DIGS Privacy Policy

Last updated: October 11, 2026

DIGS is made by Sandstone Cloud Solutions LLC ("we"). This policy covers the DIGS app on iPhone and iPad, Android, and Steam (Windows and Mac). It explains what leaves your device, why, and how to remove it.

The short version: DIGS has no ads and no advertising tracking, and we don't run analytics of our own. On iPhone, iPad and Android, the game connects to Unity Gaming Services each time it starts so that in-app purchases work. That connection sends Unity a few technical details, and Unity's purchase software reports each purchase back to Unity; both are listed below. If you join the studio leaderboards, your designer's name, look and scores also go to Unity so other players can see them. On Steam, the game sends nothing unless you join the leaderboards; after you leave them, it contacts Unity only to finish deleting your leaderboard data. DIGS also uses Steam Cloud there, so unless you turn Steam Cloud off, Steam keeps a copy of your save and gallery with Valve.

Your progress, settings, designers and saved designs are stored on your device, together with a record of your store purchases, the version of the studio rules you agreed to, and the anonymous IDs of any players you hid or reported. Copies also go to your device's own backup, if you use one, and on Steam to Steam Cloud, which keeps your save and gallery with Valve unless you turn Steam Cloud off in Steam. On iPhone, iPad and Android, deleting the app deletes the copy on your device. On Steam, your save and gallery are kept in your user folder (Windows: %USERPROFILE%\AppData\LocalLow\Sandstone\DIGS; Mac: ~/Library/Application Support/Sandstone/DIGS). A few small settings, and, if you have joined the leaderboards, Unity's installation ID, your leaderboard sign-in and your recent reports, are kept in your user preferences (Windows: the registry key HKEY_CURRENT_USER\Software\Sandstone\DIGS; Mac: ~/Library/Preferences/unity.Sandstone.DIGS.plist). Delete both to remove them from your computer. This doesn't remove the copy in Steam Cloud: while Steam Cloud is on, Steam puts your save and gallery back the next time you play.

The daily client reminder (iPhone, iPad and Android) is off unless you turn it on. When it's on, DIGS asks your device to show at most one local notification a day. It's scheduled on your device, and nothing about it is sent to us, to Unity or to anyone else. You can turn it off in Settings > Reminders or in your device's notification settings.

In-app purchases in DIGS run through Unity In-App Purchasing, part of Unity Gaming Services, a service run by Unity Technologies. Each time the game starts on a phone or tablet, it connects to Unity's services so the shop can work, whether or not you join the leaderboards. Unity receives:

• Identifiers. A random installation ID for this copy of the game, sent each time the game starts. With each purchase, and each time the game signs in to the leaderboards, also a session ID if Unity has set one and, on iPhone and iPad, Apple's identifier for vendor (a code shared by apps from the same developer on your device). If you have joined the leaderboards, purchase records also carry your anonymous leaderboard player ID. None of these is your name, email, Apple ID or Google account.
• Device and connection details. Your IP address, the platform, and the versions of the game and of Unity's software, each time the game starts. With each purchase, and each leaderboard sign-in, also the device model, operating system version, system language and preferred languages, when the game was installed, when the device was last started up, and its total storage size. Unity uses the IP address to work out an approximate country or region.
• Purchase records. For each purchase you start: the product, the time, whether it went through, failed (with the error message) or was delivered, the store's transaction ID, and the store's own proof of purchase (Apple's receipt and signed transaction, or Google's order ID, purchase token and signature). Payment details never reach Unity or us: Apple and Google handle payment.
• Diagnostics. Unity's software can report crashes in its own code. The version in DIGS doesn't send any today.

Unity uses this to run the purchase service and its other services in the app, and may use it to measure and improve them. It isn't used for advertising, and DIGS doesn't use the advertising identifier on your device. Unity keeps its service logs for up to 90 days and purchase records until they are deleted on request.

The purchases themselves are handled by Apple's App Store or Google Play under their own terms and privacy policies. The app receives a confirmation that the purchase went through so it can unlock what you bought. We never see your payment details. On Steam, DIGS is a one-time purchase handled by Valve and the game has no in-app purchases. Unity's purchase software is still part of the game there: each time the game signs in to the leaderboards (after you join, or to finish deleting your leaderboard data), it sends Unity the installation ID, your anonymous player ID, and the platform and version details described above. On a Mac it also sends the device model, operating system version, system language and preferred languages, when the computer was last started up, and its total storage size.

The leaderboards are off until you choose to join. The first time you open the Studios screen, the game asks: "Join the studio leaderboard? Other players will see your designer, name and scores. Names must follow the studio rules." If you tap Just look, no leaderboard data is sent.

