Privacy Policy for Rascal Cat

Last updated: April 28, 2026

This Privacy Policy explains how Rascal Cat ("Rascal Cat," "we," "us," or "our") handles information when you use the app.

1. Scope

This Privacy Policy applies to the Rascal Cat mobile app and related gameplay, account, cloud save, leaderboard, advertising, analytics, diagnostics, and in-app purchase features made available through the app.

2. Information We Process

Depending on how you use the app, we and our service providers may process:

Local gameplay data stored on your device, such as progress, stars, catnip balances, unlocked items, settings, achievement state, and daily reward status.
Account and sign-in data if you choose guest, Google, or Apple sign-in, including persistent identifiers and provider-linked account identifiers made available through Firebase Authentication and the sign-in provider.
Optional profile data if you use account-linked features, such as your display name and leaderboard entries.
Cloud save data if you use account-linked cloud features, including your gameplay save state and backup timestamps.
Purchase and entitlement data needed to offer, validate, restore, sync, or honor in-app purchases across supported platforms.
Advertising-related data processed by Google AdMob and its partners, which may include device identifiers, approximate location, app interactions, diagnostics, and ad performance data.
Analytics and diagnostics data processed by Firebase Analytics and Firebase Crashlytics, which may include app usage events, device and app metadata, crash traces, and technical performance information.
App integrity and anti-abuse signals processed through Firebase App Check or platform attestation services when enabled.
Consent and preference signals collected through the Google User Messaging Platform (UMP) where applicable, such as your GDPR consent choice for ad personalization.

3. How We Use Information

We use information to:

Operate the app and save your progress.
Enable sign-in, account recovery, leaderboards, and cloud save.
Deliver and measure ads, subject to your consent preferences where required by law.
Process, validate, restore, and protect in-app purchase entitlements.
Analyze app usage, improve features, and troubleshoot crashes or abuse.
Maintain security, detect fraud or misuse, and enforce our terms.

3.5 Legal Bases (EEA/UK)

For users in the EEA and UK, we rely on the following legal bases under the GDPR / UK GDPR:

Contract (Art. 6(1)(b)): operating the app, saving your progress, enabling sign-in, cloud save, leaderboards, and in-app purchase entitlements.
Legitimate interests (Art. 6(1)(f)): app security, fraud prevention, anti-abuse, crash diagnostics, and aggregated analytics - balanced against your rights and freedoms.
Consent (Art. 6(1)(a)): ad-related disclosures and choices required by Google's User Messaging Platform and applicable EEA/UK law, and any other processing that requires consent under local law. Behavioral and personalized advertising are not enabled in this app, so consent is not used as a basis for personalized ad targeting. You can revisit your choices at any time through the consent form or device-level settings.
Legal obligations (Art. 6(1)(c)): compliance with tax, accounting, and regulatory requirements related to purchases.

4. Local Storage

Rascal Cat stores gameplay progress and settings locally on your device using on-device storage. If you uninstall the app, clear app storage, reset the device, or move to a different device without restoring account-linked data, local data may be lost.

5. Account, Cloud Save, and Leaderboards

Rascal Cat can be used in guest mode or with supported sign-in providers. In both cases - guest and linked - we may store your Firebase account identifier, your display name (including auto-generated names such as "Guest123456" when you have not chosen one), a pseudonymous leaderboard alias derived from your account identifier, leaderboard entries, and cloud save data in Firebase services so those features function across sessions or devices.

Completing a campaign level or daily challenge submits your score to the corresponding leaderboard automatically; there is no separate opt-in for leaderboard submission, and this applies to guest accounts as well as linked accounts. If you do not want a leaderboard entry, do not complete those modes, or use the Delete Account & Cloud Data action in Settings to remove existing entries.

Guest mode is still a sign-in state for app functionality, but it is intended to be anonymous from the app's perspective - your guest account is not linked to a real-world identity unless you later sign in with Google or Apple. Even in guest mode, platform and service providers may still process device or service identifiers needed to operate the app.

