Privacy policy

Last updated: 9 October 2026. This one page covers both quizthespire.com and the Convert The Spire Reborn apps for Windows, macOS and Android.

One person runs all of this: Lukas Bohez, a solo developer in Belgium, reachable at lukasbohez@gmail.com. There is no company behind it and no analytics desk. Nothing described below is ever sold, and nothing is shared with anyone except where this page names them.

Convert The Spire Reborn (the app)

This is the privacy policy for the app published on Google Play as com.torrentspire.ai, and it covers the Windows builds, from GitHub and from the Microsoft Store, and the macOS build of the same app.

What the app collects about you

The app has no account, no sign-in and no server of mine to talk to. It sends me nothing: no analytics, no crash reports, no usage statistics, no telemetry. Your downloads, conversions, playlists, library index, watched folders, settings and logs are written to your own device and stay there. Files you convert are processed on the device and are never uploaded, and there is no size limit because nothing passes through me.

Ads on the Google Play build

The Android build from Google Play shows ads through Google AdMob. AdMob is Google's own SDK, and to fetch an ad it reads your device's advertising ID along with device and connection information (device model, OS version, IP address, and whether an ad was seen or tapped) and sends it to Google. Google uses it to pick an ad, limit how often you see the same one, measure it and detect click fraud.

That advertising ID is the only piece of user data anything here collects, and it travels to Google over HTTPS. I never see it: the revenue reports I get are counts, with nothing in them that points at a person or a device. What Google does with it is described in Google's privacy policy and in how Google uses information from sites or apps that use our services. The Windows and macOS builds carry no ad SDK at all, and Android TV shows no ads.

In Europe the app asks for your consent through Google's consent message first, and no ad loads until that has been answered. You can choose to watch an ad in exchange for half an hour without ads; that is an ordinary AdMob ad, and the break itself is kept on your device.

Remove Ads (Google Play build)

Remove Ads is bought through Google Play. Google Play handles the payment and keeps the purchase record under its own payments privacy notice; the app only asks Google Play whether Remove Ads was bought, and I never see your card or bank details.

The Microsoft Store version

The Windows app from the Microsoft Store is updated by the Store, so it does not check GitHub for new versions, and FFmpeg, yt-dlp and Deno come with it instead of being downloaded. It only contacts GitHub from Settings: to see whether a newer yt-dlp is out, and to download it when you press Update there. Buying the All colours add-on and rating the app go through Microsoft's own Store dialogs: Microsoft handles the payment and your account, under Microsoft's privacy statement, and the app only learns whether you own the add-on. It carries no ad SDK.

Turning the advertising ID off, or resetting it

The advertising ID belongs to your device, not to this app, and Android lets you take it away: Settings → Google → All services → Ads. Reset advertising ID gives you a fresh one and cuts the old profile loose; Delete advertising ID stops apps getting one at all, and the app keeps working, with non-personalised ads. You can also opt out of ad personalisation there without deleting anything.

Accounts, and deleting your data

The app cannot create an account, and I hold no copy of anything from it, so there is nothing on a server for me to delete for you. Everything the app keeps is on the device, and you remove it yourself:

• Android: Settings → Apps → Convert The Spire Reborn → Storage → Clear storage, or uninstall the app, which takes its data with it. Media you chose to save stays where you saved it, because it is your file, not app data.
• Windows: uninstall it from Settings → Apps (with the zip, delete its folder instead), then delete %APPDATA%\Oroka Conner\Convert the Spire Reborn, which holds the settings and library, and %LOCALAPPDATA%\ConvertTheSpireReborn, which holds the built-in browser's cookies and history. Downloaded and converted files stay in whatever folder you pointed the app at.
• Windows, Microsoft Store version: uninstall it in Settings → Apps; Windows deletes its settings and caches with it. Your downloaded and converted files stay where you saved them.
• macOS: move the app to the Bin and delete its settings folder. Your files stay where you saved them.
• The advertising ID: reset or delete it in Android's ad settings, as above.

Permissions, and what each one is for

• Network access — fetching the media you asked for, torrent transfers, and the ad request on the Play build.
• Notifications — download, conversion and playback progress.
• Foreground service — so Android does not kill a running download, torrent or playback when you switch away.
• Files and storage you select — reading the folder you point at when matching a playlist, and writing to the folder you chose to save into.

The app asks for no contacts, no location, no camera and no microphone, and it does not read files you have not pointed it at.

