Ploposaurus Privacy Policy

Effective and last updated: November 3, 2026

This Privacy Policy explains how C4 SaaS collects, uses, and shares information when you play Ploposaurus (the "Game") on iPhone, iPad, Android, or the web. It also applies when you visit the Game's websites at ploposaurus.com and ploposaurus.c4saas.com, including their App Store and Google Play buttons, and to the versions of the Game we publish on third-party game websites. Our other websites and business services are covered by the separate C4 SaaS Privacy Policy.

Some features described in this policy are being introduced gradually, so they may not yet be available in your version of the Game or on your device. We collect the information a feature uses only once that feature is available to you. Where a section describes a feature that is still being switched on, that section says so.

The short version

• You can play without an account. We never ask for your date of birth.
• Until your device's app store confirms that you are an adult (or, if you entered a date of birth in an earlier version of the Game, until that date shows you are one), the Game does not:
  • create an online profile for you;
  • send us gameplay analytics;
  • show you anything other than non-personalized ads, or no ads at all.

  On some devices, you can restore a profile you already have by answering one question (see "How the Game handles age").

• To count how many devices use the Game, the Game can send us a random install ID. The ID carries no name, email address, or age, and we do not use it for ads (see "Counting the devices that use the Game").
• Like most websites and online games, our servers keep basic technical records, such as your IP address, for a short time so we can deliver the Game and keep it secure.
• Where our websites count visits and store-button taps for our marketing campaigns, we keep only the totals.
• Meta. If your device's app store confirms you are an adult, our iPhone, iPad, and Android apps can tell Meta (the company behind Facebook and Instagram) when you install the app and reach certain milestones. That lets us see which of our Facebook and Instagram ads work.
  • On iPhone and iPad, this happens only if you allow tracking.
  • It runs only in app versions that let you turn it off in Settings.
  • It never happens for players who are not confirmed adults, in the European Economic Area, the United Kingdom, or Switzerland, or on the web.
• We do not sell your personal information for money. You can delete your data in the Game or by emailing info@c4saas.com.

Who we are

The Game is operated by C4 Payments LLC, a Texas limited liability company doing business as C4 SaaS ("C4 SaaS," "we," "us," or "our"), 2653 Sagebrush Dr, Suite C, Flower Mound, TX 75022, USA. For any privacy question or request, email info@c4saas.com or call (972) 382-5878.

For players in the European Economic Area (EEA) or the United Kingdom, C4 SaaS is the "data controller" for the information described below.

How the Game handles age

We do not ask for your date of birth. Every new player starts with our privacy-protective default. The Game asks for an age range only when you choose a feature that needs one, such as signing in, saving to the cloud, or using a leaderboard name. Where the law requires it, for example in Texas, the Game also checks the age range your app store shares when you make a purchase.

