Privacy Policy
This policy explains what information the mobile game Purrheaven ("the game") collects, why, who receives it, and what you can do about it.
Who we are
The game is published by FOP Danylchenko Daniil Serhiyovich, a private entrepreneur in Ukraine trading as Citrus ("we", "us"), who is the data controller:
7/1 Panasa Myrnoho st, Khmelnytskyi, 29017, Ukraine
support@citrus.games
EU representative: [to be appointed]. UK representative: [to be appointed].
Summary
- You play without giving a name, email or password. The game signs you in anonymously.
- We collect gameplay analytics and crash reports to improve the game and fix bugs.
- We use AppsFlyer to measure which ad or channel brought you to the game, and we share that measurement with the ad networks we use.
- The game shows no ads and has no in-app purchases.
- We do not sell your information for money.
- You can delete your account at any time from the game's Settings.
Information we collect
| What | Details | Why |
|---|---|---|
| Anonymous account | A random user ID created by Firebase Authentication when you first open the game, plus the tokens that keep you signed in. | To identify your game across sessions and link analytics and crash reports to the same player. |
| Gameplay analytics | Events about what happens in the game, such as sessions starting and ending, tutorial steps, level-ups, currency earned and spent, items merged and crafted, areas unlocked and actions that were blocked. Each event carries your player level, current area, session number and length, days since install, game and device language, your user ID, a random install ID, and the channel and campaign that brought you to the game. | To understand how the game is played, balance its difficulty and economy, and find where players get stuck. |
| Device information | Platform, operating-system version, device model, app version, and a device identifier provided by the operating system (on iOS, the identifier for vendor; on Android, an identifier derived from the Android ID). Google Analytics for Firebase also collects approximate location (country/region, derived from your IP address) and its own app-instance ID. | To measure and debug the game across devices. |
| Attribution data | Collected by AppsFlyer: IP address (which can indicate general location), user agent, device and operating-system details, device identifiers such as the Android ID and Google Advertising ID where available, install and app-open times, and the ad clicks or views that led to your install. | To learn which ads and channels bring players in, and to measure and improve our campaigns. |
| Crash reports | When the game crashes or hits an error: the stack trace, device state at the time (such as free memory and orientation), recent game log messages, and your anonymous user ID. | To find and fix bugs. |
| Game progress | Your lands, items, currencies, level, tutorial progress and settings. Stored on your device and backed up to Google Cloud Firestore, tied to your anonymous account. | To save your game and restore it from the backup. |
| Push token | A token from Firebase Cloud Messaging that lets us send notifications to your device, and the topics it subscribes to (all players and your language). | To send announcements, if notifications are allowed. Reminders such as "energy full" are scheduled on your device and send us nothing. |
| Support messages | If you email us: your email address and whatever you include. The in-game Contact Support button pre-fills your Player ID and game version. | To answer you. |
We do not collect your name (unless you email us and include it), phone number, contacts, photos or precise location. The game does not currently request App Tracking Transparency permission on iOS, so it does not access your Identifier for Advertisers (IDFA). On Android, Google Analytics for Firebase and AppsFlyer may read the device's advertising ID when the device makes it available. We do not show ads in the game.
You do not have to provide any of this by law. The anonymous account and game progress are needed to play. Analytics and attribution are optional where consent is required.
Why we are allowed to use it
- To provide the game you asked for (contract): anonymous account, game progress and cloud backup.
- Your consent, in the EEA, the UK and other places where the law requires it: gameplay analytics, attribution data and sharing with ad networks. You are asked when you start the game, and you can withdraw consent at any time in the game's Settings. Withdrawing does not affect what happened before.
- Our legitimate interests: crash reports and security, so that the game keeps working and stays fair; answering support messages; and, where consent is not required, analytics and attribution, so that we can improve the game and measure our marketing. You can object at any time.
- Your permission on your device: push and local notifications. You can turn these off in Settings.
We do not make decisions about you by automated means that have legal or similarly significant effects.
