This policy explains how Meow Path handles information when you play the game, use its online features, visit our related pages, or contact us. It describes our practices; reading this policy or playing the game is not, by itself, consent to optional data processing.
1. Who we are
Meow Path is developed and operated by Jordan Thrash. We are the data controller for the information we process to operate the game. Contact us at hello@meowpathgame.com about this policy or your data.
2. What we collect
The information processed depends on the features you use and your device and advertising choices.
| Category | Examples | Why it is used |
|---|---|---|
| Player and device identifiers | Generated player and installation identifiers, authentication credentials, recovery-key hashes and save-recovery attempts, IP address; advertising identifiers where available and permitted | Recognize your game profile, restore saves, operate online features, advertising and fraud prevention |
| Device and technical information | Device or browser type, operating system, app version, language, approximate location inferred from IP, technical diagnostics and SDK error information | Deliver and improve the game, analytics, support and advertising |
| Gameplay, saves and results | Public preset name, cat avatar, levels, scores, moves, completion times, hint and booster use, stars, fish, streaks, achievements and saved progress | Save progress, verify results, run leaderboards and challenges, and understand gameplay |
| Buddies and notifications | Buddy links, private aliases, blocks, invite-code hashes and invitation attempts; boop sender, recipient, result and seen status; push tokens, platform, language and delivery records | Invitation-only buddy features, abuse prevention and notification delivery |
| Purchases and wallets | Store transaction IDs or purchase tokens, signed purchase evidence, product and entitlement records, wallet and account identifiers, balances, grants, spending, refunds and device spending allowances | Verify and deliver purchases, restore supported purchases, maintain fish balances and prevent duplicate grants or fraud |
| Usage and analytics | Analytics identifiers, sessions, feature events, gameplay activity, ad impressions and revenue, purchase events | Understand usage, game balance, reliability and revenue |
| Support correspondence | Your email address and anything you choose to send us | Respond to questions, purchase problems and privacy requests |
The game does not require your real name or email address, request GPS location, or access your contacts, photos, microphone or camera. If you contact us, we receive the information you include. We do not receive your payment-card number; purchases are processed by Apple or Google.
3. Your player profile, public results and recovery
There is no email registration or password login. When the game connects to our services, it automatically creates or reuses a player identity and game profile. This is pseudonymous: information is linked to generated identifiers rather than a required real name, but it is not necessarily anonymous under privacy law.
Your public name uses preset words and a number. Your name, cat avatar, rankings and game results, including moves, completion times and hint use, may be visible to other players. Results can be submitted as you play; opening a leaderboard is not what creates the profile or first submits your results.
We store progress on your device and synchronize supported data with our servers. Authentication and recovery information are also stored on your device; on iOS, secure authentication storage can survive uninstalling and reinstalling the app. A private recovery key lets you transfer supported saved progress, buddy relationships and wallet data to another installation. The key is sent to our service to verify a restore request; we store a hash for matching it. Keep your recovery key secret. A buddy invite code is different and is intended to be shared with people you want to add.
4. Advertising and your choices
We use Google AdMob for occasional interstitial ads and optional rewarded ads. Google may process advertising identifiers, IP addresses, device and usage information to deliver and measure ads and prevent fraud, subject to applicable permissions and consent requirements.
- Ad preferences: Open this section in Settings to review the advertising privacy options available for your region and device.
- iOS tracking: Where applicable, Apple's App Tracking Transparency prompt asks for permission to track across other companies' apps and websites. You can change that permission in iOS Settings. Declining tracking does not turn off all data processing needed to operate the game.
- Consent choices: Google's consent form is shown where required. Depending on your choices and the ad provider's eligibility checks, you may receive non-personalized or limited ads, or ads may be unavailable. Non-personalized ads can still involve data processing; they are not a promise of no identifiers of any kind.
- Device controls: Your device settings also provide advertising-identifier and tracking controls.
Remove Ads disables automatic interstitial ads. Optional rewarded ads remain available if you choose them. It does not disable gameplay analytics.
Read Google's policies at https://policies.google.com/privacy and https://policies.google.com/technologies/ads.
5. Optional gameplay analytics and install attribution
Gameplay analytics is off until you choose to allow it. This applies to GameAnalytics and our own optional session and revenue analytics in Supabase. Declining does not affect gameplay, saves, purchases, rewards or access to features. The gameplay-analytics choice does not control install attribution described below.
