Privacy Policy for Rascal Cat

Last updated: April 10, 2026

This Privacy Policy explains how Rascal Cat ("Rascal Cat," "we," "us," or "our") handles information when you use the app.

1. Scope

This Privacy Policy applies to the Rascal Cat mobile app and related gameplay, account, cloud save, leaderboard, advertising, analytics, diagnostics, and in-app purchase features made available through the app.

2. Information We Process

Depending on how you use the app, we and our service providers may process:

• Local gameplay data stored on your device, such as progress, stars, catnip balances, unlocked items, settings, achievement state, and daily reward status.
• Account and sign-in data if you choose guest, Google, or Apple sign-in, including persistent identifiers and provider-linked account identifiers made available through Firebase Authentication and the sign-in provider.
• Optional profile data if you use account-linked features, such as your display name and leaderboard entries.
• Cloud save data if you use account-linked cloud features, including your gameplay save state and backup timestamps.
• Purchase and entitlement data needed to offer, validate, restore, sync, or honor in-app purchases across supported platforms.
• Advertising-related data processed by Google AdMob and its partners, which may include device identifiers, approximate location, app interactions, diagnostics, and ad performance data.
• Analytics and diagnostics data processed by Firebase Analytics and Firebase Crashlytics, which may include app usage events, device and app metadata, crash traces, and technical performance information.
• App integrity and anti-abuse signals processed through Firebase App Check or platform attestation services when enabled.
• Consent and preference signals collected through the Google User Messaging Platform (UMP) where applicable, such as your GDPR consent choice for ad personalization.

3. How We Use Information

We use information to:

• Operate the app and save your progress.
• Enable sign-in, account recovery, leaderboards, and cloud save.
• Deliver and measure ads, subject to your consent preferences where required by law.
• Process, validate, restore, and protect in-app purchase entitlements.
• Analyze app usage, improve features, and troubleshoot crashes or abuse.
• Maintain security, detect fraud or misuse, and enforce our terms.

3.5 Legal Bases (EEA/UK)

For users in the EEA and UK, we rely on the following legal bases under the GDPR / UK GDPR:

• Contract (Art. 6(1)(b)): operating the app, saving your progress, enabling sign-in, cloud save, leaderboards, and in-app purchase entitlements.
• Legitimate interests (Art. 6(1)(f)): app security, fraud prevention, anti-abuse, crash diagnostics, and aggregated analytics, balanced against your rights and freedoms.
• Consent (Art. 6(1)(a)): personalized advertising where the Google User Messaging Platform consent form is presented, and any other processing that requires consent under local law. You can withdraw consent at any time through the consent form or device-level settings.
• Legal obligations (Art. 6(1)(c)): compliance with tax, accounting, and regulatory requirements related to purchases.

4. Local Storage

Rascal Cat stores gameplay progress and settings locally on your device using on-device storage. If you uninstall the app, clear app storage, reset the device, or move to a different device without restoring account-linked data, local data may be lost.

5. Account, Cloud Save, and Leaderboards

Rascal Cat can be used in guest mode or with supported sign-in providers. If you use account-linked features, we may store your account identifier, display name, leaderboard submissions, and cloud save data in Firebase services so those features function across sessions or devices.

Guest mode is still a sign-in state for app functionality, but it is intended to be anonymous from the app's perspective. Even in guest mode, platform and service providers may still process device or service identifiers needed to operate the app.

6. Ads and Consent

The app uses Google AdMob for advertising. AdMob and its partners may collect or receive data from the app and your device for ad delivery, fraud prevention, measurement, and frequency control, subject to their own policies and your device or regional consent settings where applicable.

In regions where consent is required by law (such as the EEA and UK under GDPR), the app uses the Google User Messaging Platform (UMP) to present a consent form before ads are loaded. You may choose to consent to or decline personalized advertising. If you decline, ads may still be shown but will be non-personalized.

We configure all ad requests with child-directed treatment tags and a general-audience content rating to help ensure ads served are appropriate for all ages.

7. In-App Purchases

In-app purchases are offered through the applicable app store platform. Apple and Google handle payment processing, taxes, billing, and refunds under their own terms and privacy practices. We may also use RevenueCat to help manage product availability, purchase validation, entitlement syncing, and restoration across platforms. We receive purchase status and entitlement information needed to unlock or restore content in the app.

8. Analytics and Diagnostics

We use Firebase Analytics to understand feature usage and app performance trends, and Firebase Crashlytics to detect, diagnose, and fix app crashes and stability issues.

9. Service Providers and Third Parties

The app currently integrates third-party services including the list below. This list is current as of the "Last updated" date at the top of this policy. We may add or remove providers over time; the updated list will appear here.

• Firebase Authentication
• Firebase App Check
• Cloud Firestore
• Cloud Functions for Firebase
• Firebase Analytics
• Firebase Crashlytics
• Google AdMob (including User Messaging Platform)
• RevenueCat
• Apple App Store / StoreKit and Google Play Billing
• Google Sign-In and Sign in with Apple when you choose those login methods

These providers may process information under their own terms and privacy policies.

