Privacy Policy

Controller: Pyxel Bytes (Biel Carpi)
Address: Avinguda de les Nacions Unides 40, Escaldes-Engordany, Andorra
Email: privacy@thejumpingdino.com
Terms of Service: https://thejumpingdino.com/terms

The Jumping Dino is a mobile runner game and website (the “Service”). This Privacy Policy explains what data we collect, why, how long we keep it, and your rights. By using the Service you agree to this Policy. If you do not agree, do not use the Service.

Brief summary (not legally binding): Your game data lives on your device by default. If you sign in, we sync your progress to our servers (Google Cloud). The free tier shows ads via LevelPlay (IronSource) ad mediation. We use your Advertising ID to maximize ad relevance and revenue. We use Firebase for authentication, analytics, and crash reporting. Purchases are managed through RevenueCat. We never sell your data. You can play without an account, remove ads with a purchase, or delete your account anytime.

1) Scope

This Policy applies to The Jumping Dino mobile app (iOS and Android) and website at thejumpingdino.com, including the web-based game at /play. It does not apply to third-party services linked from our Service (e.g., app stores, social media).

2) What We Collect

2A) Data You Provide

• Account info (optional): If you sign in via Apple or Google, we receive your name and email address. You can play the full game without ever signing in.
• Purchase receipts: When you make an in-app purchase (coin packs, ad removal, Gold Premium, or starter packs), Apple or Google sends us a receipt token so we can validate and unlock the purchase. We do not receive your payment card details.
• Support inquiries: If you contact us via email, we receive the content of your message and your email address.

2B) Data Collected Automatically

• Gameplay data: Game progress, high scores, level attempts (result, stars earned, coins collected, duration, jumps, bends), infinite mode runs (score, duration, seed), unlocked items, selected dinosaur/trail/colors, coin balance and full transaction history, daily login streaks, daily deals, collection milestone claims, ad reward verifications (transaction ID, ad network, timestamp), and first-clear bonus records.
• Replay data: In infinite mode, your input data (up to 500 KB) may be recorded and used for ghost challenges — asynchronous multiplayer races where other players compete against your replay.
• Diagnostics: Crash logs, performance metrics, and error reports via Firebase Crashlytics.
• Analytics: Pseudonymous usage events (e.g., sessions started, game modes played, levels completed) via Firebase Analytics. These help us understand which features are used and improve the game.
• Multiplayer & ghost data: When you play multiplayer or ghost challenges, your display name, avatar, scores, game state, and replay input data are shared with other players.
• Advertising ID: We collect your Advertising ID (IDFA on iOS, GAID on Android) in the free tier to serve personalized ads and maximize ad relevance via LevelPlay (IronSource). On iOS, we will ask for your permission using Apple's App Tracking Transparency (ATT) prompt before accessing your IDFA. If you decline, only contextual (non-personalized) ads are shown and your IDFA is not collected. You can change this at any time in Settings → Privacy & Security → Tracking. On Android, you can opt out via Settings → Google → Ads.
• Device integrity: We use Google Play Integrity API (Android) and Apple App Attest (iOS) to verify device and app authenticity. Integrity verdicts are stored on our servers.
• Anti-cheat data: The app monitors for speed manipulation and memory tampering. Detection events (type and details) are reported to our servers to protect fair play.

2C) Data We Do NOT Collect

• Precise location (GPS)
• Contacts, photos, camera, or microphone
• Health, financial, or biometric data

3) How We Use Data

• Provide and operate the game: save/sync progress, enable multiplayer and ghost challenges, populate leaderboards, manage daily logins and deals.
• Validate purchases: process purchase events via RevenueCat, verify receipts, grant entitlements and coins, handle refunds.
• Improve reliability: monitor crashes, fix bugs, and optimize performance.
• Understand usage: aggregate analytics to prioritize features and improvements.
• Serve and optimize ads: display interstitial ads and optional rewarded video ads in the free tier via LevelPlay (IronSource) ad mediation. We use your Advertising ID to serve personalized ads and maximize ad revenue.
• Verify ad rewards: confirm rewarded video completions via server-to-server callbacks to prevent fraud and grant coins.
• Fair play & integrity: detect cheating, verify device integrity, and enforce game rules.
• Respond to inquiries: answer support emails.
• Legal compliance: comply with applicable laws, enforce our Terms, and protect rights.

4) Data Sharing

We do not sell your personal data. We share data only with:

• Google (Firebase): Authentication (sign-in), Analytics (usage events), and Crashlytics (crash reports). Firebase App Check is used for client attestation. Firebase Privacy.
• Google Cloud: Our backend servers and game data are hosted on Google Cloud infrastructure in the United States. Google Cloud Privacy.
• LevelPlay (IronSource / Unity): Ad mediation platform that serves interstitial and rewarded video ads in the free tier. LevelPlay may use your Advertising ID and contextual signals to serve and measure ads via demand partners including Google AdMob. Unity Game Player & App User Privacy Policy.
• RevenueCat: Manages in-app purchases and entitlements. Receives purchase events from Apple/Google to validate and process transactions. RevenueCat Privacy Policy.
• Apple / Google Play: Process in-app purchases, provide purchase receipts, and handle device integrity verification (App Attest / Play Integrity API).
• Other players: In multiplayer and ghost challenges, your display name, avatar, scores, game state, and replay input data are visible to other players.
• Legal obligations: We may disclose data if required by law, court order, or to protect the safety or rights of Pyxel Bytes, our users, or the public.