If you allow gameplay analytics, we collect gameplay, session, device, purchase and ad revenue events to understand usage, improve reliability and balance the game. GameAnalytics uses a generated analytics identifier separate from your game profile. Technical SDK error information may also be processed. We do not send your real name, email address, store receipts or transaction IDs to GameAnalytics.
Install attribution on iOS is separate from optional gameplay analytics. We register app launches with Apple's SKAdNetwork to measure qualifying installs from advertising. Apple determines whether an install qualifies and sends privacy-preserving, delayed attribution reports to the relevant ad network. This registration does not require Apple's tracking permission and does not provide us with a user-by-user list of installs.
If you allow tracking through Apple's App Tracking Transparency permission, Meta also receives the SDK's install and app activation events to measure our campaigns. Meta may process app and device information, IP addresses, event data and the advertising identifier permitted by your device settings. We do not send game profiles, buddy data, contact details, gameplay events or purchase events to Meta. Automatic Meta event and purchase logging is disabled. Meta deduplicates its install reports; rebuilding or reopening the app does not create a new install each time.
Without Apple tracking permission, the Meta SDK does not initialize. If you withdraw that permission in iOS Settings, the app disables Meta's advertising-ID collection and automatic flushing when it observes the change. Requests already in flight may finish; previously permitted events may remain cached and be sent if you later allow tracking again. Apple's privacy-preserving attribution registration remains available. Meta's privacy policy is at https://www.facebook.com/privacy/policy/.
Open Settings → Analytics preferences at any time to turn optional gameplay analytics off or on. Turning it off stops new optional gameplay event collection and transmission, cancels pending requests where possible, and discards unsent GameAnalytics events, the local analytics identifier and its session/purchase counters. It does not change install attribution or Apple tracking permission. Events already received by a service are not automatically erased; contact us about deletion under Section 12. A later opt-in does not enable our own manual logging of gameplay from when analytics was off.
Your gameplay-analytics choice and the disclosure version are saved on this installation. They are not enabled by a purchase, ad consent or save recovery. If a choice cannot be saved, optional gameplay analytics stays off for that session and the game explains the problem. We also keep minimal local purchase-event suppression records so repeated store callbacks do not send optional gameplay analytics events you previously declined.
Turning optional gameplay analytics off does not stop processing necessary to provide requested features, verify purchases, maintain the wallet, prevent fraud or save your progress. Ad preferences and iOS tracking permission remain separate controls. Pseudonymous event data is not fully anonymous information. GameAnalytics' privacy notice is at https://gameanalytics.com/trust/privacy-notice.
6. Buddies and private aliases
Buddies is invitation-only. We store buddy relationships, blocks and the private aliases you assign to buddies. An alias is private to your view and is not shown to the named buddy or other players. It can appear in notifications sent to your devices, including lock-screen previews, and is processed by notification providers for delivery. Avoid putting sensitive personal information in aliases. Aliases are excluded from our normal admin dashboard and exports; they are stored on our servers with owner-scoped access controls.
Invite codes are stored on our servers as hashes; the readable code stays on your device. We record invitation attempts to limit guessing and abuse. Generating a new invite code invalidates the old one without removing buddies.
Boops are predefined buddy challenges, not free-text messages. We store who sent and received a boop, the relevant board and result, and its delivery or seen state. Removing a buddy removes the relationship and associated aliases, but does not by itself erase historical boop records. Removing a buddy also blocks new invitations until you unblock them. Blocking prevents new invitations and boops, but older boops may still appear. Unblocking does not restore a removed relationship.
7. Purchases and Red Fish
Apple App Store or Google Play processes in-app payments, depending on the product, platform and availability. Red Fish pack purchases are currently supported on iOS. We and our verification services process purchase evidence to confirm transactions, grant entitlements or fish, handle refunds and prevent repeated claims. We maintain wallet records for earned, purchased, spent and refunded fish. Store account-binding and device identifiers help associate verified purchases and spending with the correct wallet.
We do not receive your card details. The stores handle payment information under their own privacy policies:
8. Notifications
Local reminders are scheduled on your device. If you enable push notifications, we register a delivery token with your player identity, platform and language, and keep registration and delivery information. Apple Push Notification service (APNs) or Firebase Cloud Messaging (FCM) processes the token and notification content to deliver the message. Messages may include game results and your private alias for a buddy.
You can change notification choices in the game and turn notification permission off in device settings. Lock-screen preview settings control whether nearby people can read notification text.
9. Purposes and legal bases
We process information to provide saves, rankings, buddy features, purchases and notifications; maintain security and prevent fraud; respond to support and privacy requests; understand gameplay; and deliver and measure advertising.
