Pet Heist privacy notice
Pet Heist is a browser game. This notice explains what data the game collects, why, and how long we keep it. We keep it short because we collect little.
What we collect
- Game account. When you start playing, the game creates an anonymous player account and stores a random access token in your browser's local storage. We do not ask for your real name or email to play.
- Thief name. The name you pick (or a random one). Other players see it on the leaderboard, in raids and in defense logs. Don't use your real name if you don't want it shown.
- Gameplay data. Your vault layout, pets, coins, trophies, progress, and recordings of raids (the path a thief took). Raid recordings are shown to the owner of the vault that was raided.
- Diagnostics. If the game crashes, freezes or shows an error, it sends a short technical report: the error message, game state, browser type, screen size, language and a shortened one-way hash of your IP address. We use it only to fix bugs. Kept for 14 days.
- Server logs and rate limits. Our servers process your IP address to deliver the game and protect it from abuse (rate limiting). It is not stored with your game data; standard hosting logs may keep it for a short time.
- CrazyGames. If you play on CrazyGames and are logged in there, we receive your CrazyGames user id and username to keep your progress. Ads on CrazyGames are served by CrazyGames under their privacy policy.
- Anonymous usage statistics (no cookies). The game sends a few anonymous events (for example: session started, tutorial finished, raid won or lost, shop opened, language changed) with a random install id kept in local storage, the page address and referrer site, and campaign tags. No names, no account ids, no cookies. They go to our own analytics server (Virix Labs), not to a third party, and help us see where players get stuck.
- Purchases (our own website only). Payments are processed by Stripe. We never see your card details. We receive the purchase record (product, amount, time, and the email address you gave Stripe) to deliver your item and handle support.
What we don't do
- We don't sell your data and don't use it for advertising profiles.
- We don't use third-party analytics, advertising pixels or tracking cookies on our own website.
Why we process it
To run the game you asked to play (your account, raids, leaderboard), to deliver purchases, and our legitimate interest in keeping the game working and safe (diagnostics, abuse protection).
How long we keep it
Game account data is kept while the account is in use; accounts inactive for 24 months may be deleted. Diagnostics: 14 days. Purchase records: as long as required for accounting and tax.
Children
The game is meant for players aged 13 and over. If you believe a child under 13 has given us personal data, contact us and we will delete it.
Your rights
You can ask us for a copy of your data, to correct it, or to delete your account. Email support@petheist.com and include your thief name (and, if possible, the date you started playing) so we can find your account. You may also complain to your local data protection authority.
Where data is stored
Game servers are operated by us on rented cloud infrastructure. Stripe and CrazyGames process data under their own terms.
Changes
If we change this notice, we update the date at the top.