Where the app connects, and what goes with it

• The site you gave it a link to. The request goes straight from your device to that site (YouTube and the other 1,800+ sites yt-dlp supports). They see what any browser visit would show them: your IP address and a user-agent. I am not in the middle of it.
• GitHub — the builds from GitHub (Windows, macOS and the APK) ask GitHub for the latest release when they start, which you can switch off in Settings, and the Windows and macOS builds download yt-dlp from GitHub and keep it up to date. On Windows, Update now downloads the new installer from GitHub when you press it. These are plain downloads; nothing about you goes with them beyond what any download sends. GitHub's privacy statement applies to them. The Microsoft Store version does none of this at start, as described above.
• gyan.dev — on Windows, when FFmpeg is missing, the app downloads it from gyan.dev, the usual source of Windows FFmpeg builds. Again a plain download.
• Torrent trackers and peers — if you use the torrent features, trackers and peers see your IP address, exactly as with any other BitTorrent client. Whether to use that part is entirely your call.
• The built-in browser loads the pages you open in it, like any browser.
• Devices on your own network — Casting and Watch Together talk to the phones, computers and TVs on your home network, and nothing leaves it.
• MusicBrainz (musicbrainz.org) — only when you use Fix missing metadata in the player: it looks up the artist of each song in your library that has none, by the song's title. Nothing else goes with it, and since v16.0.0 the player never does this by itself.
• Report a bug opens a GitHub issue page in your browser with your app version, platform and recent log filled in. You see all of it first, and nothing is sent unless you submit it.
• Microsoft Store — the Store version's updates, the All colours add-on and ratings, as described above.
• Google AdMob — the Play build only, as described above.

None of these carry an identifier I created, because the app never creates one.

Children

The app is not directed at children and is not listed in Google Play's Families programme. I do not knowingly collect anything from a child; there is no account and no profile for anyone, of any age.

The short version, matching the Play Data safety card

• Collected and shared: device or other IDs (the advertising ID), for advertising and marketing only. Collection is marked optional, because deleting the advertising ID in Android's settings stops it and the app carries on working.
• Encrypted in transit: yes.
• Account creation: none, in any form.
• Data deletion: nothing is held off your device, so there is nothing to request; the steps above clear what is on it.

quizthespire.com (the website)

Server logs

The web server keeps standard access logs: your IP address, the page requested, the time, and your browser's user-agent string. Logs stay on the server, are not shared with anyone, and are rotated.

Site accounts, support chat and notes

Posting in the support chat or the notes board takes a free account on this site, which is separate from the app and not needed to use it. That account stores the first and last name you picked and your password as a bcrypt hash, never as text I could read. Signing in sets one cookie named s, which holds your user id and a signature and nothing else; logging out clears it. Your chat messages and notes are stored server-side so history survives a reconnect or a restart, which means anyone in the room can read them: don't put anything in there you wouldn't put on a public forum. The display name shown next to a message, your theme and whether you turned ads on are kept in your browser's own storage. Want the account and everything attached to it gone? Email me and it will be.

Ads on the website

Ads on this site are off unless you turn them on, with the Ads switch at the top of every page. Until you do, nothing from Google AdSense loads: no ad script, no ad frame and no ad cookie. The choice is kept in your browser's own storage, not on the server, and switching ads off again reloads the page without any ad code. They are there for anyone who wants to support the site that way.

With ads on, the portfolio page and the Convert The Spire tool page each carry one clearly labeled ad slot, and Google may also place ads elsewhere on a page by itself. /ads.txt declares the publisher, and /app-ads.txt declares the same publisher for the app's ads.

To show an ad, Google and its partners use cookies and similar technologies, and they can pick ads based on your earlier visits to this site or to other sites. Google sets and reads those cookies, not me; the revenue reports I get are counts, with nothing in them that points at a person. Visitors from the EEA, the UK and Switzerland who turn ads on are asked through Google's consent message before any of that is used for personalised ads, and can change the choice later from the same message.

You can turn off personalised ads from Google in Google's ad settings, and opt out of other vendors' ad cookies at aboutads.info (or youronlinechoices.eu in Europe). What Google does with the data is described in how Google uses information from sites or apps that use our services.

Interactive tools

MIDIComposer and the converter pages run in your browser; your files and prompts are not uploaded. The Lofi browser extension plays audio and nothing else: it collects no data, tracks nothing, and has no account.

Older data

User data from the site's previous quiz, story, and word-game features was deleted in September 2026 when those features were removed. If you had an account on any of them, it and everything attached to it is gone.

Your rights, and getting hold of me

You can ask what is held about you, ask for it to be corrected or deleted, or object to it being kept at all, and you can complain to the Belgian Data Protection Authority if I handle that badly. In practice there is very little to ask about: an app that holds nothing, and a website whose only records are logs and whatever you typed into it yourself. Email lukasbohez@gmail.com and you will get an answer from the person who wrote the code.

Changes to this policy

If what is collected changes, this page changes with it and the date at the top moves. This URL, quizthespire.com/privacy, is the permanent home of the policy; every older privacy link redirects here.