Where EEA or UK data-protection law applies, the relevant legal basis depends on the processing: providing the service you request, complying with legal obligations, legitimate interests where permitted and balanced against your rights, or consent where required. These bases do not make every use of data necessary to play. Advertising permission is not a blanket authorization for unrelated analytics. Optional gameplay analytics described in Section 5 is based on your separate consent. You can contact us about the basis for processing your information or to exercise the rights in Section 12.
10. Who receives information
We use the following services for the purposes described above. They receive information needed for their functions and may also process information under their own privacy notices.
| Service | Purpose | Privacy notice |
|---|---|---|
| Supabase | Player authentication, saves, results, buddies, wallets, notifications and our gameplay analytics | https://supabase.com/privacy |
| Google AdMob | Advertising, consent management and ad measurement | https://policies.google.com/privacy |
| GameAnalytics | Gameplay analytics and technical diagnostics | https://gameanalytics.com/trust/privacy-notice |
| Meta (iOS) | Install and app activation measurement when Apple tracking permission is allowed | https://www.facebook.com/privacy/policy/ |
| Apple | App Store purchases, privacy-preserving install attribution and APNs notification delivery | https://www.apple.com/legal/privacy/ |
| Google Play purchases and FCM notification delivery | https://policies.google.com/privacy | |
| Netlify | Website hosting and Apple purchase verification | https://www.netlify.com/privacy/ |
We do not sell player information for money. Advertising-related disclosures may fall within broader legal definitions of "sale" or "sharing" in some regions; see Section 12. We may also disclose information when required by law or necessary to protect the rights and security of players and the service.
11. Retention, reset and deletion
We retain game profiles and supported saves to provide continuity while the profile remains active. Different records have different retention needs:
- Our scheduled maintenance is designed to prune first-party session and revenue events older than 400 days. This does not describe GameAnalytics' or Google's retention, or every record in our backend.
- Invitation-attempt records older than one hour are removed when a new invitation is processed. Buddy links and aliases remain until the relationship or profile is removed; blocks remain until unblocked or an affected profile is deleted.
- Purchase, wallet, refund, fraud-prevention and deletion-audit records may be retained after the active profile is removed to handle transactions, disputes, security and legal obligations. These records can contain identifiers and are not necessarily fully anonymous. Provider-held information is also subject to the relevant provider's retention practices.
Reset progress is not account deletion. It preserves your player identity, buddy relationships and wallet. Uninstalling the app does not delete server records or necessarily remove securely stored credentials.
To request deletion of your player data, email hello@meowpathgame.com. We may need information to locate your profile and verify the request. Do not send your recovery key, password or payment-card details. We will explain any records that must be retained and respond within the time required by applicable law.
12. Your rights and choices
Depending on where you live, you may have rights to access, correct, delete or obtain a portable copy of your data, restrict or object to processing, and withdraw consent for processing based on consent. Withdrawal does not affect the lawfulness of earlier processing. You may also complain to your local data-protection authority.
Contact hello@meowpathgame.com to exercise these rights. Advertising and notification choices are described in Sections 4 and 8. Use Analytics preferences in Settings to withdraw optional analytics consent, as described in Section 5. Changing ad preferences does not change this separate analytics choice.
Where California privacy law applies, rights may also include knowing the categories of information collected and disclosed, correcting or deleting information, opting out of sale or sharing for cross-context behavioral advertising, and exercising rights without unlawful discrimination. Use the available advertising privacy options or contact us with your request.
13. Children's privacy
Meow Path is intended for a general audience aged 13 and older, or the higher minimum age specified in our Terms of Service for your region. It is not directed to children below that age. We do not knowingly collect information from children below the applicable minimum age. Contact hello@meowpathgame.com if you believe such a child has provided information, so we can investigate and address deletion.
14. Security
We use measures such as encryption in transit and access controls to protect information. No system is completely secure. Protect your device and recovery key, and contact us if you suspect unauthorized access to your saved game.
15. International processing
We and our providers may process information outside your country, including in the United States. Where required, international transfers must use applicable safeguards, such as Standard Contractual Clauses. You can contact us for information about the safeguards relevant to your data.
16. Changes to this policy
We may update this policy and will change the date above when we do. Where required by law, we will provide additional notice or obtain consent before introducing a new use of your information. An updated policy does not, by itself, provide consent for optional processing.
17. Contact
Jordan Thrash - hello@meowpathgame.com