Privacy Policy for “¡Miau a Casa!”

Effective: October 10, 2026

This policy explains what data is processed when you play “¡Miau a Casa!”, both the Android app (package com.lucasfamilygames.miauacasa, published on Google Play by LucasFamilyGamesStudio) and the web version at miau-a-casa.web.app. The controller is Henry Lucas (LucasFamilyGamesStudio), Jacksonville, Florida, USA (“we”, “us”). Contact: henrylucas.788@gmail.com.

1. Data that stays on your device

The game stores in the browser’s or app’s local storage: records, ⭐ points, unlocked levels, adopted kitties, Daily Challenge streak, language, sound, the nickname you chose and what you bought. This data does not leave your device except as described in sections 2–5. Uninstalling the app or clearing its data (or the site data in your browser) deletes it.

2. Account and ID (Firebase Authentication)

When the game connects to our online services it first creates an anonymous session with Google’s Firebase Authentication (a random ID, no name or email). Playing never requires an account.

Sign in with Google or Apple (optional, required for the world leaderboard): if you sign in, Firebase Authentication links your ID to your Google or Apple account so your nickname and record are yours alone and nobody can use your name. Firebase Authentication stores the account identifier, your email address (or Apple’s private relay email) and, with Google, the name and profile photo Google shares. We do not store your email on the leaderboard or show it; it is only used to identify the account. You can sign out or delete the account at any time from inside the game.

3. World leaderboard, nickname and team challenge (Cloud Firestore and Cloud Functions)

• Run summary: after a valid run, the game sends our server (Firebase Cloud Functions) a technical summary of the run —mode, map, score, duration and the timing of jumps and vehicles passed— to check for cheating and to add your cars to the weekly team challenge goal. Your weekly contribution (number of runs and cars) is stored with your anonymous ID.
• Leaderboard (optional): if you choose a nickname and submit your record, we store your anonymous ID, your nickname (3–14 characters, filtered for bad words; don’t use your real name), your best score, highest level, map, platform (web or Android) and date. Your nickname and score are public to anyone who opens the leaderboard.
• Daily player counter (anonymous): the first time you start a game each day, the game sends our server a ping with a random device ID (created and stored in your browser or the app; it is not your account, name or email) and the platform (web, Android or iOS). You don’t need to sign in with Google or Apple. It is only used to count how many devices played that day (Puerto Rico time). The server does not store that ID as is: it stores a one-way code (hash) that changes every day —so we can’t follow a device from one day to the next—, the platform and the time, plus a daily total. Your IP address is not stored in the counter.
• Anti-abuse: we keep technical counters (how many submissions you made and when, and whether any were rejected) to limit spam and cheating.
• Reports: you can report an inappropriate nickname or score. We store which anonymous ID reported which, and the reason (“nickname” or “score”). Nobody can read reports from inside the game.
• Challenge a friend: the “Challenge” button creates a link (?reto=…) containing the mode, level, score, the preset message you picked and your nickname (or “A friend”). You share that link using your phone’s share sheet; we don’t store it. Messages are fixed phrases (no free text).

4. In-app purchases (Google Play Billing)

Optional purchases in the Android app (for example ⭐ point bundles, breeds or special kitties) are processed by Google Play. We never see your name, email or payment details. To unlock and protect your purchase, the game sends our server the product ID and purchase token; the server confirms it with the Google Play API and stores a receipt record (product, Google Play order number, purchase time, quantity, a hashed fingerprint of the token and your anonymous ID). On the web version, the same optional purchases are processed by PayPal (PayPal account or card). We never see your card details; our server receives only the PayPal order and capture IDs, product, amount, time and your anonymous ID to confirm and record the purchase.

5. Advertising (Google AdMob) — Android app only

The Android app may offer you an optional rewarded ad: when you lose, you can choose to watch an ad to continue the run once. Ads are never shown during gameplay, and if you don’t want one, just skip it. The web version has no ads.

We request non-personalized ads only: the app does not use your interests or history to choose ads, and it does not request the Android advertising ID permission. To serve and measure ads and prevent fraud, the Google Mobile Ads SDK (AdMob) may still automatically collect: IP address (from which an approximate location is inferred), device model and OS, language, ad interactions, and SDK diagnostics and crash data. We configure AdMob to show only ads suitable for all audiences (“G” rating). In the EEA, UK and Switzerland, Google’s consent message (UMP) may be shown, and you can review your choice in the game (“Ad privacy”).

You can reset or delete your advertising ID in Android Settings → Privacy → Ads. Learn more: how Google uses information from apps that use its services.

6. Security and anti-cheat (Firebase App Check)

To protect the leaderboard from bots, the web version uses Firebase App Check with Google reCAPTCHA Enterprise, which analyzes technical browser and interaction signals. The Android app may use Google Play Integrity for the same purpose. Google processes this data for security and it is not used for advertising.

7. Who data is shared with

We don’t sell or rent data. It is processed only by these Google services acting as our providers:

Firebase data is stored on Google servers in the United States. All communications are encrypted in transit (HTTPS/TLS). We don’t use Google Analytics, Crashlytics or other third-party analytics tools (only the anonymous daily player counter in section 3, which is our own and uses no cookies or profiles); the game does not access your location, contacts, camera, microphone, photos or files.

8. How long we keep data

• Leaderboard entry, nickname, team-challenge contributions and anti-abuse counters: for as long as the game exists or until you ask us to delete them. We may delete inactive or rule-breaking entries sooner.
• Purchase receipts: as long as needed to keep what you bought, prevent fraud and meet legal or tax obligations.
• Reports: until reviewed, and at most 12 months.
• Daily player counter: each device’s daily code is deleted after 60 days; only the per-day totals (with no identifiers) are kept.
• Server technical logs (e.g. runs rejected for cheating): about 30 days.
• On-device data: until you uninstall the app or clear its data.
• Data collected by Google (AdMob, Play, reCAPTCHA) is kept under Google’s own policies.

9. 🗑️ How to request deletion of your data

10. Children

“¡Miau a Casa!” is intended for ages 13 and up and is not directed to children under 13. We do not knowingly collect personal data from children under 13. The game is still suitable for all audiences: there is no chat or free text (only filtered nicknames and fixed preset messages), and ads are limited to “G”-rated content. If you are a parent or guardian and believe a child under 13 has sent us data, contact us and we will delete it.

11. Your rights

Depending on where you live, you may have the right to access, correct, delete or object to the processing of your data. Email us and we will reply within 30 days. You can also change your nickname in the game at any time.

12. Changes

If we change this policy, we will update the date above and, for important changes, let you know in the game.

13. Contact

Henry Lucas · LucasFamilyGamesStudio — Jacksonville, Florida, USA
Email: henrylucas.788@gmail.com · Web: https://miau-a-casa.web.app