• iPhone, iPad, and Android. The Game asks your device to share an age range through Apple's Declared Age Range feature or Google Play Age Signals. You, or your parent or guardian, can decline. We receive an age range (for example "under 13," "13 to 17," or "18 or older"), never your birth date.
• What we keep.
  • The Game keeps, on your device only, the result (child, teen, or adult), which platform provided it, and when it was checked.
  • We do not keep your birth date or the platform's full response, and the result is not stored on our servers.
  • For leaderboard names and gameplay analytics, the Game asks your device again after no more than 30 days.
  • For an adult result, cloud save and restoring your own profile on that device may keep working until your device gives a newer answer, you reinstall the Game, or you switch profiles.
• If there is no adult result. If you decline, if your device cannot answer, or if the range is under 18, the feature you chose stays off and you keep playing. You do not lose any progress. Purchases work differently, as described next.
• Purchases and your app store. In the iPhone, iPad, and Android apps, you can buy items unless your device or your own answer has told the Game that you are under 13. The Game does not ask your age when you buy. Apple or Google takes the payment and applies any purchase approvals your family has set up, such as Ask to Buy or Family Link. Where the law requires it, for example in Texas, the Game follows the age range and approvals your app store reports.
• If a signed-in device later reports a younger player. If a device that is signed in to an online profile later reports that its player is under 13, the Game turns off that profile's online features on that device, as shown in the table below. If it reports a player aged 13 to 17, the teen column applies on that device.
• Web version. Browsers cannot share an age range, so the web version uses the privacy-protective default.
• Restoring your progress on devices that cannot share an age range. Some devices cannot share an age range, for example iPhones and iPads running a version of iOS earlier than 26.
  • When it asks. On those devices, when you choose to restore your progress or sign in to a profile you already have, the Game may ask what year you were born. It asks only after you tap Restore or Sign in, never when the Game starts.
  • When it never asks:
    • on the web;
    • in Brazil;
    • where we cannot tell which country you are in;
    • after you or a parent declined to share an age range.
  • What we use and keep. We use your answer only to decide whether restoring is available. On your device, the Game keeps only the result (adult or not), when you answered, and when it expires (after 30 days). It never keeps the year you enter.
  • What our servers learn. When you restore or sign in this way, the Game tells our servers that your own answer was used, so that a new profile is never created from it. We do not keep that with your profile.
  • What it unlocks. An adult answer lets you restore an existing profile and its cloud save, and items you already bought stay with your profile. It does not turn on leaderboard names, gameplay analytics, ad measurement, or personalized ads. Purchases follow "Purchases and your app store" above, and leaderboard scores follow "Leaderboards" below.
  • Younger answers. If your answer shows you are under 18, the Game treats your device as a younger player's device, as shown in the table below.
  • We are introducing this option gradually, so it may not yet be available on your device.
• Earlier versions. Earlier versions of the Game asked for a date of birth before a purchase. If you entered one, it may still be stored in your save file on your device and, if you had an online profile, on our servers. We use it only to apply the age limits below (if it shows you are an adult, adult features stay available). It is removed from your device if you reset your progress, and from our servers when you delete your account.

What each profile can do:

In this policy, a profile is "adult-confirmed" when your device's app store has confirmed that you are 18 or older or, if you entered a date of birth (or a birth month and year) in an earlier version of the Game, when that date shows that you are 18 or older. Your answer to the birth-year question never makes a profile adult-confirmed.

What we collect

1. Technical information our servers receive

Our servers automatically record standard request information when you:

• visit ploposaurus.com or ploposaurus.c4saas.com;
• tap one of their store buttons; or
• use the Game (app or web version) in a way that downloads game settings, sounds, or other content from our servers.

That information is your IP address, your device or browser type (the "user agent"), the date and time, the address requested (including any campaign tags in the link, such as utm_source=youtube), the page that sent you (the "referrer") if your browser shares it, and whether the request worked.

We use these records only to deliver the Game, keep it secure, prevent abuse, fix problems, and count visits and store-button taps in total (see "How we measure our marketing"). We do not use them to identify you, contact you, or build a profile about you. They are deleted automatically within 4 months.

The versions of the Game on third-party game websites do not connect to our servers (see "Versions on third-party game websites").

2. Online profile (adult-confirmed profiles only)

If your profile is confirmed as adult and you use an online feature, or you created an online profile in an earlier version, we keep the items below. The same applies if you restore an existing profile as described in "How the Game handles age."

• a random device identifier and a random player ID, used to create, restore, and secure your profile;
• a sign-in credential that refreshes when you play and, if you ask for them, recovery codes (we keep only a protected, hashed form of each code); and
• if you choose to sign in with Apple or Google, the email address and the account identifier that Apple or Google gives us.
  • Sign in with Apple is available in our iPhone and iPad apps. Sign in with Google is currently available only in the web version of the Game.
  • If you link both Apple and Google to the same profile, we keep a separate identifier for each.
  • If you use Apple's "Hide My Email", we receive a private relay address that forwards to you, and we can reach you only through Apple's relay. Apple may also give us no email at all.
  • We use your sign-in email only to recognize your profile, to help you recover it, and to answer you. We do not use it for marketing.
  • We do not receive your Apple or Google password. We do not ask Apple for your name, and if Google includes your name when you sign in, we do not keep it.

