its advertising identifier. This is sent by Meta's software development kit directly to Meta, not to us. | To see which of our ads on Facebook and Instagram bring new players to the game |
| Settings - whether sound, music and vibration are on, and your answer about ad measurement | Stored only on your own device, never sent to us |
3. What the game does not collect
- No name, email address, phone number or postal address.
- No precise location. The game never uses your device's location services; the only location we know is the country your IP address belongs to.
- No contacts, photos, microphone or camera access.
- No device identifiers of our own. We do not read your advertising identifier, Android ID or similar numbers. Only Meta's kit may receive the advertising identifier, and only if you allow it (see section 5).
- No third-party analytics.
- No payment details. If you buy coins, Apple or Google handles the payment entirely. We never see your card, your bank details or your billing address.
4. In-app purchases
Lazy Sheep offers optional purchases of virtual coins. Payment is processed by Apple on iPhone and iPad and by Google Play on Android, under their own terms and privacy policies, not ours. All we receive is a signed confirmation that a purchase happened, which we check with Apple or Google and record so the coins are added once and only once, and so we can honour a refund if you request one from them.
On Android the game passes Google a scrambled form of your player number with each purchase. It cannot be turned back into your player number; it only lets us check that the coins go to the account that paid for them.
5. Advertising and ad measurement
Lazy Sheep does not show advertising inside the game. We advertise the game itself on Facebook and Instagram, which are run by Meta Platforms Ireland Limited.
To learn which of those ads work, the game includes Meta's software development kit. It stays switched off until you say yes. The first time you open the game it asks whether it may tell Meta that you installed and opened it. If you choose “No thanks”, or close the question, nothing is sent to Meta. If you choose “Allow”, the kit sends Meta the information listed in section 2.
On iPhone and iPad, choosing “Allow” is followed by Apple's own question about tracking. The advertising identifier is only shared if you allow that too; if you do not, Meta can only measure through Apple's privacy-preserving attribution, which does not identify you. On Android, the advertising identifier is governed by your device's own settings.
How you found the game. If you choose “Allow”, the game also records with your account which of our ads brought you, when that is known: on Android from the install information Google Play hands to the game, and on iPhone and iPad from the ad link Meta hands to the game if you also allowed tracking. Without your permission we only estimate it, from the country your IP address belongs to and the day you started playing, compared with where and when our ads ran.
Meta processes this information under its own privacy policy (facebook.com/privacy/policy), and may process it outside the European Union.
Changing your mind. Tap Privacy Choices at the bottom of the start screen at any time and choose again; choosing “No thanks” stops the kit at once. On iPhone and iPad you can also review tracking under Settings → Privacy & Security → Tracking, and on Android you can reset or delete your advertising identifier in your device's privacy settings.
6. Why we are allowed to process this (legal bases)
- To perform our agreement with you (Article 6(1)(b)): saving your progress, running multiplayer, delivering coins you have paid for.
- Our legitimate interests (Article 6(1)(f)): keeping the game balanced and fair; preventing cheating and abuse, including the checks and suspensions in section 11; fixing technical problems; and understanding our players as a whole, such as which countries, devices, versions and languages they use and roughly how many came from our ads.
- Your consent (Article 6(1)(a)): for ad measurement through Meta's software development kit, and for recording which ad brought you (section 5). You may withdraw it at any time under Privacy Choices, and withdrawing does not affect anything sent before.
7. Where your data is kept, and for how long
Your data is stored on a server we rent in Nuremberg, Germany, inside the European Union. It is not transferred outside the EU by us. Apple and Google, as payment processors, app distributors and for the checks in section 11, operate internationally under their own safeguards, and so does Meta for the ad measurement you allow (section 5).
We find the country and network of an IP address in a database file we download from IPinfo and keep on our own server. Your IP address is never sent to IPinfo. IP address data is powered by IPinfo.
We keep your account, and the details recorded when it was created, for as long as your player account exists. If an account is not used for a long period we may delete it. Some records are kept for less time:
- Records of your single-player runs, with the IP address and device details sent with them, are deleted automatically after 30 days.
- Multiplayer runs are kept as long as your account exists, because other players race them as ghosts. A ghost is always shown under a random name, never yours, and never with your IP address or device details.
- Our web server's technical log of requests, which includes IP addresses, is deleted after 14 days.
8. Deleting your data
You can erase your progress at any time from inside the game: open the user screen and choose Start new game. This permanently deletes the saved data held for your player number. Your account, and the details recorded when it was created, stay until you ask us to remove them.
To have everything associated with you removed, including multiplayer records and the connection and device details recorded with your account and your runs, email goalquesters@gmail.com from the address you contact us on and say so. We will action it without undue delay and in any case within one month.
9. Your rights
Under the GDPR you have the right to access your data, to correct it, to have it erased, to restrict or object to how we use it, and to receive a copy in a portable form. There is no charge for exercising any of these rights.
If you believe we have handled your data badly, you may complain to your local data protection authority. In Bulgaria this is the Commission for Personal Data Protection (cpdp.bg).
10. Children
Lazy Sheep is a casual game suitable for a general audience, but it is not directed at children under 13, and we do not knowingly collect personal data from them. Because the game lets players choose a username and connect with others, we ask that a parent or guardian supervises younger players. If you believe a child has provided us with personal data, contact us and we will delete it.
11. Security and fair play
Traffic between the game and our server is encrypted with HTTPS. Access to the server is restricted.
Checking that the game is genuine. To stop modified games and scripts from cheating, the game asks Apple (App Attest and DeviceCheck, on iPhone and iPad) or Google (Play Integrity, on Android) to confirm that it is the real, unmodified game from the App Store or Google Play, running on a real device. Apple and Google tell us whether the checks passed; we learn nothing else about you from them. They process these checks under their own privacy policies.
Suspensions. We may suspend an account that breaks the Terms of Use, for example by cheating. A suspension is always decided by a person, never automatically. So that a suspension cannot be escaped by reinstalling the game, we may also set a flag on the device through Apple DeviceCheck or Google Play Integrity. The flag is kept by Apple or Google and carries no other information. If you think you were suspended by mistake, write to goalquesters@gmail.com.
No system is perfectly secure, and we hold as little about you as the game can function with - which is the strongest protection we can offer.
12. Changes to this policy
If this policy changes in a way that affects you, we will update the date at the top and, where the change is significant, tell you in the game.