Privacy Policy

01Data controller

The controller of your personal data is Damian Kowalczyk WebSolutions (Polish tax ID 9462735077), the app’s developer trading as WebSolutionsLab, based in Poland (“we”, “us”).

For anything related to personal data, email contact@websolutionslab.dev. We have not appointed a data protection officer, as we are not required to.

02What this policy covers

This policy covers the game on iPhone downloaded from the App Store and on Android downloaded from Google Play (package ID dev.websolutionslab.catastrophe in both stores), in every language version, including where the game has a different name (e.g. “Psotka: Kocie Sortowanie”). Where the two versions behave differently, we say so.

It does not cover the websolutionslab.dev website or processing that Apple and Google carry out on their own account. They have their own privacy policies, linked below.

03What we do not collect

• You never have to create an account. We do not ask for your name, email address or phone number.
• The game does not use GPS location, contacts, photos, the camera or the microphone.
• We do not use analytics tools. We do not track how, when or how often you play.
• We do not send notifications from a server. Reminders from your pet are scheduled by the phone itself.
• We do not sell personal data.

04Data stored on your device

So that the game remembers your progress and choices, it stores in the app’s storage on your device:

• progress: completed levels and stars earned,
• wallet: fish (the in-game currency), owned and worn wardrobe items and the selected character,
• tutorials already seen,
• settings: language, sounds, music, vibration and notifications,
• a random device ID that lets the game merge saves from several phones correctly without doubling your fish.

If you turn on notifications, the phone itself schedules reminders from your pet 1, 3 and 7 days after you leave the game. They do not pass through any server. You can turn them off in the game’s Settings or in your phone’s settings.

Storing this on your device is necessary for the game to work, so it does not require separate consent. It is deleted when you delete the app.

05Saving progress in the cloud (Google Firebase)

So that your progress and purchased items are not lost, the game keeps a copy of them in Google Firebase services (Firebase Authentication and Cloud Firestore), provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) and Google LLC (USA). Google acts on our behalf as a processor.

On first launch, Firebase assigns the game a random, anonymous player ID. It is not linked to your name, Apple ID or Google account. Under this ID we store in Cloud Firestore (servers in Warsaw, Poland) a copy of the game data listed above: progress, wallet, tutorials seen and the time of the last change. Settings are not sent. Firebase technically also sees the IP address of the connection and the sign-in date.

“Save progress” in Settings links this ID to your Apple or Google account so you can get your progress back on a new phone. You use it only if you want to. Firebase then receives the account ID and email address from Apple or Google (with Sign in with Apple you can hide your email by choosing to hide it), and from Google also your name and profile photo. We use this data only for signing in and never send you messages.

Legal basis: performance of a contract, i.e. providing the game, including keeping your progress and purchased items (Art. 6(1)(b) GDPR). Details: Privacy and Security in Firebase.

06Advertising (Google AdMob)

The game is free and shows ads served by Google AdMob: a full-screen ad every few completed levels, and a rewarded video that plays only when you ask for it, e.g. for fish, extra time, a hint or a shelf shuffle. The service is provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) and Google LLC (USA). The game asks Google only for ads suitable for all ages with parental guidance.

Before the first ad is requested, users in the European Economic Area, the UK and Switzerland see Google’s consent form. On iPhone, iOS then asks whether you allow the app to track you (App Tracking Transparency). Only after these steps does the app connect to the ad network.

While showing ads, Google may process:

• your IP address, from which it may estimate your approximate location (country, region),
• your device’s advertising identifier: on iPhone (IDFA) only if you allow tracking in the iOS prompt, otherwise only identifiers limited to the app or its developer; on Android, the Google advertising ID (AAID) unless you delete it in your phone’s settings,
• device information: model, OS version, language,
• ad data: which ads were shown, tapped or watched to the end,
• technical data about the ad module, such as load times and error reports.

Purposes: showing ads and measuring their performance, preventing ad fraud and abuse, and, if you consent, tailoring ads to your interests. On iPhone, install campaign performance may be measured through SKAdNetwork, an Apple mechanism that does not reveal your device identifier.

Legal basis: in the EEA, the UK and Switzerland, your consent (Art. 6(1)(a) GDPR) given in Google’s form. If you do not consent, ads will not be personalised or will not be shown at all, and the game works just the same. Elsewhere, our legitimate interest (Art. 6(1)(f) GDPR) in funding the free game.

For ad personalisation and its own purposes, Google acts as a separate controller. Details: Google Privacy Policy and How Google uses information from sites or apps that use our services.

Third-party ad networks working with Google (ad partners) may also compete for the ad slot in Google’s auction. They then receive the same kinds of data from Google as above, to the extent your consent allows. The current list of partners is available in the consent form and on the Google ad technology providers page.