3. Your save and game progress

Your score, levels, chapter and season progress, in-game currency, lives, upgrades, cosmetics, achievements, and settings. This is stored on your device. If you have an online profile, a copy is kept on our servers (cloud save), together with records that stop rewards from being granted twice and keep your purchases working.

Moving to a new phone

To move your profile to another device, you can:

• sign in with Apple, on iPhone or iPad;
• sign in with Google, in the web version;
• use a one-time move code shown on your old device; or
• use a backup key.

Sign in with Google is not currently available in our iPhone, iPad, or Android apps, so in the Android app you can move your profile with a move code or a backup key, or ask us for help (see "Help getting back into your profile"). Move codes and backup keys are being introduced gradually and may not yet be available in your version of the Game or on your device.

We store only a protected, hashed form of each code and key. When a device joins your profile, we record the date, the platform (for example iPhone or Android), and how it joined, so we can keep your profile secure and help if something goes wrong.

4. Leaderboards

If you use the leaderboards, other players can see:

• your leaderboard name (a display name you choose, or an automatically created handle if you do not choose one);
• your scores, including your running totals for the week and for all time; and
• the cosmetic dinosaur and badges you have equipped.

Please do not use your real name as your display name.

When you play a level that can count toward the leaderboards, we keep a short record of that game: when it started and whether and when it counted toward your leaderboard totals. We use it only to prevent cheating and to make sure each game counts once, and we delete it within 7 days.

If your age is not confirmed. You can choose "Show my scores" to put your scores on the leaderboard. Other players see only your scores (including your running totals for the week and for all time), your rank, your current season, any badges you earn, and a dino name the Game creates for you, like SwiftRaptor-42. You cannot type a name, and we do not create an online profile. To keep your scores, the Game creates a random leaderboard ID on your device. It is not your device's advertising ID, your install ID, or any hardware ID, and we do not connect it to anything else. This is not available in the United Kingdom, the European Economic Area, Switzerland, Gibraltar, Jersey, Guernsey, the Isle of Man, or Brazil, or where we cannot tell your app store's country. It is also not available if your device or your own answer shows you are under 13, or if your app store or your own answer shows you are 13 to 17. You can remove your scores at any time in Settings with "Remove my scores". If your age is later confirmed as adult, your earlier scores stay under the dino name, separate from your profile, until they are deleted as described in "How long we keep information". You can still remove them in Settings with "Remove my scores".

5. Purchases (iPhone, iPad, and Android only)

The store transaction ID, the product purchased, its price and currency, and refund, cancellation, and renewal events. Apple or Google takes your payment; we never see or store your payment card.

If you buy without an online profile, RevenueCat records the purchase under a random purchase ID that is not linked to a profile, and your items are kept on your device. Items that can be restored come back through "Restore purchases".

6. Gameplay analytics (adult-confirmed profiles only)

In-game events such as levels started and completed, tutorial progress, offers shown, and ads offered or rewarded. These are linked to your player ID and a per-session identifier, together with the app version, build, and platform. On the web version only, we also record how you first arrived: the campaign tags in the link you followed or, if there were none, the domain name of the website that linked you (never the full address).

7. Advertising information (iPhone, iPad, and Android apps only)

The web version and the versions on third-party game websites show no ads. In the apps, ads are provided by Google AdMob:

• Adult-confirmed profiles: AdMob may collect your device's advertising identifier (on iPhone and iPad, only if you allow tracking), an approximate location derived from your IP address, and your interactions with ads. See "Advertising and tracking."
• Teen profiles and profiles without a confirmed age: we request ads using Google's age-protective settings. These ads are not personalized and are limited to general-audience content. Google's settings stop your device's advertising identifier from being sent. Google still receives the technical information it needs to deliver and count an ad and to prevent fraud, such as your IP address and device type.
• Under-13 profiles: the Game does not start ads or request ads, and no ads are shown.

8. Support

Messages you send us.

• If you email us, we receive your email address and your message.
• If the in-game support form is available and you choose to use it, we receive your message, the topic you pick, your name and email address if you choose to give them, and limited technical details about the app (such as its version and your device type) to help fix the problem.
• We encrypt what you send through the form and use it only to answer you and fix problems.
• If a support agent adjusts your account, we record what changed and who changed it.

