Privacy Policy

Last updated: September 28, 2026

lootsheep has no accounts. We never ask for your name, email, phone number or date of birth. A few things still have to be stored for the site to work, so here is what they are, why we keep them and for how long.

Stored automatically

Visitor ID: on your first visit we set a random ID in a cookie (ls_vid). It lets us count one vote per visitor on codes, remember your board nickname and count visitors. It does not say who you are. It lasts 400 days.
IP address: never stored as is. It is hashed with a secret key and used only to stop spam, vote manipulation and repeated admin login attempts. Hashes attached to votes and board profiles are removed after 30 days.
Usage log: which pages, games and charts you viewed, what you searched for and which videos you played, tied to your visitor ID. Of the site you came from we keep only the host name (for example google.com), and of your browser language only the language part (for example en). Used only for aggregate numbers such as daily visitors, and deleted after 180 days.

Cookies and browser storage

ls_vid — visitor ID (400 days) · ls_linked — marks that this device is linked to a nickname (400 days) · ls_tz — your browser time zone so times are shown in your local time. All are set by lootsheep itself.
Board drafts are saved in your browser storage (localStorage) while you write. They are not sent to the server.
No ads, no analytics tools such as Google Analytics and no third-party tracking scripts. There are no third-party cookies.
Clearing cookies in your browser gives you a new visitor ID. Your votes and nickname link are reset; you can get the nickname back with device linking.

What you post yourself

Board nickname: pick anything you like, but not your real name. The nickname is tied to your visitor ID.
Posts, comments, photos, votes and reports: public posts can be seen by anyone, including search engines. Photos are re-encoded on upload, which strips camera data (EXIF and GPS location), and go through moderator review before they are shown.
Device linking: the 8-digit code you enter to use the same nickname on another device is stored hashed and expires after 3 minutes. No email or phone number is needed.
Game suggestions: the game link and note you submit are used by moderators to review the suggestion.

Third-party services

YouTube: video lists come from YouTube API Services. We store the video ID, title, channel name and view count for up to 30 days, then delete them. Videos play in the official YouTube player (youtube-nocookie.com); from the moment you press play, the Google Privacy Policy applies.
Roblox: game data comes from public Roblox APIs. "Play on Roblox" takes you to roblox.com, where Roblox's own policies apply.
Servers: lootsheep runs on Google Cloud servers in the United States. Database backups are stored daily in Google Cloud Storage and deleted after 90 days.

Younger players

The site was designed from the start with no accounts and no personal details, so it works the same way whatever your age.
The board rules forbid posting personal information, yours or anyone else's: real names, schools, phone numbers, face photos and invitations to outside messengers. Automatic filters and moderator review catch it.
Parents or guardians who want a child's post or photo removed can write to the address below. We remove it as soon as we have checked.

Your choices

You can delete your own posts and comments on the board.
Clear your cookies and lootsheep treats you as a new visitor.
You can ask us to delete your usage log, nickname or photos. Without your visitor ID we cannot tell which records are yours, so include the post link or nickname in your request.

Changes

When this policy changes we update the date at the top of this page. If we ever start storing more than listed here, we will announce it on the site.

Contact

Send privacy questions and deletion requests to the address below.

contact@example.com