Privacy policy
In short
- You do not create an account. We never ask for your name, e-mail address or phone number.
- The game has no ads and no advertising SDK. We do not use the advertising identifier (IDFA, AD_ID) and we do not track you across other apps.
- Statistics and crash reports (without your name or contact details) are sent only with your consent. They are off by default, and you can withdraw consent at any time in the game settings.
- Apple or Google handles payments. We never see your card details.
- A copy of your save goes to your own iCloud or Google Play Games account.
- This website uses no cookies and no trackers.
1. Who is responsible for your data
The data controller is Mateusz Wyszogrodzki, a private individual and the developer of the game “Pstryk: Bestiary” (“we”, “us”). For anything about your data, write to contact@
We have not appointed a data protection officer because we are not required to.
2. Game data on your phone
Progress, settings, game statistics, local score tables, your consent choices and a random player ID are stored on your phone. We do not receive them.
If your phone backs up app data (iCloud Backup, Google backup), the system may include this data too, under Apple’s or Google’s terms.
Legal basis: performance of the contract to use the game (Art. 6(1)(b) GDPR).
3. Cloud save (iCloud and Google Play Games)
So that your progress survives a new phone or a reinstall, the game keeps a copy in your account:
- on iPhone in iCloud (iCloud key-value storage), if you are signed in to iCloud;
- on Android in Google Play Games (saved games), in your Google account.
The copy holds the same game data as your phone, with no contact details. Apple or Google stores it in your account under their own terms. We cannot access it: only the game on your device reads it.
On Android the game uses your Play Games profile. Your gamer name and avatar from that profile may be visible to others depending on your Google settings. You can review and delete Play Games data in your Play Games profile or your Google account.
Legal basis: performance of the contract (Art. 6(1)(b) GDPR), that is, saving the progress you use while signed in to iCloud or Play Games.
4. Statistics and crash reports (Firebase), only with consent
On first launch the game asks whether it may send statistics and crash reports. They do not include your name or contact details, but they are linked to random installation IDs, so under the GDPR they still count as personal data (pseudonymous data). Consent is voluntary: the game works the same without it. The switch is off by default. You can change your mind at any time in Settings › Privacy. Without your consent the game sends none of this data.
Services: Google Analytics for Firebase and Firebase Crashlytics. Google acts as our processor.
What we send with your consent
- game events: tutorial steps, level start and end (number, result, moves, stars, continues), modes played, amber earned and spent, purchases (the product only, no payment details), session length;
- technical data: random installation IDs (the app instance ID, the Firebase installation ID and the Crashlytics installation ID), device model, operating system version, game version, language;
- approximate country and region, which Google derives from your IP address; for people in the EU Google does not store the IP address itself;
- crash reports: a record of what the game’s code was doing when it crashed, device model, operating system version, memory and free storage.
What we do not send
Your name, e-mail address, phone number, precise location, advertising identifier (IDFA on iOS, AD_ID on Android), the iPhone identifier for vendor (IDFV) or anything you type in the game. We do not combine this data with other sources and we do not use it for advertising.
Purpose: to understand where the game is too hard or unclear, to improve the balance and to fix bugs.
Legal basis: your consent (Art. 6(1)(a) GDPR and, for storing and reading information on your phone, the national rules implementing Art. 5(3) of the ePrivacy Directive, in Poland Art. 399 of the Electronic Communications Law). Withdrawing consent does not affect the lawfulness of processing before the withdrawal.
Retention: statistics 2 months, crash reports 90 days. After that Google deletes them automatically.
5. Purchases (Apple, Google, RevenueCat)
You buy in-game items in the App Store or on Google Play. The store operator handles payment and billing under its own terms, as a separate controller. We never receive your card details or your name.
To confirm a purchase, deliver the item and let you restore purchases, the game uses RevenueCat, Inc. (USA), acting as our processor. RevenueCat receives: a random app user ID created by the game, the store transaction data (product, date, price, currency, transaction ID), basic device and app information (operating system, game version, store country) and your IP address. Buying is optional. If you buy something, this data is needed: without it we cannot confirm or restore the purchase.
Legal basis: performance of a contract (Art. 6(1)(b) GDPR) and accounting obligations (Art. 6(1)(c) GDPR). We keep purchase data as long as needed to restore purchases and meet legal obligations.
6. Notifications
If you allow them, the game schedules reminders (for example when your hearts are full or your daily gift is ready) locally on your phone. Nothing is sent anywhere for this, and notifications never contain ads. You can turn them off in the game or phone settings.
7. Sharing a result and rating the game
Sharing a result opens your phone’s share sheet: the content goes only to the app you pick. The rating prompt is an Apple or Google form, and the store receives your rating and review.
8. Contacting us
When you write to contact@
Mail to addresses at pstrykgame.com passes through Cloudflare Email Routing, which forwards it to the developer’s mailbox. We keep correspondence until the matter is closed and then until any claims become time-barred.
9. This website
pstrykgame.com uses no cookies, no analytics and no trackers, and loads nothing from other servers (the fonts are on our own server). It stores nothing in your browser. The home page only checks your browser’s language to open the right version.
The site is hosted on Cloudflare Pages. Cloudflare, Inc., as our processor, processes your IP address and technical request data (for example your browser and the page address) to deliver the site and protect it from attacks (Art. 6(1)(f) GDPR). We do not keep a log of visits ourselves. Cloudflare keeps request data only as long as it needs it to deliver the site and protect it from attacks, under its own retention rules.
10. Recipients and transfers outside the EEA
- Google (Firebase): processor, only with your consent;
- RevenueCat, Inc.: processor, purchases;
- Cloudflare, Inc.: processor, website and mail;
- Apple and Google as operators of the stores, iCloud and Google Play Games: separate controllers under their own terms.
Some of these companies process data in the USA. Transfers rely on the European Commission’s adequacy decision (EU-US Data Privacy Framework) for certified companies (Google, Cloudflare) or on standard contractual clauses (RevenueCat).
We do not sell data and do not pass it to advertisers.
11. Children
The game is made for adults and is not directed at children. We do not knowingly collect children’s data. If you are under 16, do not turn on statistics without a parent’s or guardian’s consent. If you are a parent or guardian and believe a child has given us data, write to us and we will help delete it.
12. Your rights
You have the right to access your data, to have it corrected or erased, to restrict processing, to data portability, to object to processing based on legitimate interest and to withdraw consent at any time. We make no decisions about you based solely on automated processing, including profiling, that have legal or similarly significant effects on you (Art. 22 GDPR).
You may also lodge a complaint with the President of the Personal Data Protection Office in Poland (UODO, uodo.gov.pl) or with the supervisory authority in your country.
To use your rights, write to contact@
13. How to delete your data
- Settings › Danger zone › Delete my data erases progress, settings and consents from your phone and the game’s cloud copy.
- Start over (in the same place) erases progress only. Purchases stay.
- Turn statistics off in Settings › Privacy. Google deletes data sent earlier automatically after 2 months (crash reports after 90 days).
- Uninstalling the game deletes the data on your phone. The copy in iCloud or Google Play Games stays in your account; to remove it, reinstall the game and choose Delete my data.
- You can also delete Play Games data in your Play Games profile or your Google account.
- For anything else, write to contact@
pstrykgame.com and include your player ID.
14. Security
The game and the website connect to services only over encrypted connections (HTTPS). The game has no accounts and no passwords.
15. Changes to this policy
When the game’s features or the services it uses change (for example if a future version adds ads), we will update this policy and the date at the top. We will announce significant changes in the game and ask for consent again where it is needed.