Help getting back into your profile. If you cannot get into your profile, you can ask us for help at info@c4saas.com.

• Proving the request is yours. To protect you, we will ask for one of the following:
  • a code we send to the email linked to your profile, repeated back to us; or
  • the order or transaction number from your purchase receipt, together with the product you bought or the date you bought it, and other details about that purchase.
• If we can confirm it. We email you a single-use recovery key that expires after 24 hours. If your profile has a linked email, we notify that address when the key is sent and again when it is used.
• If it was not you. If a recovery key was used without your permission, tell us right away and we will help secure your profile.
• Availability. Recovery help is provided by a small team and may not be available at all times. We cannot help with profiles that have no linked sign-in and no purchases.
• Records. We keep a record of each request and our decision for 24 months to prevent fraud.

9. Information stored on your device

The Game stores your progress and settings in your device or browser storage so it works between sessions, including offline. This includes the age-check result described in "How the Game handles age" and, where device counting is on, your install ID. If you turn on reminders, they are scheduled on your device; we do not receive them. We do not use advertising or analytics cookies on our websites or in the web version, and our websites load no third-party trackers.

10. Counting the devices that use the Game (all players)

The install ID. When you first open the Game, it creates a random ID on your device (an "install ID"). It is not your device's advertising ID or any hardware ID, and it does not contain your name, email address, or age.

What the Game sends us. The install ID, the platform (iPhone, iPad, or Android), the Game version, and your operating system's major version. It sends this once when you first open the Game, and at most once a day after that.

What we use it for. Only to count:

• how many devices install and use the Game each day, week, and month;
• how many come back; and
• which versions are in use.

That is how we keep the Game working and improve it.

What we do not do with it.

• We do not use it to contact you, to show or measure ads, to decide what offers you see, or to build a profile about you.
• We do not share it with advertisers, Meta, Google AdMob, or anyone else, except the companies that host our servers for us.
• We do not store your IP address with these counts.

Your profile. If you have an online profile, we connect the install ID to your profile so that a reinstall or a new phone is counted once.

How long we keep it. We delete each daily record 24 months after the day it records, and each install ID 24 months after the device was last used. After that we keep only totals that cannot identify a device.

Your controls. Wherever counting is on for your device, Settings includes "Reset usage ID", which deletes the records for the old install ID and creates a new one.

Where we do not count. We do not create an install ID or collect these counts on devices in the European Economic Area, Switzerland, or Brazil, or where we cannot tell the region. For now, that includes the web version and the United Kingdom.

We are turning this on gradually. Until it is on for your device, nothing described in this section is sent.

11. Ad measurement with Meta (adult-confirmed profiles; iPhone, iPad, and Android apps only)

We advertise Ploposaurus on Facebook and Instagram. To learn which of those ads lead people to install and play the Game, our iPhone, iPad, and Android apps include Meta's App Events software (the "Meta SDK"), provided by Meta Platforms, Inc. ("Meta").

When it runs. The Meta SDK is switched off unless all of these are true:

• your profile is adult-confirmed by your device's app store (see "How the Game handles age"); your own answer to the birth-year question never turns it on;
• you are not in the European Economic Area, the United Kingdom, or Switzerland, and Google's consent tool reports that no consent is required where you are (if it reports anything else, or cannot answer, the Meta SDK stays off);
• on iPhone and iPad, you chose "Allow" in Apple's App Tracking Transparency prompt (if you did not, the Game does not start the Meta SDK at all);
• your version of the app includes the "Ad measurement with Meta" switch in Settings, and you have not turned it off.

What it sends Meta. When the Meta SDK is on, the information it sends Meta includes:

• that the app was installed and opened;
• when you finish the tutorial, and when you complete a level, with the level number;
• your device's advertising identifier (the IDFA on iPhone and iPad, the advertising ID on Android) and a random identifier the Meta SDK creates for the app on your device; and
• technical information such as your IP address, device model, operating system, and app version, other technical information the Meta SDK collects automatically, and, if the Meta SDK itself crashes, a crash report.