10. Data Sharing

We do not sell personal information in exchange for money. We may share information with service providers and platform partners only as needed to operate the app, provide advertising, support purchases, maintain analytics and diagnostics, comply with law, protect users, or enforce our rights.

11. Data Retention

We retain information only as long as needed for the purposes described above:

• Local gameplay data: stored on your device until you remove it, clear app storage, or uninstall the app.
• Account-linked cloud save, display name, and leaderboard entries: retained until you delete your account, or until 12 consecutive months of account inactivity, whichever comes first.
• Consent and preference records (legal acceptance timestamps and document versions, CCPA opt-out preference): retained for 24 months from the most recent update, for audit and compliance purposes. Ad-consent state is managed by Google's User Messaging Platform (UMP) SDK on your device and is not independently stored on our servers.
• Firebase Analytics: retained per the Firebase Analytics default retention window (currently 14 months from collection).
• Firebase Crashlytics: retained per the Firebase Crashlytics default window (currently 90 days from the crash event).
• Advertising data: retained by Google AdMob and its partners under their own policies; we do not independently store raw advertising event data beyond what Firebase Analytics retains.
• Purchase and entitlement records: processed and retained by Apple App Store, Google Play Billing, and RevenueCat under their own terms. We do not independently retain payment card data. Platform providers may retain purchase records for multi-year periods as required by tax and financial regulations.

When a retention window expires or you request deletion under §13, we take reasonable steps to remove the data from systems we control. Some records may be retained longer where required by law, to resolve disputes, to prevent abuse or fraud, or to enforce our terms.

12. Your Choices

Depending on your platform and region, you may be able to:

• Use the app in guest mode instead of a social sign-in method.
• Decline to use account-linked cloud save or leaderboard functionality by avoiding those features or not signing in with a linked provider.
• Manage your ad consent preferences through the consent form presented in supported regions, or through device-level advertising and tracking settings.
• Choose not to complete optional account-linked or purchase-linked flows, though some features may then be unavailable.
• Stop using the app, uninstall it, or clear local storage on your device.

13. Account Deletion Requests

If you have used an account-linked sign-in method and want your account-linked Rascal Cat data deleted, you may request deletion by:

• Using the Delete Account & Cloud Data action in Settings (available to users signed in with Google or Apple); or
• Contacting us at [email protected] from the email address associated with your request, or with enough information for us to identify the account.

Account deletion requests may remove account-linked cloud save data, leaderboard entries, and associated profile information that we control. Purchase records, billing records, and certain data retained by platform providers or service providers may be retained as required for legal, security, fraud-prevention, accounting, or operational reasons.

14. Children's Privacy

Rascal Cat is designed to be suitable for a general audience. We configure advertising with child-directed treatment settings and a general-audience content rating to help ensure appropriate ad content.

We do not knowingly collect personal information directly from children under 13 (or the applicable age in your jurisdiction). If you believe a child has provided personal information through the app, contact us so we can review the issue.

15. International Transfers

Your information may be processed in countries other than your own by us or our service providers, subject to applicable law and provider safeguards.

16. Changes to This Policy

We may update this Privacy Policy from time to time. If we do, we will update the "Last updated" date above. Your continued use of the app after an update becomes effective means the updated policy applies to your use, to the extent permitted by law.

17. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act:

• Right to know: you can ask what categories of personal information we have collected about you in the last 12 months, the categories of sources, the business purposes, and the categories of third parties with whom we share that information.
• Right to delete: you can ask us to delete personal information we have collected from you, subject to legal exceptions.
• Right to correct: you can ask us to correct inaccurate personal information we maintain about you.
• Right to opt out of sale or sharing: you can opt out of the "sharing" of personal information for cross-context behavioral advertising. Rascal Cat does not sell personal information for money. However, our use of Google AdMob for personalized advertising may be considered "sharing" under the CPRA. You can opt out at any time using the Do Not Sell or Share My Personal Information toggle in the in-app Settings screen. When this toggle is on, we instruct AdMob to serve only non-personalized ads to your device.
• Right to limit use of sensitive personal information: we do not use sensitive personal information for purposes that would require a separate limit right under the CPRA.
• Right to non-discrimination: we will not deny you service, charge you a different price, or provide a lesser quality of service because you exercised your privacy rights.

Categories of personal information we collect: identifiers (device identifiers, account identifiers when you sign in), internet or electronic network activity (app interactions, diagnostics), commercial information (in-app purchase records), and inferences drawn from usage for feature improvement.

How to exercise your rights: use the Do Not Sell or Share toggle in Settings, use the in-app Delete Account & Cloud Data action if you have a linked account, or contact us at [email protected] from the email associated with your request.

Authorized agents: you may designate an authorized agent to make a request on your behalf. We may require the agent to provide proof of authorization and may require you to verify your identity directly.

Shine the Light: Rascal Cat does not disclose personal information to third parties for their direct marketing purposes, and has not done so in the preceding 12 months.

18. Contact

For privacy questions about Rascal Cat, contact: [email protected].