Privacy Policy

The short version

• We ask for only what the game needs: a way to sign you in, and your game save.
• We don't sell your information, and we don't use it to build a profile of you.
• We don't use tracking tools. Our host, Cloudflare, counts visits and measures page speed for us, without cookies and without identifying you.
• Ads only appear when you choose to watch one for a hint. Google shows them, and Google's own policy covers what it collects.
• You can delete your account and everything tied to it at any time, in the game or on the web.

Who we are

Biscuit's Bowls is a cat café puzzle game made by JUPU Studio. In this policy, "we" and "us" mean JUPU Studio. It covers the game on Android, on iPhone and on the web at biscuitsbowls.com.

Questions about your privacy go to support@biscuitsbowls.com.

What we collect

When you sign in

• With Google: your Google account ID and the email address on that account. We don't receive your Google password, contacts or anything else in your Google account.
• With email: your email address. We send it a 6-digit code that works once and expires after 10 minutes.

When you play

• Your game save: puzzle progress, stamps, your café, your cats' collars and decorations, and the items you've unlocked or bought.
• A sign-in session, so you stay signed in. It lasts up to 90 days unless you sign out. We store only a scrambled form of it, never the session itself.
• Settings and a copy of your progress are also kept on your own device so the game loads quickly.

When you buy something

Payments are handled by Google Play (or the App Store on iPhone). We never see your card or payment details. We receive the store's order number, which item you bought and when, so we can give you the item and check that the purchase is real.

When you watch an ad for a hint

Rewarded ads are shown by Google AdMob. Google may collect your device's advertising ID, device information, your approximate location from your IP address and how you interact with the ad. You can reset or delete your advertising ID in your phone's settings. See how Google uses information from apps that use its services. We receive a confirmation that you watched the ad, so the game can give you the hint.

To keep the game safe

To stop abuse of sign-in codes, we count requests from each network address for a short time. The address is stored only in a scrambled form that can't be turned back into the address.

How we use it

• To sign you in and keep your save on every device you use.
• To give you the items you buy or earn, and to stop the same purchase or ad reward being used twice.
• To send you sign-in codes. We don't send marketing email.
• To fix problems and keep the game running.

Who else handles it

We use a few services to run the game. They process information only to provide their service to us.

• Cloudflare hosts the game and stores your account and save.
• Google provides Google sign-in, Google Play purchases and AdMob ads.
• Resend delivers sign-in code emails.
• Apple handles App Store purchases if you play on iPhone.

We don't sell or rent your information to anyone. We would share it only if the law requires us to.

Deleting your account

You can delete your account at any time:

• In the game: open Settings, then Delete account.
• On the web: go to play.biscuitsbowls.com/delete-account, sign in and delete.
• By email: if you can't sign in, write to support@biscuitsbowls.com from the address you use in the game.

What is deleted, right away

Your account and the email address or Google sign-in linked to it, your progress, your stamps, café and collars, packs bought with real money (they can't be moved to a new account), and your sign-in on every device.

What we keep

• Purchase records, if you bought anything: the store's order number, which item and the date. Your account is replaced with a random marker, so the record no longer points to you. We keep these to stop one order being used twice, to handle refunds and chargebacks, and for sales records the law requires.
• Backups. Our database backups can hold a copy of your data for up to 30 days, then it is gone from them too.

How long we keep things

• Your account and save: until you delete your account.
• Sign-in codes: until they're used or expire, 10 minutes at most.
• Ad reward confirmations: up to 30 days.
• Purchase records: as described above.

Your rights

You can ask us for a copy of your information, to correct it or to delete it. Write to support@biscuitsbowls.com, and we'll answer within 30 days. Depending on where you live, you may have more rights under laws like the GDPR or California's privacy laws, and you can complain to your local data protection authority.

Children

Biscuit's Bowls is not directed at children under 13, and we don't knowingly collect information from them. If you believe a child under 13 has made an account, write to us and we'll delete it.

Security and where data is stored

Your information is sent over encrypted connections and stored with Cloudflare, which may process it in the United States and other countries. Sign-in codes and sessions are stored only in scrambled form.

Changes

If we change this policy, we'll update the date at the top. If a change affects how we use your information in an important way, we'll tell you in the game before it takes effect.