Wild BeastsPrivacy Policy — Wild Beasts
Version 2, effective from 15 October 2026. This is a translation; in case of doubt the Czech version applies.
1. Who processes your data
Controller: Milan Langhamer, Pod Oborou 789, 517 73 Opočno, e-mail langhamer.milan@gmail.com ("we"). You will find the same details in the game under Settings → Legal information → Operator. Please send all questions and requests about personal data to this e-mail address.
2. What data and why
| Data | Purpose | Legal basis |
|---|---|---|
| Account identifier (random anonymous Firebase ID), player code (8 characters) | so the game knows whose collection it is and so a friend can invite you | performance of a contract (playing the game) |
| Link to Google Play Games: Play Games player ID, gamer name and profile picture (stored by Firebase Authentication with the account, the game does not show them anywhere); unlocked achievements | backup of progress (the account is restored after reinstalling or on a new phone), a condition for card trades, achievements in Play Games | performance of a contract |
| Nickname | seen by opponents, friends and on the leaderboard | performance of a contract |
| Age group (adult / minor / minor below the age of digital consent) — not your date of birth; the year and month you enter are not stored anywhere | so the game does not offer purchases to children or collect statistics without consent | legal obligation, legitimate interest |
| Country based on the region setting of your phone (not your location) | the age of digital consent in your country, availability of features | legal obligation |
| Game data: card collection, decks, coins, matches and moves, trades, rewards, quests, achievements, statistics of matches played (mastery), leaderboard, friends (their codes and nicknames), wishlist, profile appearance | the game itself, card balancing, protection against cheating | performance of a contract, legitimate interest |
| Messages in a match — only pre-written phrases and pictures (no free text) | communication with your opponent | performance of a contract |
| Player reports (who reports whom, the reason and any text, the reported player's nickname at the time of the report) | moderation, protection of other players | legitimate interest, legal obligation (illegal content) |
| Anonymous feedback: bug reports from a match (match ID and record, your note) and suggestions for new animals (name, reason, language and game version) — stored without any link to your account; please do not write personal data in your notes | fixing bugs, choosing new animals | legitimate interest |
| Notification token and time zone of your device (only after you allow notifications) | "Your turn" alerts, challenges, end of a match, friend requests; quiet hours at night | performance of a contract |
| App verification (Firebase App Check with Google Play Integrity: whether this is the original app from Google Play) | protecting the server against modified apps and fraud | legitimate interest |
| Purchases: product, price, status, Google Play order ID; we only pass an encrypted (hashed) account identifier to Google Play | crediting a purchase, refunds, accounting, fraud prevention | performance of a contract, legal obligation |
| Crash reports (Firebase Crashlytics: error trace, phone model, system version) | fixing bugs | legitimate interest |
| Usage statistics (Firebase Analytics: which screens, how long, tutorial progress, estimated country and city based on IP address) — only with your consent (checkbox on the first screen, unchecked by default; you can change it in Settings), never for players below the age of consent | improving the game | consent |
We do not collect: your real name, e-mail (unless you write to us yourself), phone number, precise location, contacts, photos, date of birth.
3. Who we share data with
- Google Ireland Limited / Google LLC (Firebase: sign-in, database, server functions, notifications, Crashlytics, Analytics, App Check) as a processor. The database and server functions run in the EU (Belgium,
europe-west1). Crashlytics and Analytics may also process data in the USA — on the basis of standard contractual clauses and the EU–US Data Privacy Framework, in which Google LLC participates. - Google Play — payments are handled by Google Play, we do not see payment details.
- Google Play Games — sign-in to Play Games is managed by Google; we only receive the player ID to link the account. Deleting your account removes the link.
- Other players only see your nickname, profile appearance (avatar, card back, title, card showcase), player code (if you share it), cards in trades, published decks (without your nickname) and match results.
- We disclose data to public authorities only when required by law.
We do not sell data and do not use it for advertising profiling.
4. How long
- Account and game data: until you delete your account.
- After you delete your account we delete your profile, collection, decks, coins, friends, rewards, leaderboard entries and any entry in the report queue; in other players' matches only the result remains, with "Deleted player" instead of your nickname. Purchase records remain without any link to you (anonymised) for the period required by accounting and tax law, at most 10 years.
- Records of coin and card movements, trades, administrator actions, reports and moderation, and animal suggestions: 1 year (because of refunds, fraud and disputes), then they are deleted automatically.
- Match bug reports and records of rewards for ads: 90 days.
- Crash reports: 90 days (Crashlytics). Usage statistics: according to the Google Analytics settings, at most 14 months. Aggregate game statistics (not linked to players) are kept without limit.
- We do not delete inactive accounts automatically — you can delete yours at any time in the game or as described at https://wildbeasts.web.app/en/delete-account.
5. Automated decision-making
Opponents in games with other people are chosen automatically based on rating and experience. Automatic fraud checks (for example suspicious trades between your own accounts) only flag an account for review — a human decides about restricting an account. None of this has a legal or similarly significant effect.
6. Security
Data is transmitted encrypted (HTTPS). The game can only write to the database through server functions that verify every change; only the operator has access to the data.
7. Your rights
- Access and portability — in the game, Settings → My data (export to a file).
- Erasure — in the game, Settings → Delete account, or without the game as described at https://wildbeasts.web.app/en/delete-account.
- Rectification — change your nickname in your Profile, anything else by e-mail.
- Restriction of processing and objection to processing based on legitimate interest — by e-mail.
- Withdrawing consent to statistics — Settings → Account and purchases → Anonymous statistics. Switching it off takes effect immediately and you can switch it on again at any time. Withdrawal does not affect processing before it.
- Complaint to the Czech Office for Personal Data Protection (www.uoou.gov.cz) or to the data protection authority in your country.
We reply to requests without undue delay, at the latest within one month, at langhamer.milan@gmail.com. Because accounts are not tied to an e-mail address or a name, we may ask for information to verify that the account is yours (player code, nickname).
8. Children
The game is for players aged 13 and over; younger players cannot start it. For players below the age of digital consent in their country (15 in the Czech Republic) we do not collect usage statistics and do not show personalised ads; purchases with real money are for adults only. The only free text in the game is the nickname (with a filter for inappropriate words).
9. Changes
When we change this policy, the game will tell you the next time you start it. We will send you previous versions by e-mail on request.