Endpaper Labs LLC

Scrap Quilt privacy

Last updated 4 November 2026

The short version

Scrap Quilt is a puzzle game from Endpaper Labs LLC. These privacy practices cover the iPhone, Android and Mac versions. You can play without an account. On iPhone and Android, the game shows ads from Google AdMob; the Mac version shows no ads. The game sells optional in-app purchases through the App Store and Google Play, and lets you sign in with an email address and password, Apple or Google, where those options are available, so your progress is kept with your account. We do not sell your information, and we do not use it to send you marketing.

On your device

Your settings stay on your device. If you never sign in, your progress also stays on your device, in the game's storage and in your device's own backup.

If you sign in

Signing in is optional. You can use an email address and password, Apple or Google, where those options are available. When you sign in with Apple or Google, the provider sends us an identifier for your account and an email address. Apple may give us a private relay address instead of your real one. A Google sign-in token may also contain your name; our sign-in service checks the token in memory and does not keep that name. Our server, at play.endpaperlabs.com, then keeps:

• an account number we create, the provider's identifier and email address, or the normalized email address for an email/password account
• for an email/password account, a one-way hash of your password. The sign-in service does not store a readable password.
• temporary hashes of sign-up or reset codes and challenges, and, during sign-up, a pending password hash. We use these to verify an email address, recover an account and help protect sign-in from abuse.
• your Scrap Quilt progress: stars for each level, daily puzzle results, coins, unpicks and spare hoops, season pass progress and quilt blocks
• a sign-in token for each device you use, stored only as a one-way hash
• for Sign in with Apple, the token Apple gives us so that we can revoke your sign-in when you delete the account

Apple, Google and email sign-ins are separate accounts. Use the same sign-in method each time to reach the same saved progress. The same account works in Pier Line, Bookbind and Scrap Quilt; each game keeps its own progress. We use this information only to keep your progress, to move it to a new device, to verify or recover an email/password sign-in, to protect sign-in security and to answer support requests.

We use Resend, Inc. to deliver email sign-up and password-reset messages. Resend receives the recipient address and the message needed for delivery.

Purchases

Purchases are made through Apple or Google, under their terms. We never see your card or payment details. We use RevenueCat (RevenueCat, Inc.) to confirm purchases and to restore them. RevenueCat receives the purchase record, an app user identifier (a random one, or your account number if you are signed in), and basic device information such as the operating system, app version and country.

Ads

On iPhone and Android, Scrap Quilt shows ads between some levels, and video ads that you can choose to watch for a reward. Google AdMob (Google LLC) provides these ads. To show, limit and measure ads, and to prevent fraud, Google collects information such as your IP address and approximate location, device and app information, ad interactions, and your device's advertising identifier. On iPhone, the advertising identifier is shared only if you allow apps to track you when the game asks; the game plays the same either way. Where the law requires it, including in the European Economic Area, the United Kingdom, Switzerland and some US states, Google's consent form asks for your choice before ads are personalised. You can change that choice at any time in the game's Settings under Privacy choices. Read how Google uses this information at policies.google.com/technologies/partner-sites. Buying No Ads stops the ads between levels; videos you choose to watch stay available.

Crash reports

On iPhone, Mac, and Android, we use Sentry to receive crash and error reports so we can find and fix problems. Reports include stack traces, recent app activity, app and operating system versions, device model and language, and memory and storage information. Our crash-reporting setup removes account and installation identifiers, device hashes, time zones, and identifying parts of file paths. IP addresses are removed from stored reports. We do not link these reports to your account or use them for advertising or tracking.

What we do not do

The game has no social features or chat. It does not access your precise location, contacts, photos, camera, or microphone.

Where it is stored and for how long

Our server runs on infrastructure we manage at Hetzner in the United States. We keep your account and synced progress until you delete the account. A sign-in token on a device stops working after a year without use. To limit abuse, we keep temporary security and rate-limit records, such as an IP address and email address, about sign-in attempts. Those records may remain after account deletion until routine cleanup.

Deleting your account

In the game, open the account controls in Settings or Profile, depending on the version of the game, and choose Delete account. This deletes the account, its saved progress for all three games, and your record at RevenueCat, and revokes Sign in with Apple. Progress on your device stays. Purchases stay with your Apple ID or Google account and can be restored. You can also ask by email; see how to delete your Scrap Quilt account.

Children

Scrap Quilt is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has signed in, write to support@endpaperlabs.com and we will delete the account.

Your choices and rights

You can play without signing in, change ad choices in Settings, deny tracking on iPhone, and delete your account at any time. Depending on where you live, you may also have the right to ask what information we hold about you and to have it corrected or deleted. Write to support@endpaperlabs.com; we answer within 30 days.

This website

This page is part of endpaperlabs.com, whose own analytics and server logs are described in the Endpaper Labs website privacy policy.

Changes

If this policy changes materially, we will update the date above.