Sandar
DoomStopper
1. Who this covers
This draft describes DoomStopper, an iOS app from Sandar, and this website at sandar.dev. Sandar is an independent software brand operated by an individual developer. It is not currently a registered company. This draft does not name a registered address or jurisdiction.
Support and privacy questions: [email protected].
2. How to read this draft
Sections marked Verified findings summarize product behavior that has been confirmed for this draft. Sections marked Draft language are proposed wording for review and are not promises. Sections marked Open questions still need an owner or counsel decision.
Verified findings
- Settings, schedules, personal notes, and tokens for selected applications, categories, and websites are stored locally using app storage and an App Group.
- Optional personal notes may be shown on Apple’s Screen Time shield when a protected item is opened.
- Apple Family Controls, Device Activity, and Managed Settings provide Screen Time functionality. Authorization is requested for the device owner (individual), not as a parental-control product for another person’s device.
- DoomStopper code does not upload Screen Time selections or personal notes to Sandar servers. The app still uses Apple and Google services that make their own network requests, as described below.
- No user account is required.
- Google AdMob provides rewarded advertising for some Free-tier use. The Google Mobile Ads SDK is started when a rewarded ad is presented. An AdMob application identifier is included in the app. Under Google’s policies, AdMob may collect device identifiers, approximate location, ad interaction, and diagnostic information. That collection is Google’s SDK and policy behavior; it is not a Sandar-server collection, and it has not been independently measured in DoomStopper source beyond linking and presenting AdMob.
- Apple StoreKit processes subscriptions and purchases. Apple may also make purchase records available to the developer through App Store Connect.
- Google’s User Messaging Platform (UMP) is not currently implemented. This draft does not claim that a consent form appears in the app, or that AdMob collection is limited by a UMP consent signal.
- The Screen Time shield does not offer a Continue Anyway unlock. After a budget is reached, a cooldown follows. The cooldown duration is set in the app and is currently at least 15 minutes.
3. Information handled by DoomStopper
On the device
DoomStopper stores settings, schedules, cooldown preferences, personal notes, and tokens that represent the applications, categories, and websites you select for protection. That information is kept locally in app storage and in an App Group so the main app and its Screen Time extensions can read the same state.
An optional personal note can appear on Apple’s system shield UI, which is shown when you open a shielded application, category, or website. The note stays on the device; it is not uploaded to Sandar servers.
Screen Time authorization, selection, shielding, and related activity run through Apple’s Family Controls, Device Activity, and Managed Settings frameworks. Apple provides those system services. This draft does not describe Apple’s internal processing.
The app also uses iOS storage and related system APIs (including App Group UserDefaults). Apple requires some of those APIs to be declared in a privacy manifest. Completing PrivacyInfo files and App Store Privacy Nutrition Labels remains an open task and is not claimed as finished here.
Network traffic that is not a Sandar server upload
DoomStopper code does not upload Screen Time selections or personal notes to Sandar servers. The app does not require a Sandar user account. This is not a claim that the app “collects no data,” “never tracks,” or that every third party is blocked.
When a rewarded ad is shown, the Google Mobile Ads SDK communicates with Google. When you buy or restore Pro, StoreKit communicates with Apple. Those requests can include device, advertisement, or purchase information under Apple’s and Google’s policies.
Subscriptions
If you buy DoomStopper Pro, Apple processes the purchase through StoreKit and your Apple ID. Sandar does not receive your full payment card details through the app. Apple’s handling of purchase data is governed by Apple’s policies. Apple may provide the developer with subscription and proceeds information in App Store Connect.
Rewarded ads
Rewarded ads from Google AdMob may be offered when Free use goes beyond included limits: more than two protected applications, any protected category, any protected website, or more than 24 scheduled Focus Hours per week. You can stay within those limits, watch a rewarded ad, or subscribe to Pro. Ads may fail to load.
Under Google’s own policies, AdMob may collect device identifiers, approximate location, ad interaction, and diagnostic information, and may use that information for advertising. This draft does not treat those Google policy categories as independently verified measurements from DoomStopper’s code.
Because UMP is not currently implemented, this draft does not claim that the app presents a Google consent message, collects a consent signal, or limits AdMob tracking based on that signal.
4. This website
sandar.dev is a static website. It does not load advertising or analytics scripts. Your browser and the hosting provider (Cloudflare Pages) may process standard technical request data such as IP address, user agent, and timestamps in order to serve the site. Cloudflare may also set operational or security cookies. This draft does not claim that the website collects no data.
5. Third-party policies
Apple and Google process some information under their own terms. Please read:
- Apple Privacy Policy
- Apple privacy features, including Screen Time
- Apple Media Services Terms of Use
- Manage or cancel Apple subscriptions
- Google Privacy Policy
- How Google uses information for advertising
- How Google uses information from partner sites and apps
The support address is a Gmail address, so Google may process that correspondence under its own terms.
6. Draft language for review
The following is proposed policy wording. It is not a commitment until approved.
On-device DoomStopper information is used to operate focus, shielding, schedules, notes, and related app features. Sandar does not sell that on-device information. Apple and Google may process information according to their own policies when you use their services through the app, the App Store, or email.
This draft does not claim that you can delete all app data from a button inside DoomStopper. Removing the app from the device is expected to remove locally stored app data, subject to iOS behavior, backups, and any information Apple or Google retain under their own policies. There is no Sandar user account from which to download or erase a cloud profile.
If you contact Sandar by email, the contents of that message, your email address, and related mail-server metadata will be handled in order to reply.
Children
DoomStopper is designed around the device owner’s own Screen Time authorization. This draft does not describe DoomStopper as a parental-control product for children, and it does not claim COPPA, GDPR-K, or similar certification. Whether the App Store age rating, children’s data rules, and advertising rules are satisfied is an open compliance question.
International users
This draft does not name a data controller, legal basis, transfer mechanism, or supervisory authority. Sandar is not currently a registered company. Those items require an owner decision and, where appropriate, legal review — especially while AdMob may process device information and UMP is not implemented.
7. Retention and requests
On-device information remains on the device until you change it or remove the app, subject to iOS backups and system behavior. Sandar does not currently operate an in-app deletion or export tool, and this draft does not promise one.
If you write to [email protected] about privacy, Sandar can discuss what the app stores locally and what third parties disclose in their own policies. Sandar cannot delete information held only by Apple or Google. No response time is promised.
8. Changes
If this policy is approved and later changed, the updated date on this page should change. Material changes to third-party advertising or data practices should be reviewed before they are described as current.
Open questions for review
- Decide whether a jurisdiction belongs on this page. Sandar is not currently a registered company, and no address is stated.
- Complete App Store Privacy Nutrition Labels and canonical PrivacyInfo files so they match actual AdMob, StoreKit, App Group UserDefaults, and other required-reason APIs. Do not claim “Data Not Collected” if AdMob or those APIs collect listed data types.
- Decide whether App Tracking Transparency will be used, and what the tracking flag in PrivacyInfo should be.
- Decide whether to implement Google UMP before offering ads in regions that expect a consent message. Until UMP exists in the app, advertising-consent language must stay prospective.
- Confirm SKAdNetwork entries, production AdMob configuration, and whether Google’s possible collection of approximate location or identifiers is acceptable for the intended markets.
- Decide how children’s and age-rating rules apply, given Screen Time APIs and rewarded ads.
- Decide whether crash reporting or other diagnostics will be added. None are claimed here.
- Decide a process for privacy requests, since there is no in-app deletion and no user account.
- Have counsel review this draft. It is not a substitute for legal advice.