How to change your choice:

• in the game: Settings → “Ad privacy” (shown in countries where the consent form is required),
• in iOS: Settings → Privacy & Security → Tracking,
• in Android: Settings → Privacy (or Google) → Ads → Delete advertising ID (names may vary by phone maker).

Withdrawing consent does not affect the lawfulness of processing carried out before you withdrew it.

07In-game purchases (Apple, Google Play and RevenueCat)

You can buy characters, wardrobe items, bundles and fish in the App Store (iPhone) or Google Play (Android). Payment is handled entirely by Apple or Google as a separate controller. We never receive your name, email address, Apple ID, Google account or card details. See Apple – Privacy and the Google Privacy Policy.

To load prices, confirm purchases and restore them on another device, we use RevenueCat (RevenueCat, Inc., USA). RevenueCat acts on our behalf as a processor. The app connects to it at launch, even without any purchase. RevenueCat receives:

• a random, anonymous ID assigned to the app on first launch (not linked to your identity, Apple ID or Google account),
• the purchase confirmation from the store (App Store receipt or Google Play purchase token) and in-app purchase history,
• device type, OS version, store country, date the app was last used and, technically, the connection’s IP address.

Legal basis: performance of a contract, i.e. delivering and restoring purchased items (Art. 6(1)(b) GDPR). Details: RevenueCat Privacy Policy.

08Recipients and transfers outside the EEA

Data may be received only by the parties described above: Google (Firebase, and AdMob ads together with its ad partners), RevenueCat (purchase handling), and Apple and Google (payments, sign-in and distribution in the App Store and Google Play). We will disclose data to anyone else only when the law requires it, e.g. at the request of a competent authority.

Some data is transferred to the USA:

• Google LLC participates in the EU-US Data Privacy Framework, under which the European Commission has recognised an adequate level of protection; this covers, among others, Firebase Authentication, while the game save in Cloud Firestore is stored on servers in Warsaw,
• RevenueCat stores data on Amazon Web Services in the USA. The transfer is based on a data processing agreement containing the European Commission’s standard contractual clauses,
• Apple uses its own mechanisms described in its privacy policy.

09How long we keep data

• Data on your device: until you delete the app.
• Firebase: for as long as you use the game; at your request we delete the save sooner (see “Your rights”).
• Google (ads): according to Google’s data retention policy.
• RevenueCat: for as long as you use the app; at your request we delete it sooner.
• Email correspondence: for as long as needed to handle your request, then until any claims become time-barred.

10Your rights

Under the GDPR you have the right to:

• access your data and get a copy,
• rectify your data,
• erase your data,
• restrict processing,
• data portability,
• object to processing based on legitimate interest,
• withdraw consent at any time (see the advertising section for how).

To exercise these rights, email contact@websolutionslab.dev. We will reply without undue delay and within one month at the latest.

We do not know who you are, so a request alone may not be enough for us to find your data (Art. 11 GDPR). If your progress is linked to an Apple or Google account, give us that account’s email address and we will find and delete your save in Firebase. If you have made purchases, give us the order number from Apple’s or Google Play’s confirmation email and we will delete the related data in RevenueCat. You can delete data stored on your device by deleting the app. You can block the advertising identifier in iOS settings or delete it in Android settings.

You also have the right to lodge a complaint with a supervisory authority. In Poland this is the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl). You can also complain to the authority in the country where you live or work.

11Children

The game is meant for everyone and is not specifically directed at children. We do not knowingly collect children’s data, and we limit ads to content suitable for all ages with parental guidance. In-game purchases require confirmation in the App Store or Google Play, which a parent can block or require approval for.

If a child has used the game and you believe their data may have reached one of the services described, email contact@websolutionslab.dev. We will help delete it. Parents can also turn off ad tracking and purchases in Screen Time (iPhone) or manage the child’s phone with Google Family Link (Android).

12Security and automated decisions

Connections to Google, RevenueCat and Apple are encrypted (HTTPS). Your game save in Cloud Firestore is available only to the player ID it belongs to, signed in from the game: the database rules do not let anyone else read or change it.

We do not make decisions about you based solely on automated processing, including profiling, that produce legal effects. Google’s ad selection is automated but has no such effects.

13Information for US residents

We do not sell personal data for money. However, sharing data with Google to show personalised ads may count as a “sale” or “sharing” of data under some state laws (e.g. California). You can opt out: on iPhone by declining tracking in the iOS prompt or turning it off in Settings → Privacy & Security → Tracking; on Android by deleting the advertising ID in your phone’s settings.

14Changes to this policy

We update this policy when the way the game works or the law changes. The current version is always at this address, and the date of the last change is shown at the top of the page. We will also mention significant changes in the update notes in the App Store and Google Play.

Questions about this policy? Email contact@websolutionslab.dev or visit the support page.