Who receives it
| Recipient | What for |
|---|---|
| Google (Firebase) | Firebase Authentication, Google Analytics for Firebase, Firebase Crashlytics, Cloud Firestore, Firebase Cloud Messaging, Remote Config and Hosting, as our service provider. Analytics data is also exported to Google BigQuery for our dashboards. SeePrivacy and Security in Firebase. |
| AppsFlyer | Install attribution, as our service provider. See theAppsFlyer Services Privacy Policy, which also explains how to opt out of its measurement. |
| Ad networks | Meta (Facebook and Instagram), Google Ads, Unity Ads, AppLovin and TikTok. When we run campaigns on them, AppsFlyer may tell them about installs and in-game events linked to their ads so that they can measure and optimise those campaigns. They handle this data under their own privacy policies. |
| Other providers | Zoho Mail, for support messages, and Cloudflare, which hosts this website and processes visitors' IP addresses to deliver it. This website uses no analytics or cookies. |
| Authorities | If the law requires it, or to protect our rights or the safety of others. |
We require our service providers to protect your information to at least the standard described in this policy.
Where it is processed
We are based in Ukraine. Your game-progress backup is stored in Cloud Firestore in the European Union, and our BigQuery export is in the EU. Other data may be processed in the United States and other countries, whose laws may differ from those where you live. Where the law requires it, we rely on safeguards such as the European Commission's standard contractual clauses in our providers' data processing terms. Contact us for details or a copy.
How long we keep it
- Analytics data in Google Analytics: 2 months for user-level data.
- Analytics data in BigQuery: up to 60 days.
- Attribution data: up to 24 months with AppsFlyer. Ad networks keep what they receive under their own policies.
- Crash reports: 90 days.
- Support messages: up to 2 years after the conversation ends.
- Push token: until you uninstall the game or the token expires.
- Anonymous account and cloud backup: until you delete your account or ask us to.
- Game progress on your device: until you delete your account, clear the game's data or uninstall it.
How we protect it
Data is sent over encrypted connections. Each cloud backup can be read and changed only by the account it belongs to, and we limit who can access our provider consoles. Saves on your device are signed to detect tampering, but are not encrypted. No system is perfectly secure, and we will notify you and the authorities of a breach where the law requires it.
Your choices and rights
- Consent: change your analytics and attribution choice in the game's Settings.
- Notifications: turn them off in the game's Settings or your device's settings.
- Advertising ID: limit or delete it in your device's settings.
- Deletion: delete your account and progress in the game at any time. SeeDelete your account, which also explains what is retained.
Depending on where you live, you may have the right to access, correct, delete, restrict or receive a copy of your information, to object to its processing, and to withdraw consent. To use these rights, contact us with your Player ID (shown in the game's Settings). It is the only way we can find your data, because the game does not ask for your name or email. We reply within one month, and we will not treat you differently for using your rights.
You can also complain to a data protection authority, such as the one where you live or work. In Ukraine, this is the Ukrainian Parliament Commissioner for Human Rights.
United States
We do not sell personal information for money. Sending attribution data to ad networks may count as "sharing" or "targeted advertising" under some US state laws. To opt out, change your choice in the game's Settings, limit your device's advertising ID, or contact us. If we deny a request, you can appeal by replying to us.
Children
You must be at least 13, or the age of digital consent in your country if that is higher, to play. We do not knowingly collect information from younger children. If you believe a child has used the game, contact us and we will delete their account.
Planned features
We plan to add optional sign-in with Apple or Google to restore progress on a new device. It is not active yet, and we will update this policy before it ships.
Changes to this policy
We will post changes on this page and update the "Last updated" date above. If a change significantly affects how we use your information, we will also tell you in the game.
Contact
FOP Danylchenko Daniil Serhiyovich (Citrus), 7/1 Panasa Myrnoho st, Khmelnytskyi, 29017, Ukraine —support@citrus.games, or Settings → Contact Support in the game.