What it never sends. We do not send Meta your name, email address, player ID, leaderboard name, save file, or age range. The Meta SDK never runs for profiles that are not adult-confirmed, including teen and under-13 profiles, and the web version of the Game does not include it.

We are turning this on gradually. Until it is on for your device, nothing described in this section is sent.

How we measure our marketing

Our websites at ploposaurus.com and ploposaurus.c4saas.com have App Store and Google Play buttons. Most buttons open the store directly. Their links include a campaign tag that names the page and the spot on the page where the button appears (for example "web-index-hero"). Where a button uses our counting step, tapping it first opens our own address (ploposaurus.c4saas.com/go/ios or ploposaurus.c4saas.com/go/android), which immediately forwards you to the store. That step is recorded in our server records like any other request (see "Technical information our servers receive"). We are introducing this counting gradually.

• We keep totals only. Where counting is in place, we count website visits and store-button taps once a day for each campaign tag, for example the video or post that linked you. We keep only the daily totals, which contain no IP address, browser details, or other information about you. A visit without campaign tags is counted as "landing."
• Campaign tags describe our posts, not you. They name our channels and posts. We never put a name, an email address, or any other identifier of a person in a campaign tag.
• Google Play. Our Google Play links include the campaign tags as an "install referrer." Google Play uses it to report to us, in total, how many installs came from each campaign. Our own code in the Game does not read the install referrer. In the Android app, for adult-confirmed profiles only, the Meta SDK described in "Ad measurement with Meta" may read it.
• App Store. Our App Store links, and the App Store banner Safari may show on our pages, include Apple's campaign fields: our provider number and a campaign name. Apple reports to us, in total, how many App Store visits and downloads came from each campaign.
• Apple and Google report these numbers to us only as totals; they do not tell us who you are. Your visit to their stores is covered by their own privacy policies.

Versions on third-party game websites

We may publish a version of the Game on third-party game websites such as itch.io, Newgrounds, or CrazyGames. That version runs entirely inside your browser and does not connect to our servers. It has no ads, purchases, accounts, leaderboards, sharing, or analytics, so it sends us nothing. Your progress is saved only in your browser's storage for that website, and clearing that website's data in your browser deletes it.

The website that hosts the game is operated by its own company. That company may collect information about your visit (for example for its own accounts, ads, or analytics) under its own privacy policy. We do not control or receive that information.

How we use your information

• To run the Game: deliver game content and settings, create and restore online profiles, sync saves, deliver items and purchases, run leaderboards, and answer support requests.
• To apply age-based limits: decide which features each profile can use, as described in "How the Game handles age."
• To keep the Game secure: prevent fraud, cheating, abuse, and duplicate rewards, verify requests for help getting back into a profile, and fix problems.
• To count devices: count, using the install ID, how many devices install and use the Game and which versions are in use, as described in "Counting the devices that use the Game."
• To understand and improve the Game (adult-confirmed profiles only): measure how features are used and how far players progress.
• To measure our marketing: count, in total, which of our campaigns bring visitors and installs, so we know which channels are worth continuing. This is not used to target you and is not shared with advertisers.
• To measure our ads on Facebook and Instagram (adult-confirmed profiles, apps only): learn which of our ads lead to installs and play, through Meta, as described in "Ad measurement with Meta." This is separate from the totals-only counting described in "How we measure our marketing."
• To personalize offers: for profiles that can make purchases, decide which in-game offers to show based on your game state and past purchases.
• To show ads: in the apps, as described in this policy.
• To meet legal obligations.

Advertising and tracking

This section applies to the iPhone, iPad, and Android apps. The web version and the versions on third-party game websites show no ads.

Google AdMob. Ads are provided by Google AdMob. For adult-confirmed profiles, AdMob may use your device's advertising identifier, an approximate location derived from your IP address, and your ad interactions. It may combine this with information from other apps and websites to show and measure ads. Under Apple's rules, that is "tracking."

