Privacy Policy

Point & Purr game and website · last updated 2026-10-05

The short version. You can play Point & Purr without signing in and without giving us your name, email or location. Your progress is saved on your device; for players 13 and over, a backup copy is also kept on our server under a random, anonymous account. Gameplay statistics are sent only if you allow them, and ads are personalised only if you agree. Players under 13 get no ads, no leaderboards and no online backup: their progress stays on their device, and nothing about them is personalised or tracked.

Who we are

Point & Purr (the mobile game and this website) is made and operated by Oleksii Maksymov, FOP (sole proprietor), Odesa, Ukraine ("we", "us"). We are the data controller. Contact: hello@pointandpurr.app.

What we collect in the game

Data	Why	Legal basis
Game progress — levels, stars, treats, antics, missions, hats, your flat, your cat's name and coat, and your settings. Saved on your device. For players 13 and over, a copy is kept on our server under a random, anonymous account (no email, no password, no device ID), created automatically after the age and consent questions. Never in child mode.	To back up your progress and let you continue on another device.	Contract (providing the game).
Your age answer — the game asks for a birth year once. The year itself is never stored or sent; only the result (child-safe settings on or off) is kept, on your device and in your progress backup.	To decide whether child-safe settings apply.	Legal obligation / legitimate interest in protecting children.
Leaderboard name — two words picked at random from a fixed list, such as "Sleepy Whiskers". Nobody can type a name, so names never contain personal or inappropriate words.	Shown next to your scores on leaderboards.	Contract.
Scores in the Endless Tower, Daily Puzzle and Mischief Rush, with the run's moves (taps and the puzzle's seed). Not sent in child mode.	Leaderboards, and checking that scores are genuine.	Contract / legitimate interest in fair play.
Link codes — when you choose Play on another device, a 6-character code that is valid for 10 minutes, works once and is stored only as a hash.	To connect your devices to the same progress.	Contract.
Gameplay statistics — events such as "level started / finished / left", time and number of moves, hints used, laser sessions, missions and antics, treat bowl and shop use, mode scores, ad and purchase results, settings changed, screens opened, session length, platform. Linked to a second random, anonymous ID used only for statistics.	To find levels that are too hard or unclear, fix problems and understand what players enjoy.	Consent where the law requires it (EEA, UK, Switzerland); legitimate interest elsewhere. Only if you allow statistics; switch them off any time in Settings → Privacy → Share anonymous statistics.
Technical events — that the app was opened (session number) and a performance sample about once a minute of play (frame rate, simulation time, level, platform).	To keep the game running smoothly on all devices.	Legitimate interest. Sent without any identifier when you haven't allowed statistics, so they can't be linked to you.
Crash reports — error message, technical stack trace, app version, platform.	To fix bugs.	Legitimate interest. Linked to your statistics ID only if you allow statistics; otherwise sent without any identifier.
Problem reports — only when you tap Pause → Report a problem: the level, your taps in it, the positions and states of the things in the level, platform, system version, screen size and orientation, language, app version.	To find and fix the level or bug you got stuck on.	Legitimate interest. Sent without any identifier and without your IP address; deleted after 90 days.
Purchases — product, store, transaction ID and a random install ID, which the game shares with RevenueCat when it starts. We never see your payment details.	To deliver what you bought, restore purchases and handle refunds.	Contract.

We do not collect your name, email, phone number, contacts, photos, microphone or location, and there is no chat or free text. (On iOS the system lists a microphone description because of our sound library; the game never uses the microphone.) Daily reminders are optional and scheduled on your device; no push token is sent. To load its settings, the game asks our server with your platform and app version, which are not stored. Our server uses IP addresses only for a moment to limit abuse; they are never stored or logged.

Advertising

The game shows optional rewarded videos and, later in the game, occasional ads between levels through Google AdMob. In the EEA, UK and Switzerland we first ask for consent with Google's consent form; on iOS we also ask for App Tracking Transparency permission. If you agree, ads may be personalised using your device's advertising identifier. If you decline, you receive non-personalised ads. Google may still process limited data (such as IP address and device information) to deliver and measure ads and prevent fraud — see how Google uses information from sites or apps that use its services. You can change your choice in Settings → Privacy → Ad privacy options. Buying "Remove Ads" turns off the ads between levels.