6. Ads and Consent

The app uses Google AdMob for advertising. Because Rascal Cat is directed to children, we configure every ad request with child-directed treatment (TFCD=yes) and the "treat as under age of consent" flag (TFUA=yes), and we restrict ad content to a G-rated maximum. Only non-personalized, contextual ads are served - we do not enable personalized or behavioral advertising, and we do not share personal information for cross-context behavioral advertising.

In regions where consent is required by law (such as the EEA and UK under GDPR), the app still presents the Google User Messaging Platform (UMP) consent form before ads are loaded, so you can exercise your choices. Because personalized advertising is never enabled for this app regardless of your selection, the ad content you see does not change based on your UMP response.

AdMob and its partners may still receive data needed to deliver non-personalized ads, prevent fraud, measure ad performance, and enforce frequency capping, subject to their own policies and applicable child-directed-audience restrictions.

7. In-App Purchases

In-app purchases are offered through the applicable app store platform. Apple and Google handle payment processing, taxes, billing, and refunds under their own terms and privacy practices. We may also use RevenueCat to help manage product availability, purchase validation, entitlement syncing, and restoration across platforms. We receive purchase status and entitlement information needed to unlock or restore content in the app.

8. Analytics and Diagnostics

We use Firebase Analytics to understand feature usage and app performance trends, and Firebase Crashlytics to detect, diagnose, and fix app crashes and stability issues.

9. Service Providers and Third Parties

The app currently integrates third-party services including the list below. This list is current as of the "Last updated" date at the top of this policy. We may add or remove providers over time; the updated list will appear here.

Firebase Authentication
Firebase App Check
Cloud Firestore
Cloud Functions for Firebase
Firebase Analytics
Firebase Crashlytics
Google AdMob (including User Messaging Platform)
RevenueCat
Apple App Store / StoreKit and Google Play Billing
Google Sign-In and Sign in with Apple when you choose those login methods

These providers may process information under their own terms and privacy policies.

10. Data Sharing

We do not sell personal information in exchange for money. We may share information with service providers and platform partners only as needed to operate the app, provide advertising, support purchases, maintain analytics and diagnostics, comply with law, protect users, or enforce our rights.

11. Data Retention

We retain information only as long as needed for the purposes described above:

Local gameplay data: stored on your device until you remove it, clear app storage, or uninstall the app.
Account-linked cloud save, display name, and leaderboard entries: retained until you delete your account, or until 12 consecutive months of account inactivity, whichever comes first.
Consent and preference records (legal acceptance timestamps and document versions, CCPA opt-out preference): stored on the account-linked user document and subject to the same retention window as the rest of that document - retained until you delete your account, or until 12 consecutive months of account inactivity, whichever comes first. Ad-consent state is managed by Google's User Messaging Platform (UMP) SDK on your device and is not independently stored on our servers.
Firebase Analytics: retained per the Firebase Analytics default retention window (currently 14 months from collection).
Firebase Crashlytics: retained per the Firebase Crashlytics default window (currently 90 days from the crash event).
Advertising data: retained by Google AdMob and its partners under their own policies; we do not independently store raw advertising event data beyond what Firebase Analytics retains.
Purchase and entitlement records: processed and retained by Apple App Store, Google Play Billing, and RevenueCat under their own terms. We do not independently retain payment card data. Platform providers may retain purchase records for multi-year periods as required by tax and financial regulations.

When a retention window expires or you request deletion under §13, we take reasonable steps to remove the data from systems we control. Some records may be retained longer where required by law, to resolve disputes, to prevent abuse or fraud, or to enforce our terms.

12. Your Choices

Depending on your platform and region, you may be able to:

Use the app in guest mode instead of a social sign-in method, keeping in mind that guest accounts also create cloud saves and leaderboard entries on the same terms as linked accounts.
Avoid leaderboard submission by not completing campaign levels or daily challenges. Existing leaderboard entries (guest or linked) can be removed using the Delete Account & Cloud Data action in Settings.
Manage your ad consent preferences through the consent form presented in supported regions, or through device-level advertising and tracking settings.
Choose not to complete optional account-linked or purchase-linked flows, though some features may then be unavailable.
Stop using the app, uninstall it, or clear local storage on your device.