• iPhone and iPad: the Game shows Apple's App Tracking Transparency prompt. Tracking happens only if you allow it and your profile is adult-confirmed. If you decline, you still see ads, but they are not personalized using information from other apps and websites.
• Android: you can limit ad personalization, or delete your advertising ID, in your device settings.
• EEA, UK, and Switzerland: where required, the Game asks for your consent through Google's consent tool before ads are shown, and ads stay off if your choice cannot be confirmed. In the EEA, the UK, and Switzerland, the Game does not use the Meta SDK.
• Profiles that are not adult-confirmed: ads are never personalized and your advertising identifier is not sent, whatever you choose in these prompts.

Meta (ad measurement). Meta may combine the information the Meta SDK sends with information it has from other apps and websites and from any Facebook or Instagram account you have. It uses that information to measure our ads, to help decide who sees them, and for the other purposes described in Meta's Privacy Policy (https://www.facebook.com/privacy/policy). Under Apple's rules this is "tracking." Your choices:

• iPhone and iPad: the Meta SDK runs only if you allow tracking. You can change your choice at any time in your device's Settings under Privacy & Security, Tracking.
• In the Game: turn off Settings, Ad measurement with Meta. Every app version that can run the Meta SDK has this switch. Turning it off stops the Meta SDK on that device from the next time you open the Game.
• Android: you can also delete or reset your advertising ID in your device settings. That stops your advertising ID from being sent, but by itself it does not stop the other information listed in "Ad measurement with Meta."
• Meta: if you have a Facebook or Instagram account, Meta's own settings let you control how Meta uses information it receives from apps and websites like ours. See Meta's Privacy Policy.

Turning off ad measurement does not change the Game, your progress, or your purchases. Information Meta has already received is kept and used by Meta under its own policies.

Tracking by other companies. We do not allow other companies to collect information about your activity over time and across other apps or websites through the Game or our websites, except:

• Google AdMob and Meta, in the iPhone, iPad, and Android apps, for adult-confirmed profiles only; and
• Google or Apple, when you choose to sign in with them.

Do Not Track. Our websites and web version do not track you across other websites, so they do not change their behavior in response to a browser "Do Not Track" signal. Where required by law, we honor opt-out preference signals such as Global Privacy Control.

Who we share information with

We do not sell your personal information for money. We share it only as described here and under "Your privacy choices and rights."

We may also disclose information when the law requires it, or to protect players, us, or others. We may also disclose it as part of a merger, acquisition, or sale of assets, in which case this policy will continue to apply to the information transferred.

RevenueCat and our hosting providers act as our service providers (processors). They are bound by contract to use your information only on our instructions. Google (for AdMob, sign-in, and Google Play), Apple, and Meta act under their own terms as independent companies, not on our instructions.

How long we keep information

We may keep a minimal record where the law requires or permits it, for example to prevent fraud, honor an opt-out, or complete financial records. Payment records held by Apple or Google are kept under their policies, not ours.

Your privacy choices and rights

Everyone. You can ask for a copy of the information we hold about you, ask us to correct or delete it, or ask a question, by emailing info@c4saas.com. We may need to confirm that a request comes from you, for example through the Game.

Deleting your data.

• If you have an online profile, go to Settings, then Account, then Delete in the Game. No support contact is needed.
  • This removes from our active systems right away: your profile, devices, save, purchase entitlements, leaderboard entries, analytics, and linked Apple and Google identifiers and email.
  • If you chose "Show my scores" before your age was confirmed, those scores are not linked to your profile. Deleting your account in the Game on the device where you chose "Show my scores" also deletes them, and so do "Remove my scores" and "Delete my data" in Settings. If you delete your account another way, for example by email or from another device, use "Remove my scores" on that device to delete them from our active systems right away.
  • If you signed in with Apple, you can also remove the Game from Sign in with Apple in your Apple Account settings.
  • Deleted data leaves our encrypted backups on the schedule shown in "How long we keep information."
  • Deleting your account does not delete information the Meta SDK already sent to Meta.
• If you never had an online profile, your game data is stored only on your device, except leaderboard scores if you chose "Show my scores". Reset your progress in Settings, uninstall the app, or clear the website's data in your browser.
  • If you chose "Show my scores", "Remove my scores" or "Delete my data" in Settings deletes your leaderboard ID, scores, and season from our active systems right away. Uninstalling the app or clearing your browser data does not delete them from our servers. Weekly scores and totals are deleted 90 days after the week ends, and your leaderboard ID, best score, lifetime total, and season 12 months after your last score.
  • Where device counting is on, "Reset usage ID" in Settings deletes the records for your install ID.
  • Our short-term server records, such as request logs, are not linked to an online profile and are deleted on the schedule above. If you chose "Show my scores", the short game records described in "Leaderboards" are kept with your leaderboard ID and deleted within 7 days.