If you join, DIGS sends the following to Unity Gaming Services, which hosts the leaderboards for us:

• An anonymous player ID. It isn't linked to your name, email, Apple ID, Google account or Steam account.
• A random installation ID for this copy of the game, which Unity's software sends when the game connects to the leaderboards, on every platform.
• Your designer's name. The name you typed for your designer, for example "Ciana" or "Jay". It must be 2 to 16 characters, use Latin, Greek or Cyrillic letters (up to four numbers, spaces and a few punctuation marks are fine too), follow the studio rules below, and pass a name filter before it's sent.
• Your designer's look. A short code that describes the avatar (skin tone, hair, outfit and so on), so other players see the same portrait you do.
• Your reputation title and scores. Your studio title (for example "Junior Designer"), your stars and scores on the Top studios board, this week's Daily Commission total, and your Challenge points.

As with any connection, Unity also receives your IP address and the platform and version details. On iPhone, iPad, Android and Mac, each leaderboard sign-in also sends the device details listed under Purchases. On Steam this happens only after you join, or while the game finishes deleting your leaderboard data after you leave.

We use leaderboard information to show the leaderboards and to review reported names. We don't sell it or share it with advertisers. Once you've joined, Unity's purchase software also attaches your anonymous player ID to the purchase records described above.

You can hide any other studio on a leaderboard, or report its name. Hiding happens on your device only. If you have joined the leaderboards and are online, a report sends the reported player's anonymous ID, their name and the time to Unity Gaming Services, under your own anonymous ID, so that we can review it. Each report also repeats up to seven of your earlier reports, so none is lost if two arrive close together. Otherwise, a report only hides the name on your device. Your save keeps the anonymous IDs of the players you hid or reported, so they stay hidden. We review reports daily and remove names that are offensive or that impersonate someone.

Designer names are public once you join the leaderboards, so they follow a few rules:

• Be kind. No slurs, hate, harassment, sexual content, or names that mock a group or a person.
• Be yourself, not someone else. Don't pretend to be DIGS, Sandstone, a moderator, a brand or a real person.
• Keep it private. No full real names of other people, contact details, usernames for other services or links.
• No ads. Names aren't for selling or promoting anything.

The name filter catches a lot of this before a name is sent. For the rest, any player can report a name. We review reports daily. A name that breaks these rules is removed, and we may take a player who keeps breaking them off the leaderboards. If your name was removed by mistake, email support@sandstonecloud.com.

Joining the leaderboards means you agree to these rules. The game records which version of the rules you agreed to and when, on your device.

• Settings → Show me on leaderboards (off) takes you off every board. Turning it off overwrites your entry on every board, and the entry holding any reports you sent, with an empty one (score 0, no name, look or title; an empty entry is never shown), then deletes your anonymous player account from Unity Gaming Services. The empty entries stay on Unity's servers under your deleted player ID.
• Settings → Delete my leaderboard data does the same thing directly, after you confirm.
• If your device is offline when you ask, or the deletion doesn't finish, the game tries again each time it starts until it does. If it still hasn't finished once you're back online, email us at support@sandstonecloud.com and we'll remove your entries.
• You can also email us at support@sandstonecloud.com and ask us to delete your leaderboard data. Tell us your designer's name and roughly when you last played so we can find the entry.
• To have the data Unity holds for purchases deleted (the purchase records, identifiers and device details described above), email support@sandstonecloud.com. Unity handles that data for us, so we pass your request on to Unity.

Deleting your leaderboard data doesn't touch your progress, designers or gallery, which stay on your device, or the list of players you hid or reported. Settings → Reset progress starts the studio again. Coins go back to zero, including coins you bought, but it keeps the record of your store purchases (so packs and other one-time purchases stay unlocked) and your leaderboard choices.

DIGS is not directed at children under 13, and we don't knowingly collect personal information from children. The leaderboards use a made-up designer name and an anonymous ID, the name filter blocks many offensive names, and any player can hide or report a name. A parent who wants their child's leaderboard data removed can use Delete my leaderboard data in Settings or email support@sandstonecloud.com.

Your name, look, title and scores stay on the boards until you leave them or delete your data; after that, only the empty entries described under Deleting your data remain. The weekly board resets every Monday at 00:00 UTC. Each player has one entry on our moderation board, holding their latest report and up to seven earlier ones; it is replaced by that player's next report and emptied when they leave the leaderboards. Unity's retention for purchase data is described above.

Unity Gaming Services may process data in the United States and other countries where Unity operates. Unity's own privacy policy is at https://unity.com/legal/privacy-policy. On Steam, Valve stores your save and gallery in Steam Cloud under Steam's privacy policy, unless you turn Steam Cloud off.

Depending on where you live, you may have the right to see, correct or delete the information held about you. Everything sent from the game is listed above. You can delete your leaderboard data from Settings at any time, and for anything else, email support@sandstonecloud.com.

If this policy changes, we'll post the new version here with a new date.

Sandstone Cloud Solutions LLC · support@sandstonecloud.com