Privacy Policy
Apps by Sabin Khanal · Last updated: 3 November 2026 (added Ludo Live, Prism Pop and Private PDF)
Summary
Expense Tracker, EMI Calculator and Notes do not collect, share, or sell any personal data. They have no accounts, no ads, no analytics, and no tracking, request no device permissions, and do not connect to the internet.
Block Drop Puzzle is the same, except for its online leaderboards and crash reports, described in its section below. Ludo Live has no accounts, ads, analytics or tracking either; only its optional online rooms send data, described in its section below.
Prism Pop is the same, except for its optional, end-to-end encrypted cross-device sync, which is off until you turn it on and is described in its section below.
Private PDF processes your documents only on your device and never uploads them. Its only network use is optional Google sign-in, described in its section below.
Everything you enter stays only on your device, in the app's private storage. Uninstalling the app or clearing its data deletes it permanently. I have no access to it.
Expense Tracker
- Stores the expenses you enter (title, amount, category, date) on your device only.
- Collects or transmits no data.
EMI Calculator
- Remembers your last loan inputs on your device so you don't have to retype them.
- Collects or transmits no data.
Notes
- Stores your notes and their creation times on your device only.
- Collects or transmits no data.
Block Drop Puzzle
- Stores your best score, level progress and stars on your device.
- Online leaderboards: when you are connected, the game signs in anonymously with Unity Gaming Services (Unity Technologies) to show global Classic and Daily leaderboards. Sent to Unity: a random anonymous player ID, a public player name (auto-generated, for example "SwiftFox#1234", or a nickname you choose in the game; please don't use your real name), and your Classic/Daily scores. Coins, levels, trophies and missions stay on your device. Unity may work out an approximate location (such as your country) from your IP address when the game connects; the game itself never asks for your location. No email, real name, contacts, precise location or advertising ID is collected.
- Crash reports: if the game crashes or hits an error while you are online, a report is sent to Unity Cloud Diagnostics (Unity Technologies) so the bug can be fixed. A report contains the error and stack trace, the game version, your device model, operating system version and memory, and a random device identifier. It contains no name, player name, scores or location.
- This data is used only to run the leaderboards and fix crashes. It is not sold, not shared with anyone else, and not used for advertising. Leaderboard entries are kept while the leaderboard runs; crash reports are kept by Unity for a limited time and then deleted. Unity processes it under the Unity Privacy Policy.
- Without internet the game works fully offline and sends nothing.
- All data sent to Unity is encrypted in transit (HTTPS).
- Challenge codes are generated on your device; nothing is uploaded when you share or play one.
- To delete your leaderboard data, uninstall the game (this discards the anonymous ID) and contact us below to have existing entries removed.
Ludo Live
- Stores your settings (language, sound, vibration, difficulty, your display name) and game stats on your device only.
- Games against bots and pass-and-play games run entirely on your device and send nothing.
- Online rooms (optional): when you create or join a room, the game connects over an encrypted WebSocket (WSS) to a game server run on Cloudflare Workers (Cloudflare, Inc.). Sent to the server: the display name you type for that room (please don't use your real name), a random number your phone adds to the dice for fairness, your moves and emoji reactions, and a random rejoin token so you can reconnect. Other players in the same room see your display name, moves and reactions.
- Room data is deleted automatically about 6 hours after everyone has left the room. There are no accounts and no player profiles, and nothing links one room to another.
- Like any web server, Cloudflare receives your IP address when you connect and may keep short-lived request logs for security and to keep the service running. The game itself never asks for your location. No email, real name, contacts, precise location or advertising ID is collected.
- Invite links are shared with the share sheet or WhatsApp on your phone; the game does not read your contacts.
- This data is used only to run online games. It is not sold, not shared with anyone else, and not used for advertising. Cloudflare processes it under the Cloudflare Privacy Policy.
- The app requests only the internet permission. There are no ads during matches.
Prism Pop
- Stores your levels, stars, scores, coins, boosters, daily streak, missions and settings on your device.
- No accounts, no ads, no analytics and no tracking. The game asks for no device permissions beyond internet access, which only sync uses.
- Cross-device sync (optional, off by default): if you choose Turn on sync, the game creates a random sync code on your device. Your progress is encrypted on your device with a key made from that code (AES-256-GCM) before it is uploaded to our sync server, which runs on Cloudflare Workers (Cloudflare, Inc.). The server stores only the encrypted data, a random space ID and a version number. It cannot read your progress, and the secret part of your code never leaves your devices. The same code is shared by Sabin Khanal web apps on sabin78910.github.io, so one code syncs them all.
- When sync is on, Cloudflare processes your IP address to deliver each request, as for any website, and may keep it briefly in its logs; the game never asks for your location. No name, email, contacts, location or advertising ID is collected.
- Synced data is used only to give you the same progress on your other devices. It is not sold, not shared and not used for advertising. All traffic is encrypted in transit (HTTPS). Cloudflare processes requests under the Cloudflare Privacy Policy.
- Keep your sync code private: anyone with it can read and change your synced progress.
- To stop syncing, choose Turn off on this device. To have the encrypted copy deleted from the server, contact us below; without your code it cannot be read, but we will delete it on request.
- With sync off, or without internet, the game works fully offline and sends nothing.
Private PDF
- Every tool (scan, image to PDF, OCR in Nepali and English, compress, merge, split, organize pages, fill and sign, PDF to image) runs on your device. Your documents, photos, extracted text and signatures are never uploaded to us or anyone else. The OCR language data is built into the app, so OCR works offline.
- Results are saved as new files in your device's Documents/PrivatePDF folder (or downloaded by your browser on the web). Your original files are never changed.
- Job history keeps only the tool used, file names, file sizes and time, on your device (on the web, only for the current browser session). You can clear it in the app.
- Camera: used only when you tap Take photo in the scanner or OCR. Photos are processed on your device.
- Google sign-in (optional): you never need an account. If you choose Sign in with Google, Google (Google LLC) shares your name and email address with the app, which stores them only on your device to show who is signed in. Nothing is sent to us. Signing in happens between you and Google under the Google Privacy Policy. Sign out at any time on the Account page; this removes your name and email from the app.
- Files leave your device only when you tap Share and choose an app yourself.
- No ads, no analytics, no tracking, no advertising ID. The app requests the camera permission (for scanning) and internet access (used only for Google sign-in).
Children
The apps collect no personal information from anyone, including children under 13.
Changes
If an app ever starts collecting data, this page will be updated before that version is released, and the date above will change.
Contact
Questions, or want your leaderboard or sync data removed? Email sabinkhanal13@gmail.com, or open a question on GitHub.