Privacy Policy — Steal & Hatch

Effective Date: October 26, 2026 · Developer: Tapmochi Games · Contact: support@tapmochi.com

This policy explains what information the mobile game "Steal & Hatch" (the "App") collects, why, who processes it and the choices you have. The App is intended for users aged 13 and over and is not directed at children.

Summary

• No account, no sign-in. The App never asks for your name, email address, phone number, contacts, photos or precise location.
• Your game progress (coins, eggs, pets, upgrades, quests) is stored on your device. We do not keep a copy on our servers.
• We use Google services to understand how the game is played, to measure which of our ad campaigns bring new players, to fix crashes, to adjust game settings remotely and to show ads.
• We do not sell your personal information for money.

Information collected automatically

1. Gameplay analytics and install attribution — Google Firebase Analytics

Events about how the game is played (for example: tutorial steps, runs started and finished, eggs delivered, pets hatched, merged and evolved, upgrades bought, nests and maps unlocked, quests and daily gifts claimed, ad offers shown and watched), session start and length, app version, device model, operating system version, language, country (derived from your IP address; the IP address itself is not stored by Analytics), an app instance identifier generated for this installation, your device's advertising ID (unless you have deleted it or opted out in Android settings) and install-referrer information (which store page or ad campaign led to the install). Because our Firebase project is linked to Google Ads, the install and a few key events (for example finishing the tutorial) are used to measure our own ad campaigns.

2. Crash reports — Google Firebase Crashlytics

If the App crashes or hits a serious error: the crash stack trace, device model, operating system version, app version, free memory/disk, a Crashlytics installation identifier, a short log of the most recent game events (for example "run started", "pet hatched"), technical error messages (for example a failed save) and a few game-state values that help us reproduce the problem (current nest number, tutorial step, app build and remote-settings version).

3. Remote game settings — Google Firebase Remote Config

The App downloads game settings (for example balance values) from Firebase. To do this it uses a Firebase installation identifier and basic device and app information. Remote Config is not used to build a profile of you.

4. Advertising — Google AdMob

The App shows ads served by Google AdMob. Rewarded ads are always optional: you choose to watch one in exchange for an in-game reward. To show, measure and limit ads and to prevent fraud, AdMob collects your device's advertising ID, an app set identifier, your IP address (which Google may use to estimate your general location), device and app information, and your interactions with ads (views, clicks, ad revenue events). Ads are limited to content suitable for teenagers and older (maximum content rating "T").

5. Local notifications

The App can schedule reminders on your device (for example "Your epic egg hatched!" or "Your coin chest is full!"). They are created and stored on your device only; no notification data is sent to us or to a server. On Android 13 and later the App asks for permission once, during play. You can turn notifications off at any time in Android Settings → Apps → Steal & Hatch → Notifications.

Consent (EEA, UK and Switzerland)

In the European Economic Area, the United Kingdom and Switzerland we use Google's User Messaging Platform, a consent management platform certified under the IAB Europe Transparency & Consent Framework, to ask for your choices when you first open the App.

• Until you answer, we treat your choice as "no consent": no personalised ads, and the consent signals we pass to Google (ad storage, ad user data, ad personalisation) are set to "denied".
• After you answer, the App reads the choices you made in the consent message and uses data only for the purposes you agreed to. If you decline personalised ads, any ads shown are non-personalised or limited ads; these still use device and ad-interaction data for frequency capping, measurement and fraud prevention, as allowed by Google's policies.
• Gameplay analytics in these regions follows the same choice: if you refuse the purposes needed for measurement, analytics storage is set to "denied".
• You can change your choices at any time in the game: Settings → Privacy options (this button appears only in regions where a consent choice is required).

How we use information

• To run the game and deliver remote game settings.
• To find and fix crashes and performance problems.
• To understand which features players use and improve the game and its balance.
• To measure which of our own ad campaigns bring new players (install attribution).
• To show ads, measure their performance and prevent ad fraud.

Legal bases where the GDPR or UK GDPR applies: in the EEA, UK and Switzerland, analytics, campaign measurement and personalised advertising rely on the choices you make in the consent message; crash reports and remote game settings rely on our legitimate interest in keeping the game working. Elsewhere we rely on our legitimate interests in running, improving and promoting the game.

Who processes the information

Google LLC (and its affiliates) processes this data as our service provider for Firebase and Google Ads measurement and as the provider of AdMob, under Google's terms and privacy policy:

• How Google uses data from apps that use its services: https://policies.google.com/technologies/partner-sites
• Google Privacy Policy: https://policies.google.com/privacy
• Firebase privacy and security: https://firebase.google.com/support/privacy

Google may process data on servers outside your country, including in the United States, with safeguards such as the European Commission's Standard Contractual Clauses. We do not share your information with any other third party, except where required by law.

Data retention

• Game progress: on your device until you uninstall the App or clear its data. If Android backup is turned on for your Google account, Android may also keep a copy in your device backup, managed by Google under your Google account settings.
• Gameplay analytics (event-level data): 2 months, after which it is deleted automatically. Aggregated reports that do not identify an installation may be kept longer.
• Crash reports: up to 90 days.
• Advertising data: retained by Google under the Google Privacy Policy.

Your choices and rights

• Advertising ID and ads personalisation: delete or reset your advertising ID, or opt out of ads personalisation, in Android Settings → Google → Ads (or Settings → Privacy → Ads, depending on your device). This also stops the advertising ID from being used for analytics and campaign measurement. Where required, also in the game under Settings → Privacy options.
• United States: you can stop the use of your advertising ID for personalised ads at any time by deleting it or opting out of ads personalisation in Android settings (see "Advertising ID and ads personalisation" above). You can also email support@tapmochi.com to exercise any rights you have under your state's privacy law; we will answer within the time that law requires.
• Notifications: turn them off in Android Settings at any time.
• Delete game data: uninstall the App or clear its storage in Android Settings; this deletes your game progress on the device. A copy in your Android backup can be removed from your Google account's backup settings.
• Requests: you can ask us to access or delete data, or object to its use, by emailing support@tapmochi.com. Because the App has no account, the data we hold is linked only to random installation identifiers, not to your name or email; we will explain what we can find and delete for your request. Depending on where you live (for example the EEA, UK or California), you may have additional rights under local law, including the right to complain to your data protection authority.

Children

The App is not designed for or directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has used the App and provided data, contact support@tapmochi.com and we will delete what we can identify.

Security

Data sent by the Google services above is encrypted in transit (HTTPS). Your game save is stored in the App's private storage on your device.

Changes

We may update this policy when the App changes (for example when new features or services are added). The "Effective date" above shows the current version; significant changes will also be noted in the App's store listing release notes.

Contact

Tapmochi Games — support@tapmochi.com · https://tapmochi.com