EEA and UK (GDPR). You have the right to access, correct, erase, restrict, or port your personal data, to object to processing based on legitimate interests, and to withdraw consent at any time where we rely on consent. You can also complain to your local data protection authority. We rely on these legal bases:

• Performance of a contract: to run the Game, create and restore online profiles, sync saves, sign you in when you ask, run leaderboards you choose to use, process purchases you request, and answer support requests.
• Legitimate interests: to keep server records for delivering and securing the Game and preventing abuse; to count marketing results in total; to analyze and improve the Game for adult-confirmed profiles; and to prevent fraud, including when we verify a request for help getting back into a profile. We weigh these interests against your rights, with particular care for younger players, which is why we keep only totals and delete server records on a short schedule.
• Consent: for personalized advertising, given through Apple's tracking prompt or Google's consent tool. You can withdraw it at any time.
• Legal obligation: to apply age-based limits where the law requires them and to keep financial records.

We do not make decisions about you based solely on automated processing that have legal or similarly significant effects. Our age-based feature limits apply automatically from the age range your device shares (or, where it is available, your answer to the birth-year question). Contact us if you think a limit is wrong.

California and other U.S. states. In the past 12 months we have collected:

• identifiers (such as IP address, device and player IDs, and email address);
• commercial information (purchases);
• internet or other electronic network activity (server records, gameplay analytics, and ad interactions); and
• approximate location derived from IP address (used by AdMob).

When device counting is on for your device, the identifiers also include the install ID. You have the right to know, access, correct, and delete your personal information, and not to be discriminated against for exercising these rights.

Sharing for ads. We do not sell your personal information for money. For adult-confirmed profiles only, some U.S. state laws may consider the following "sharing" (or a "sale"):

• our use of advertising identifiers with AdMob, for cross-context behavioral advertising; and
• the app activity and identifiers the Meta SDK sends to Meta, for ad measurement.

You can opt out:

• on iPhone and iPad, decline the App Tracking Transparency prompt or turn off "Allow Apps to Request to Track" in Settings;
• in the Game, turn off "Ad measurement with Meta" in Settings (every app version that can run the Meta SDK has this switch);
• on Android, delete your advertising ID or opt out of ad personalization in your device settings.

If you email info@c4saas.com, we will help you with these steps. We do not sell or share the personal information of profiles that are not adult-confirmed.

Brazil (LGPD). If you are in Brazil, you have similar rights, including access, correction, deletion, and portability. Contact info@c4saas.com to use them.

International data transfers

We are based in the United States, and our service providers process data in the United States and other countries. This means that information about players in the EEA or the UK is processed outside those areas. Contact us if you would like more information about how those transfers are protected.

Children

The Game is made for a general audience of teens and adults, and our Terms of Service require players to be at least 13. The Game is not directed to children under 13, and we do not knowingly collect personal information from children under 13, except as described in this section.

