Eggnapped Privacy Policy

Effective: October 11, 2026

This policy explains what data Eggnapped (the game for iPhone, iPad and Android, and its server) handles, why, for how long, and what you can do about it. It is written so a parent can understand it without being an expert. If anything is unclear, write to the contact email.

1. Who is responsible

The party responsible for your data (the "data controller") is the publisher of Eggnapped. Their details and the contact email are in the box "Who is responsible for Eggnapped" at the bottom of this page.

2. What data we handle and why

What we do NOT collect

• Real name, email address, phone number or home address.
• Location (precise or approximate).
• Contacts, calendar, microphone, camera or voice.
• Your photos. "Photo mode" takes a picture of the game and, if you ask, saves it to your library using "add only" permission: the game cannot see your other photos and that picture is not sent to our server.
• The phone's advertising identifier. We don't ask for tracking permission because we don't track anyone.
• Payment details.

Advertising and analytics

Eggnapped shows no ads and contains no third-party advertising or analytics tools. We don't build behavioral profiles or make automated decisions about you, other than the chat and nickname filter, which blocks words automatically.

3. What other players can see

• Your nickname and number, your character, your pets, your base and how you are doing in the match, while you share a room.
• Your accepted friends can also see whether you are online, whether you are in a room, and how long ago you last played.
• Nobody sees your birth date, your purchases or any identifier.

4. Chat and how it is kept safe

• Quick phrases for everyone: picked from a fixed list; nothing is typed by hand.
• Typed chat: only between friends who accepted each other, and only if both said they are 13 or older. Without a birth date, the account is treated as a child's.
• An automatic server-side filter blocks phone numbers, emails, links, social media handles, addresses, questions about age or where you live, sexual content and requests to meet in person, and masks insults. No filter is perfect.
• Any player can report, block and mute another player, and chat can be turned off completely in Settings.
• A person reviews reports and can mute or suspend accounts.

Age is declared by the player; we do not verify it with documents. If you are a parent and believe your child entered the wrong date, write to us and we will correct it.

5. Children

Eggnapped is designed to be played by children, including children under 13, which is why it is built to work without any personal contact information:

• For a child under 13 we only handle the identifiers needed for the game to work, their nickname, their birth month and year, and their saved game. They cannot send or receive free-text messages.
• We show them no advertising and use their data for nothing other than the internal operation of the game (saving progress, safety and preventing cheating).
• We do not ask for more information than is needed to play.

Parents and guardians: at any time you can ask us to show you the data in your child's account, correct it, stop handling it, or delete the account. Write to the contact email with the player's nickname and number (for example, Rapi#4821). You can also delete the account yourself from inside the game. There is more help in the Parents' Guide.

If your country requires a parent's permission to use an online game, please ask for it before playing.

6. Who the data is shared with

We do not sell data or share it for advertising. Only these providers are involved, acting on our behalf or on yours:

These providers may handle data outside your country, in particular in the United States. Using the game involves that transfer, which is necessary to provide the service.

7. How long data is kept

• The account and saved game: for as long as the account exists. We do not currently delete inactive accounts automatically; you can delete yours whenever you want.
• The session: until you sign out or delete the account.
• Chat messages: only in the server's memory (the last 30 per room or conversation); they are lost when the room closes or the server restarts. If they are reported, they are copied into the report.
• Behavior reports: kept even if the account is deleted, as a record of what happened and to protect other players. They include the nicknames and the messages from that moment.
• Purchase records (transaction number, product, date and the internal account identifier, which is a random number): kept even if the account is deleted, to prevent fraud, handle refunds and meet tax obligations.
• Technical logs: kept by the hosting provider for a limited time and then removed.

8. What happens when you delete the account

The full profile (nickname, birth date, saved game, device, Apple and Google identifiers), all sessions, friendships and blocks are deleted from the server immediately. The game saved on that device is deleted too and, if you signed in with Apple, Apple is asked to revoke the game's access. Only the reports and purchase records described above remain. It cannot be undone. The steps are in How to delete your account.

9. How we protect data

The connection to the server is encrypted. We keep the minimum: what we don't have cannot leak. Session keys are stored as a hash and purchase receipts are verified on the server. Even so, no system is infallible; if an incident significantly affected your data, we would let you know.

10. Your rights

You, or your parent or guardian if you are a minor, can:

• Access the data we hold about the account.
• Correct anything that is wrong (for example, the birth date; the nickname can be changed in the game).
• Delete: ask us to erase it, or delete the account from the game.
• Object to a particular use or ask us to restrict it, and withdraw consent.

In Mexico these are known as ARCO rights. To exercise them, write to the contact email stating: the nickname and number (for example, Rapi#4821), which right you want to exercise and, if you are writing on behalf of a child, that you are their parent or guardian. Because we store no name or email, we may ask for a screenshot of the "My account" screen to confirm the account is yours. We will reply within 20 business days. It is free.

If you feel we did not handle your request properly, you can contact the data protection authority in your country.

If you live in the United States

We follow the Children's Online Privacy Protection Act (COPPA): parents can review their child's data, ask for it to be deleted, and refuse further handling of it, by writing to the contact email. We do not sell personal information.

If you live in Europe or the United Kingdom

We handle data because it is necessary to provide the game you asked for (saving your progress, online play), because of our legitimate interest in keeping it safe and free of cheating, and to comply with the law (purchase records). You also have the right to data portability and to lodge a complaint with your national data protection authority.

11. Changes to this policy

If we change anything important we will publish it on this same page with its new date and, when the change warrants it, announce it inside the game.