Privacy Policy

Effective date: 12 November 2026

Loot Lurker (the “App”) is an app for finding game deals and price history, provided by Gianmarco David (“we”, “us”, or “our”). This policy explains what the App does with your information, and covers this website too.

At a glance

Loot Lurker has no accounts of its own, no ads, no analytics and no tracking. It doesn’t sell or share your information. What it keeps, it keeps on your device.

Prices, deals and game details come from IsThereAnyDeal. To get them, the App sends IsThereAnyDeal what it needs to answer, through our own server. If you sign in with your IsThereAnyDeal account, the App also reads and changes your IsThereAnyDeal waitlist for you. If the App crashes, it sends a crash report so we can fix it; you can turn that off in Profile.

What stays on your device

• Your settings, such as your country and currency and your preferred shops. If your phone or tablet is backed up (Google or iCloud), your settings are included in that backup, which Google or Apple keeps under your account.
• Your IsThereAnyDeal sign-in, if you sign in. It’s encrypted with a key that never leaves your device (the Android Keystore, or the iOS Keychain). It’s never sent to us, and it’s left out of backups and transfers to a new device, so you sign in again there.
• Answers and images the App has loaded, kept for a short time so it doesn’t ask again.

Uninstalling the App deletes all of it from your device.

What the App sends, and to whom

IsThereAnyDeal. To show deals and prices, the App sends IsThereAnyDeal what you search for, which games you open, and your country. If you sign in, the App also reads your waitlist and collection, and adds or removes games on your waitlist when you ask it to. Signing in happens on IsThereAnyDeal’s own page: the App never sees your password. IsThereAnyDeal handles this information under its own privacy policy.

Our server. Most requests go through our own server, which runs on Cloudflare and passes them on to IsThereAnyDeal. It shares answers that are the same for everyone, such as today’s deals, so IsThereAnyDeal is asked less often. For each request it keeps only which kind of request it was, whether it worked, and how long it took: never what you searched for, which games you opened, your IP address, or your sign-in. Requests made while signed in pass through it to IsThereAnyDeal with your sign-in, which it never stores or logs. Cloudflare handles the connection, and so sees your IP address, as a service provider acting for us. So that only the App can use our server, it asks Firebase App Check, a Google service, to vouch for it: on Android through Google Play Integrity, on iOS through Apple’s App Attest. That sends Google or Apple details of the App and your device, but nothing about what you do in the App.

Remote settings. About once an hour, the App asks Firebase Remote Config, a Google service, for a few settings we can change without an update, such as the oldest version of the App that still works. That request carries a random identifier for this installation, and nothing about you or what you do in the App.

Image servers. Game art loads from the addresses IsThereAnyDeal gives, which means those servers see your IP address, as any website you visit would.

Shops. When you open a deal, it opens in your browser on the shop’s site. From there, that site’s own privacy policy applies.

Crash reports. If the App crashes, it sends a crash report to Firebase Crashlytics, a Google service, so we can find and fix the problem. A report contains what the App was doing when it crashed, your device model and system version, the App’s version, and a random identifier for this installation. It doesn’t contain your searches or your IsThereAnyDeal account. You can turn crash reports off in Profile, which also deletes any report not yet sent.

What we don’t do

• There’s no Loot Lurker account, so we hold nothing about you to keep, sell or lose.
• No ads, no advertising identifier, and no tracking across apps or websites.
• No analytics, in the App or on this website. Crash reports, which you can turn off, are the only thing the App sends about how it runs.
• No selling or sharing of your information.

Legal bases for processing

If European Economic Area, United Kingdom or similar data-protection law applies:

• Performance of a contract: sending IsThereAnyDeal your searches, the games you open and your country, and, if you sign in, reading and changing your waitlist, so the App can do what you ask of it.
• Legitimate interests: serving this website and keeping it secure; running our server, which keeps the App within IsThereAnyDeal’s limits and protects itself from misuse, App Check included; and sending crash reports so we can fix what makes the App crash. You can object to the last by turning them off in Profile.

You don’t have to give us any personal data. Signing in to IsThereAnyDeal is optional: without it, you can still browse deals and prices.

Sharing

We don’t sell your information. It reaches others only as follows:

• IsThereAnyDeal, as described above, when the App asks it for deals, prices, or your waitlist.
• Cloudflare, which runs our server and hosts this website, as a service provider acting for us.
• Google, which runs Firebase (Crashlytics, App Check and Remote Config) as a service provider acting for us, and Google Play Integrity on Android.
• Apple, whose App Attest vouches for the App on iOS.
• Legal and safety reasons: if required by applicable law or a valid legal process.

International transfers

IsThereAnyDeal, Cloudflare and Google operate internationally, so information they process may be handled outside your country, including outside the European Economic Area. Where we rely on a service provider for that, transfers are covered by safeguards such as the European Commission’s Standard Contractual Clauses or the EU–US Data Privacy Framework.

Retention

The App keeps your settings and sign-in on your device until you sign out, change them, or uninstall the App, and loaded answers and images only for a short time. We keep no copy of any of it. IsThereAnyDeal keeps your account and waitlist under its own policy. Crashlytics keeps crash reports for 90 days. We keep emails you send us only as long as needed to answer and follow up on them.

This website

This website has no cookies, no analytics and no tracking. It’s hosted by Cloudflare, which processes your IP address and basic request details to deliver the pages and protect the site from abuse, under its own retention practices.

Your privacy rights

Depending on where you live, you may have rights to access, correct, delete, restrict, object to processing of, or receive a copy of your personal data. Since the App keeps your information on your device, you can exercise most of them directly: sign out in Profile, change your settings, or uninstall the App. Signing out deletes the sign-in from your device; to also remove the App’s access to your IsThereAnyDeal account, do it in your account settings on isthereanydeal.com. For anything else, write to us below.

We don’t make automated decisions that have legal or similarly significant effects on you. You may lodge a complaint with the data-protection authority where you live or work, or with the one that supervises us, the Italian Garante per la protezione dei dati personali.

Children

The App isn’t directed at children under 13, and we don’t knowingly collect information from them.

Changes to this policy

If this policy changes, we’ll post the new version here with a new effective date. If a change requires your consent, we’ll ask for it first.

Contact

Data controller: Gianmarco David

Address: Via Leopoldo Nicotra 11, Messina, Italy

Email: support@lootlurker.com