Children

Players who say they are under 13, or prefer not to say, get child mode: no ads at all (the ad SDK isn't even started), no tracking prompt, nothing personalised, statistics limited to the two technical events above and never linked to an ID, no leaderboards, no online backup or device linking (progress stays on the device), no reminders, and a grown-up check before purchases. We do not knowingly collect personal information from children beyond what is described here. Parents can contact us at any time to delete their child's data.

This website

We count visits to this website with our own cookieless statistics: page viewed, which store button was used, approximate screen width, browser language, the language the site was shown in, and the referring site or campaign (UTM) tag. These statistics use no cookies, no device storage and no identifiers, so visits can't be linked to you. We also use Google Analytics to understand which pages help people find the game. Without your consent it runs in Google's consent mode: no cookies are set and Google only receives anonymous, cookieless signals (page, approximate region from the IP, device type). Only if you allow it in the cookie banner may Google Analytics set its cookies; ad features are never enabled. You can change this any time via "Cookie & analytics choices" at the bottom of every page.

Strictly necessary storage only: if you pick a language with the language switcher, we remember it in a small functional cookie (pp_lang, kept for one year) that contains nothing but the language code and is never used for statistics; and if a cookie banner is shown, your answer to it is kept in your browser's local storage so we don't ask again. You can delete both at any time in your browser settings.

Who we share data with

Google (AdMob, User Messaging Platform) — ads and the consent form. Google acts as an independent controller for ad personalisation.
RevenueCat, Inc. (USA) — processes purchase receipts on our behalf.
Apple / Google — app stores, payments and app distribution, under their own privacy policies.
Expo / 650 Industries, Inc. (USA, EAS Update) — delivers small game updates; the game sends its version, platform and a random update ID.
Hetzner Online GmbH (Germany) — hosts our server, this website and the encrypted backups.
Cloudflare, Inc. — our domain name service, and forwarding of emails you send to hello@pointandpurr.app to our mailbox (Google Gmail).

We never sell your data. Some providers are outside your country (e.g. in the USA); transfers are protected by the providers' standard contractual clauses or equivalent safeguards.

How long we keep data

Statistics events, technical events and crash reports: 90 days. Scores on daily and weekly leaderboards: 90 days. Your progress backup, leaderboard name and all-time Endless Tower score: until you delete them, or after 24 months without the game going online. Link codes: 10 minutes. Purchase notifications: until you delete your data, or 24 months after the last one. Our encrypted backups are replaced on a rolling basis, so deleted data also disappears from them within 30 days. Server logs contain no IP addresses and are rotated within days.

Deleting your data

Settings → Privacy → Delete my data works immediately: it deletes your progress backup, scores, leaderboard name and link codes (for every device you linked), your statistics with their crash reports, and resets the progress on the device. If you had allowed statistics, it also deletes the purchase notifications we received for your install and asks RevenueCat to delete its customer record; otherwise, email us and we do that within 30 days. Apple and Google keep their own purchase records. See Delete your data.

Your rights

You can access, correct, export or delete your data, object to processing, withdraw consent at any time (without affecting earlier processing) and complain to a data-protection authority — in Ukraine the Ukrainian Parliament Commissioner for Human Rights, in the EU/EEA your local supervisory authority. Most of this works right in the game (Settings → Privacy); for anything else email hello@pointandpurr.app. We answer within 30 days. Because we don't know who you are, we may ask you to send the request from within the game or to share a link code so we can find your data.

US residents

We do not sell personal information. The only "sharing" for targeted advertising under US state laws is Google's ad personalisation, which happens only if you allow it; you can opt out any time with the ATT setting on iOS, Settings → Privacy → Ad privacy options, or your device's advertising settings. You have the right to know, correct and delete your data, and we never treat you differently for using these rights.

Security

Data is encrypted in transit (HTTPS). Account tokens, install IDs and link codes are stored on our server only as hashes, backups are encrypted, and access to the server is restricted. Our server is located in the EU (Germany).

Changes

If we change this policy we'll update the date above and, for important changes, tell you in the game.