Privacy Policy

This policy covers the native Android and iOS apps, the Animal Gacha browser experience, the public websites, and product support. From app version 1.2 the native apps keep your progress in an online game account; the browser game still stores progress only in the browser. They are described separately below.

Animal Gacha is developed and published by Basalt Works, Tarragona, Spain. Basalt Works acts as the data controller for personal data handled directly through Animal Gacha and is the contact for product support.

The browser game stores progression locally in browser localStorage. Depending on the features used, this can include the collection, packs, DNA balance, achievements, profile choices, combat deck and progress, language and theme preferences, dismissed tips, and related game settings.

Browser progression is not uploaded to a Basalt Works account or cloud-save service. If a save export feature is used, the export is created for the player to keep or transfer manually; Basalt Works does not receive that export unless the player chooses to send it through support.

The public Animal Gacha websites are delivered through Cloudflare Pages. To deliver and protect those sites, Cloudflare processes technical request information and may maintain access and security logs. That information can include an IP address, requested URL, request date and time, browser or user-agent details, and related network or security information.

This hosting information is separate from the progression held in browser localStorage. The game does not add local progression to ordinary page requests.

This copy of the policy is published on basaltworks.com, which is served through Cloudflare; Cloudflare processes the same kind of technical request information to deliver and protect it. When you choose English or Spanish, the site stores that choice in your browser localStorage under basalt-lang. The same policy is published at https://animalgacha.com/privacy.

Opening a support link does not by itself send game data. If a player sends an email, Basalt Works receives the address, message, attachments, and other information the player includes.

If the support form on the Basalt Works website is used, Formspree processes the submitted support details so Basalt Works can receive and answer the request. The form currently asks for an email address and message and can include issue type, device model, operating-system version, and app version. It also sends the product name and source page. Players should not submit information that is not needed to resolve the request.

When the app first opens, it creates an anonymous online account for you automatically. No name, email, or password is asked for. The account lets our servers keep your progress, check that game actions follow the rules, and restore your progress if you link a sign-in method.

Our servers run on Cloudflare (Workers, D1, Durable Objects, and R2). For your account they store: an account and player identifier; session tokens; your game state, including the collection, card levels and mutations, packs, DNA, daily rewards and quests, achievements, battles and expedition, season pass progress, titles and frames, nickname, and avatar; the history of game actions the app sends, with their time and your device’s time-zone offset; and the app rules version. To deliver and protect the service, Cloudflare also processes technical request information such as IP address, time, and user agent.

The app keeps a copy of your progress and any actions not yet sent on the device so you can play offline. When you reconnect, the server checks those actions within a limited offline window; actions it cannot accept are discarded and the app adopts the server’s version of your progress.

You can link your account to Google, or to Apple on iOS, to keep your progress if you change or lose your device. Linking is optional. When you link, we receive and store the name, email address, and account identifier of that Google or Apple account, and the sign-in tokens the provider issues. We use them only to sign you in, restore your progress, resolve which progress to keep when an account was already linked elsewhere, and process deletion. We do not use them for marketing.

Rankings and PvP show other players your nickname, avatar, equipped title and frame, and your scores, rank, and rating. During a PvP match your opponent sees your deck and the moves you make. When no live opponent is found, the game can match players against a ghost built from another player’s saved deck and profile, or against a computer-controlled opponent.

Rankings and PvP are only available to accounts linked to Google or Apple; anonymous accounts never appear in them. Choose a nickname that does not reveal personal information about you.

If you played version 1.1 or earlier, which saved progress only on the device, the app offers to import that save once into your online account. The save is uploaded to our server, checked against the game’s rules and limits, and an exact copy is kept in Cloudflare R2 to audit imports and prevent abuse. We also keep a one-time marker of the save’s identifier and digest so the same save cannot be imported twice. Imports are accepted until January 1, 2027.

The native app uses Google AdMob for optional rewarded ads, and every ad request is non-personalized. AdMob may process device identifiers, ad interactions, approximate location, diagnostics, and other information described in Google policies in order to request, deliver, measure, secure, and reward ads. When you finish a rewarded ad, Google sends our server a signed confirmation that includes your player identifier, so the reward is added to your account.