5) Cookies & Tracking Technologies

The mobile app does not use cookies. The website (thejumpingdino.com) uses only essential cookies for site functionality (e.g., language preference). We do not use marketing or tracking cookies on our website. The website uses Vercel Analytics for anonymous page-view statistics — it does not use cookies and does not collect personally identifiable information (IP addresses are hashed and discarded). Firebase Analytics in the app uses device identifiers rather than cookies.

6) Your Choices & Controls

• Play without an account. No sign-in required — no cloud data collected.
• Remove ads. Purchase ad removal or Gold Premium to stop all ad serving and associated data collection by LevelPlay (IronSource) and its ad network partners.
• Opt out of personalized ads. On iOS, use the ATT prompt or go to Settings → Privacy & Security → Tracking. On Android: Settings → Google → Ads → Delete advertising ID.
• Delete your account. In the app: Settings → Account → Delete Account. This permanently removes all your data from our servers and resets your local game data on next app launch. See thejumpingdino.com/delete-account for details.
• Request data access/deletion. Email privacy@thejumpingdino.com and we will respond within 30 days.

7) Data Retention

• Local game data: Stored on your device until you uninstall the app, clear app data, or delete your account (local data depends on your cloud account and is reset upon account deletion).
• Account & sync data: Retained while your account is active. Deleted within 30 days of account deletion.
• Crash logs: Retained for up to 90 days in Firebase Crashlytics, then automatically deleted.
• Analytics data: Retained in aggregate form for up to 14 months in Firebase Analytics, then automatically deleted.
• Support emails: Retained for 1 year after the inquiry is resolved, then deleted.
• Purchase records & webhook events: Purchase receipts, entitlement records, and RevenueCat webhook event logs are retained for 7 years to comply with tax and financial recordkeeping obligations and to support chargeback resolution.
• Gameplay logs: Level attempts, infinite runs, coin transactions, and ghost challenge data are retained while your account is active and deleted with your account.
• Anti-cheat & integrity data: Cheat detection logs and device integrity verdicts are retained while your account is active for fair play enforcement.

8) Data Storage & Security

Cloud data is stored on Google Cloud infrastructure in the United States. Firebase services (Authentication, Analytics, Crashlytics) may also process data in the United States. We use industry-standard security measures including encryption in transit (TLS) and at rest, Firebase App Check for client attestation, HMAC-signed server-to-server callbacks, and access controls. However, no system is 100% secure — we cannot guarantee absolute security.

9) International Transfers

Your data may be transferred to and processed in countries outside your own. Our backend servers and game data are hosted in the United States. Firebase and RevenueCat also process data in the United States. For transfers from the EEA/UK, we rely on Standard Contractual Clauses (Google's and RevenueCat's) and other appropriate safeguards as required by GDPR Chapter V. By using the Service, you consent to such transfers.

10) Your Rights by Region

Depending on where you live, you may have additional rights:

Andorra & European Economic Area (GDPR)

Under the General Data Protection Regulation, you have the right to: access your data, rectify inaccurate data, erase your data (“right to be forgotten”), restrict processing, data portability, object to processing, and withdraw consent. Our legal bases for processing are: (a) contract performance (providing the game), (b) legitimate interest (analytics, security), and (c) consent (personalized ads). To exercise your rights, email privacy@thejumpingdino.com. You also have the right to lodge a complaint with your local data protection authority.

United Kingdom

You have the same rights as under the GDPR. Our representative for UK data protection inquiries can be reached at privacy@thejumpingdino.com.

California (CCPA/CPRA)

California residents have the right to: know what personal information is collected and how it is used, request deletion, opt out of the sale/sharing of personal information, and non-discrimination for exercising these rights. We do not sell or share personal information as defined by the CCPA. To exercise your rights, email privacy@thejumpingdino.com.

11) Children

The Jumping Dino is not directed to children. The minimum age to use this Service is 13, or the higher age of digital consent in your country (e.g., 16 in some EEA member states). If you are below the applicable age of consent for data processing in your region, a parent or guardian must agree on your behalf. We do not knowingly collect personal data from children below the applicable minimum age. If you are a parent/guardian and believe your child has provided us with personal data, please contact us at privacy@thejumpingdino.com and we will promptly delete it.

12) Changes to This Policy

We may update this Privacy Policy from time to time. We will post the revised policy at thejumpingdino.com/privacy and update the effective date. Material changes will be announced in-app or on our website. Your continued use of the Service after changes means you accept the updated Policy.

13) Contact

Pyxel Bytes (Biel Carpi)
Avinguda de les Nacions Unides 40, Escaldes-Engordany, Andorra
privacy@thejumpingdino.com

App Store Privacy Summary

The following table summarizes our data practices for the App Store and Google Play privacy labels:

We do not use collected data for tracking across third-party apps or websites (except LevelPlay (IronSource) ad mediation in the free tier, which you can opt out of via ATT on iOS or via your Android Ads settings).