13. Account Deletion Requests

If you want your Rascal Cat account data deleted, including guest or linked-account data that we control, you may request deletion by:

Using the Delete Account & Cloud Data action in Settings; or
Contacting us at contact@appazzola.com from the email address associated with your request, or with enough information for us to identify the account.

Account deletion requests may remove guest or account-linked cloud save data, leaderboard entries, and associated profile information that we control. Purchase records, billing records, and certain data retained by platform providers or service providers may be retained as required for legal, security, fraud-prevention, accounting, or operational reasons.

Deleting your account removes your data from our servers. Apple and Google retain your purchase receipts under their own policies, so you can restore your previous purchases from the Restore Purchases action in Settings on the same Apple or Google store account.

14. Children's Privacy

Rascal Cat is directed to children and is designed to be safe for players under 13. We treat the entire audience as child-directed for the purposes of COPPA, the GDPR, and equivalent laws in other jurisdictions. Specifically:

No behavioral or personalized advertising. All ad requests are tagged child-directed (TFCD=yes) and "under age of consent" (TFUA=yes), restricted to a G-rated maximum, and served only as non-personalized contextual ads.
No advertising identifier collection. We do not request or use Apple's IDFA (we do not show the App Tracking Transparency prompt) and we instruct Firebase Analytics to omit advertising identifiers.
No sale or sharing of personal information. We do not sell personal information and we do not share it for cross-context behavioral advertising.
Service-provider scope only. Information processed through Firebase Authentication, Firebase App Check, Cloud Firestore, Cloud Functions, Firebase Analytics, Firebase Crashlytics, Google AdMob (non-personalized), RevenueCat, and the applicable app store is used solely for internal operations - providing the app, supporting play, processing purchases, diagnosing crashes, preventing fraud, and complying with legal obligations. It is not used to contact children, build profiles, or target advertising.
Limited information from children. We do not knowingly collect personal information from children beyond what is reasonably necessary for the internal operations described above. We do not ask children for contact information, real names, location data, or other identifying details as a condition of play.

Parents or guardians who believe their child has provided personal information through the app can contact us at contact@appazzola.com to review the account, request deletion of any associated data, or refuse further collection. We will respond within a reasonable time and without requiring more information than is necessary to identify the account.

15. International Transfers

Your information may be processed in countries other than your own by us or our service providers, subject to applicable law and provider safeguards.

16. Changes to This Policy

We may update this Privacy Policy from time to time. If we do, we will update the "Last updated" date above. Your continued use of the app after an update becomes effective means the updated policy applies to your use, to the extent permitted by law.

17. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act:

Right to know: you can ask what categories of personal information we have collected about you in the last 12 months, the categories of sources, the business purposes, and the categories of third parties with whom we share that information.
Right to delete: you can ask us to delete personal information we have collected from you, subject to legal exceptions.
Right to correct: you can ask us to correct inaccurate personal information we maintain about you.
Right to opt out of sale or sharing: Rascal Cat does not sell personal information and, because the app is child-directed, we instruct AdMob to serve only non-personalized ads to every device regardless of your setting. You can still record your opt-out election using the Do Not Sell or Share My Personal Information toggle in the in-app Settings screen; we retain that election for audit purposes.
Right to limit use of sensitive personal information: we do not use sensitive personal information for purposes that would require a separate limit right under the CPRA.
Right to non-discrimination: we will not deny you service, charge you a different price, or provide a lesser quality of service because you exercised your privacy rights.

Categories of personal information we collect: identifiers (device identifiers, account identifiers when you sign in), internet or electronic network activity (app interactions, diagnostics), commercial information (in-app purchase records), and inferences drawn from usage for feature improvement.

How to exercise your rights: use the Do Not Sell or Share toggle in Settings, use the in-app Delete Account & Cloud Data action in Settings, or contact us at contact@appazzola.com from the email associated with your request.

Authorized agents: you may designate an authorized agent to make a request on your behalf. We may require the agent to provide proof of authorization and may require you to verify your identity directly.

Shine the Light: Rascal Cat does not disclose personal information to third parties for their direct marketing purposes, and has not done so in the preceding 12 months.

18. Contact

For privacy questions about Rascal Cat, contact: contact@appazzola.com