What we collect before an adult age range is confirmed. Because anyone can download a free game, the Game is built so that it collects no personal information from a player before that player's profile is adult-confirmed (see "How the Game handles age"). The only exceptions are the following:

• Technical information. Our servers receive the IP address and device or browser type with each request. In the apps, Google receives similar technical information to deliver a non-personalized ad.
  • We use this information only for the Game's internal operations: to deliver the Game and its content, keep it secure, prevent fraud, serve non-personalized ads and limit how often they appear, and count visits in total.
  • It is not used to contact anyone, to build a profile of anyone, or for personalized advertising.
  • We delete our server records within 4 months.
• The install ID. The Game is intended for players 13 and older, but we know younger children may play.
  • From every device where device counting is on, including a device used by a child, we collect one persistent identifier: the install ID described in "Counting the devices that use the Game." We collect no other personal information for this purpose.
  • We use it only to support the internal operations of the Game: to maintain and analyze how the Game functions (how many devices are active, whether they return, and which versions are in use) and to protect our servers from abuse.
  • To make sure it is used for nothing else, we:
    • keep it in separate storage from our advertising and gameplay analytics;
    • give access only to the staff who maintain these counts;
    • never use it to contact anyone or for behavioral advertising;
    • never use it to build a profile of any individual; and
    • never disclose it except to our hosting providers.
• Leaderboard scores. If a player whose age is not confirmed chooses "Show my scores", we collect one persistent identifier, a random leaderboard ID, together with that player's scores, running totals, and current season number. We use it only to support the internal operations of the Game: to record scores, confirm that a score came from the device that earned it, and keep the leaderboard fair. Other players see only an automatically created dino name, never anything the player types. We keep the leaderboard ID separate from the install ID, our advertising and gameplay analytics, and any online profile; we never use it to contact anyone, for advertising, or to build a profile of any individual; and we never disclose it except to our hosting providers.
• Restoring an existing profile. On some devices, a player can restore a profile that already exists after answering the birth-year question described in "How the Game handles age." Restoring stays off if the answer shows the player is under 18.

Under 13 and Meta.

• If a device reports that a player is under 13, or a player's own answer to the birth-year question shows under 13, the Game shows no ads, offers no purchases, creates no online profile, sends no gameplay analytics, and does not put scores on the leaderboard. Any scores that device already posted are deleted.
• The Meta SDK never runs for under-13, teen, or unconfirmed profiles, and nothing about those players is sent to Meta.

Our data retention policy for children's information.

• Install ID.
  • Purpose: the install ID and daily activity records are collected only to count usage and operate the Game, as described above.
  • Business need: most of our counts use only the most recent 30 days of records. We keep daily records for up to 24 months for one reason: if we find an error in how a count was calculated, or correct how a count is defined, we can recalculate up to two years of counts accurately, which totals alone cannot do.
  • Deletion: each daily record is deleted 24 months after the day it records, and each install ID is deleted 24 months after the device was last active. Totals kept after that contain no install ID.
• Leaderboard ID.
  • Purpose: to record and display scores, running totals, and seasons, as described above.
  • Business need: the weekly board needs the current week's scores and total, and the all-time board needs each player's best score and lifetime total while that player is still playing.
  • Deletion: weekly scores and totals are deleted 90 days after the week ends, and each leaderboard ID and its best score, lifetime total, and season are deleted 12 months after its last score.
• Server records with IP addresses. These are kept for up to 4 months to deliver the Game, investigate errors and abuse, and keep the Game secure, then deleted automatically.
• Backups. Our backups are encrypted and access-restricted. We are moving them to a schedule under which deleted records leave every backup copy within 60 days; until that is complete, deleted records can remain in older backup copies for longer.

Parents and guardians. If you are a parent or guardian and believe your child has given us personal information, contact C4 Payments LLC at info@c4saas.com, (972) 382-5878, or 2653 Sagebrush Dr, Suite C, Flower Mound, TX 75022, USA. You can review the information, have it deleted, and refuse further collection, and we will delete it.

Security

We protect information with measures suited to its sensitivity. These include:

• encrypted connections;
• hashed recovery codes, move codes, and backup keys;
• encryption of support-form messages and of our backups; and
• limited access to our systems.

No system is perfectly secure, so please use a display name that does not identify you.

Changes to this policy

We may update this policy. When we do, we will change the date at the top. If we make a significant change, we will give you notice before it takes effect, for example in the Game, and we will give any other notice the law or the app stores require.

Contact us

C4 SaaS (C4 Payments LLC), 2653 Sagebrush Dr, Suite C, Flower Mound, TX 75022, USA. info@c4saas.com. (972) 382-5878.