Where applicable, the native app presents consent choices and, on Apple platforms, an App Tracking Transparency request before tracking that requires permission. The choices available depend on platform, location, app version, and provider configuration. Declining optional tracking does not affect your game account.

RevenueCat manages in-app purchases and the season pass subscription, using your player identifier as the customer identifier. When you buy, renew, cancel, or are refunded, Google Play or the App Store informs RevenueCat, which notifies our server so the purchase is granted to, or removed from, your account. Billing and refunds are handled by Google Play or the App Store under their rules. Basalt Works does not collect or store payment-card details.

Animal Gacha does not use analytics or advertising trackers of its own, and it does not sell personal data or use it to build advertising profiles. The browser game does not use AdSense, advertising cookies, analytics, sign-in, or cloud synchronization. Before enabling any such service, Basalt Works will update and re-version this policy.

Information is used only for the purposes described in this policy:

• Keep your progress in your online account and restore it on your devices.
• Check that game actions follow the rules, and prevent cheating, fraud, and abuse.
• Run rankings, PvP matchmaking, and monthly PvP prizes.
• Grant rewarded-ad rewards, purchases, and season pass benefits.
• Import a save from an earlier version once.
• Deliver and protect the apps, servers, and websites.
• Diagnose bugs, crashes, and compatibility issues.
• Receive and answer support, privacy, and deletion requests.

We process account and game data to provide the game you asked to use (performance of a contract). We process security, anti-cheat, and fraud-prevention data, keep import and transaction markers, and run rankings and PvP on the basis of our legitimate interest in a fair and secure game. Ads are always requested as non-personalized; where the law requires consent for the processing AdMob performs, it relies on the choices you make in the consent options, which you can change at any time. We keep records needed for legal and tax obligations.

Cloudflare, Google (sign-in, AdMob, and Google Play), Apple, RevenueCat, and Formspree process data on our behalf or as independent providers under their own policies. Some of them may process data outside the European Economic Area. Where they do, the transfer relies on an adequacy decision, such as the EU-US Data Privacy Framework, or on standard contractual clauses.

We keep your account and progress while the account exists. Accounts that were never linked to Google or Apple are deleted automatically after 12 months without activity. Weekly ranking entries are removed after eight weeks. Copies of imported saves are kept until the account is deleted.

You can delete your account and all its progress at any time from the app’s Settings with “Delete progress and account”. Deletion is immediate and permanent: it erases the account, progress, rankings, PvP entries, season pass records, imported saves, linked sign-in, and your customer record at RevenueCat, revokes a linked Apple sign-in where required, and starts the app again from scratch. Transaction and rewarded-ad identifiers and one-time import markers without personal data are kept so the same purchase, reward, or save is never granted twice. Instructions, including how to request deletion by email, are at https://animalgacha.com/delete-account.

Browser local data remains until the player clears it. Basalt Works keeps support communications only as needed to answer them. Cloudflare, Formspree, Google, Apple, RevenueCat, and the app stores keep information under their own policies.

Depending on where you live, you may have rights to access, correct, delete, restrict, or object to the processing of your personal data, to receive a copy of it, and to withdraw consent. You can delete your account directly in the app. For other requests write to contact@basaltworks.com; to find an account by email, send the request from the email of the Google or Apple account linked to it. We answer within 30 days. You can also complain to a data protection authority; in Spain, the Agencia Española de Protección de Datos (www.aepd.es).

Never send passwords, sign-in codes or tokens, payment details, identity documents, or other unnecessary sensitive data.

Animal Gacha is a general-audience product intended for people aged 13 and older. It is not directed at children under 13 and does not collect age. If you believe a child under 13 has given us personal information, for example by linking a Google account or contacting support, contact Basalt Works so it can be reviewed and deleted where required.

Material changes will be published with a revised content version and last-updated date, and announced in the app when they affect how your account data is used.

Privacy, data-rights, and deletion questions: contact@basaltworks.com. Account deletion instructions: https://animalgacha.com/delete-account. Product support: support@basaltworks.com or https://www.basaltworks.com/animal-gacha/support#support-form. Publisher information: https://www.basaltworks.com/.