Privacy policy

1. In short

We keep only what the game needs to save your island and let you play with friends. You can play as a guest without giving us your name or email. If you choose to sign in with Google or Apple, we also keep your sign-in id and email (see below). We do not sell your data, and the game has no third-party advertising or tracking. In the apps, the store (Microsoft, Apple or Google) takes your payment. In the iPhone/iPad and Android apps, the in-app purchase tool we use (Unity) receives a short record of each purchase (see "Purchases in the apps").

The game currently shows no ads. If we ever add optional "watch a video for a reward" ads, we will update this page and tell players in the game before they are switched on.

2. Data we keep

Your account: a random account id and a secret device key (we store only a scrambled version of it), the date you started, and how many days you have played.

Sign-in (optional): if you sign in with Google or Apple, we store which provider it is, your stable account id from that provider, and the email address the provider gives us (Apple may give a private relay address), plus when you linked it and last signed in. We use it only to find your island again on another device or after a reinstall. We never show your email to other players and never use it for advertising. Playing as a guest needs none of this.

Your island: your animals, buildings, items, progress, rewards, purchases of Diamonds and items, and a log of changes that have value (so we can fix mistakes and stop cheating).

Social features: your Player ID, the name and username you choose, your chosen animal, your friends, friend requests, visits, hearts and gifts, and who invited you.

Island photos: only when you press Share, a picture of your island is uploaded and shown on your public page. You can remove it at any time in the game (friends panel → Remove photo).

Anti-abuse: when an account is made we keep a one-way code made from part of the network address (not the address itself), so we can spot friend farming. Our servers also see your IP address for each request to block floods; it is not stored with your account.

Payments for web purchases: when you buy on our website, Stripe handles the payment and your card or wallet details. We receive only what we need to deliver it: the pack, the amount, the payment session id and whether it was paid.

Play statistics: our own records of how the game is played: the day you installed, your sessions and when you were last seen, and game events such as tutorial steps and errors. We keep them ourselves, use them only to improve the game, and send them to no third-party analytics service.

Messages you send us: what you write in the in-game feedback box or the contact form, an optional screenshot, the email address you give us (the contact form only), and the game version and device type. We keep it until the issue is solved, at most 1 year.

3. Purchases in the apps

When you buy in the Windows, iOS or Android app, the store takes the payment. We never see your card details.

The points below apply to the iPhone/iPad and Android apps only (the Windows app does not send this record to Unity).

We receive the product id and the purchase receipt, so we can deliver your items.

The in-app purchase tool built into the app (Unity In-App Purchasing) sends Unity a short record each time you start, complete, fail or finish a purchase.

The record has: the product, price and currency, a purchase id · a temporary id for that app session · the app version · your device type, operating system and language · the date the app was installed.

On iPhone and iPad it also has Apple's vendor identifier for this app.

The record does not have your name, email, island or account id.

We do not use your advertising id, and the record is not used for advertising.

See how Unity uses data at unity.com/legal/privacy-policy.

4. What other people can see

Your public page (fluffisland.com/@username or /u/your-code) and the rankings show your island name, username, chosen animal, island level, rating, meals served, your animals and their outfits, and your island photo if you shared one. Friends can visit your island in the game.

5. Why we use it

To run the game and save your island; to make friends, visits, gifts and rankings work; to deliver purchases and answer payment questions; to keep the game fair and secure; and to fix bugs. We rely on providing the service you asked for and on our legitimate interest in keeping it safe.

6. Cookies and storage on your device

The website uses one cookie to remember your language. It also keeps small notes in your browser's local storage (for example that you have played, or an invite you opened) and a service worker cache so the game loads fast and works offline. The game itself stores your device key in the browser so it can find your island.

We do not use advertising or analytics cookies. Clearing your browser data removes all of these, and may disconnect this device from your island.

7. Notifications (optional)

If you turn on notifications, we keep what we need to send them: your browser's push subscription (its address at your browser's push service and the keys your browser gives us to encrypt each message), a random installation id for this device (not your name) and when it was last refreshed. The subscription is stored encrypted and is never shown to other players.

We also keep your notification settings: the topics you chose (storage full, Elder Tree ready, a friend's gift, a friend's visit), quiet hours, your time zone, the language of the messages, the most notifications you want per day, and the last time the game was open on your screen (so we do not notify you while you play). A notification is a short message about your own island and never names a friend. It travels through your browser's own push service (for example Google, Mozilla or Apple), which can see that a message was sent to your browser but cannot read it.

Notifications are optional and off until you turn them on (Settings > Account > Notifications). Turning them off, starting a new island or moving to another account on this device, or deleting your account removes your push subscription from our servers at once. A subscription that stops working, or is not refreshed for 90 days, is deleted too. You can also block notifications in your browser at any time. The game plays the same without them.

8. Who we share it with

Stripe, to take payments for purchases on our website (see stripe.com/privacy), in the apps Unity Technologies (the in-app purchase tool, which receives the purchase record described in "Purchases in the apps"), and the companies that host our servers and website, only to run the service. We do not sell or rent your data. We may share data if the law requires it.

If you sign in, Google or Apple learns that you use Fluff Island, under their own privacy policies (policies.google.com/privacy and apple.com/legal/privacy). From them we receive only your account id and email.

Our servers may be outside your country. When data moves across borders we use providers with appropriate safeguards.

9. How long we keep it

We keep your account and island while you play. We do not yet delete inactive accounts automatically; if we start, we will say so here first. Payment records are kept as long as tax and accounting laws require.

10. Your choices and rights

You can ask to see, correct, export or delete your data, or object to how we use it. Email us from the contact below with your Player ID and, if you can, a screenshot of the Account section in Settings so we know the account is yours. We answer within 30 days.

You can delete your account yourself in the game: Settings > Account. Deleting your account removes your island, friends, public page and photos; it cannot be undone and purchased items are not refunded. Payment records are kept as described above. Database backups may still hold your data for up to 30 days, after which they are deleted automatically. You can also complain to your local data protection authority (in Thailand, the PDPC).

Deleting your account also deletes your Google / Apple link (the provider, account id and email we stored).

11. Children

Fluff Island is made for everyone, including children. If you are under 13, or under the age where you live at which you can agree to this yourself (for example 16 in some EU countries, or a minor under Thailand's PDPA), a parent or guardian must agree before you play and before any purchase. We do not knowingly collect more from children than the game needs, and we do not ask children for names or photos, and signing in with Google or Apple is always optional. If you are a parent and think your child gave us data without your consent, contact us and we will delete it.

12. Changes to this policy

If we change this policy in a way that matters, we will tell you in the game or on this website before it applies.

13. Contact

Privacy questions and requests: [email protected].