The short versionOne minute
That is the whole of it.
- There are no accounts.You never sign in.
- We never ask about you.No name, email, phone number, birthday or photo.
- There is nowhere to type.Your player name is made up for you.
- Your progress lives on your phone or tablet.Not on our servers.
- What leaves it is a score, your Humlet, and some counting.With a random id that is not tied to you.
- We never ask where you are.No location, ever.
- We do not sell or share your information.Ads never follow you around.
- The game plays offline.All of it.
The detailSections 1 to 19
The detail.
1. Who we are
Planet Plink is made by [Company Legal Name], [Address].
For privacy questions, including anything about a child, write to privacy@modernerabrands.com. We answer within 30 days, usually sooner.
2. No accounts, no sign in
You open the game and play. No registration, no login, no password, no "continue with Apple" or "continue with Google". Nothing connects your play to your name, email or phone number.
3. Your player id
The first time you open the game, your device makes a random id: p_ and 16 random characters. It comes from your phone's own random number generator. It is not your device's serial number or advertising id.
It exists so a leaderboard keeps one row for you, a crew knows its members, and a duel result lands in the right place.
It is kept in the app's private storage on your iPhone, iPad or Android device. Delete the app and it goes. A fresh install makes a new one, unless your phone restores the app from its own backup.
4. Your name is made up for you
Your name comes from word lists on your device: two words and two digits, like "Bright Comet 42". You can make a new one in Settings, and undo it. Crew names are made the same way.
5. There is nowhere to type
There is no text box anywhere in Planet Plink. No chat, no messages, no comments, no custom names, no photo upload, no microphone, no camera. Nobody can say anything to your child, because the game gives nobody a way to say anything.
The social things you can do: send a link to challenge someone on the same board, invite a friend or join a crew with a link, and share a picture of your score that your device draws.
6. What we send to our servers
Our servers run on Cloudflare. This is the full list.
| What | When | Why |
|---|---|---|
| Your player id | With every request | One row per player, and to stop abuse |
| Your made-up name | With a score, a crew, a duel or a league place | So the row has a name |
| Your score, the mode and the date | When a run posts to a leaderboard, a duel or a league | Leaderboards, duels, leagues |
| Run counts: hugs, Big Bangs, biggest Humlet, run length | With a score | To check a score is possible, and to count Big Bangs for the live number |
| The Humlet you chose | With a score, a crew, a duel | So your row looks like you |
| Your crew id, if you are in one | With a score | So your crew's weekly goal counts your play |
| The id of the friend who invited you, if you opened their link | With a score | So you both get the invite reward |
| Inbox claims | When you claim a reward | So it is paid once |
| An award you unlocked | When it unlocks | To show how rare each award is |
| Counting events | In small batches | See section 7 |
Never sent: your location, contacts, photos, calendar, microphone, other apps, browsing, advertising id, or anything typed (there is nowhere to type).
Everything else stays on your device: your save, your Humlets, your Stardust, your stars, your Garden, your Cubby, your streak, your settings, your purchase history, and anything waiting for signal.
Our servers see your internet address, because every connection has one. Cloudflare uses it to deliver the response and stop abuse. We never store it with your player id and never use it to find where you are.
7. Counting, with no analytics company
The game sends small counting events, like "a run started", to our own server. Before they leave your device, the code strips anything that looks like an id or a name. The server adds them to a daily total and throws the messages away, including who sent them. There is no per-player event table.
There is no third-party analytics kit, attribution kit or crash reporter in the app. Apple's App Store Connect and the Google Play Console give us their own totals about installs and crashes.
8. We never ask where you are
Planet Plink does not ask for location and has no feature that uses it.
One caveat. If you choose to watch a reward video, Google AdMob (section 10) estimates a rough area from your internet address, as any website can. We never receive it.
9. Purchases
You can play the whole game without paying.
Payment is handled by Apple on iPhone and iPad and Google on Android. They take the money and send the receipt. We never see your card, bank details, billing address or store account.
RevenueCat checks that a receipt is real and remembers what you own (No Ads, a Star Pass) so a reinstall can restore it. It gets the receipt and an anonymous RevenueCat id. It does not get our player id or your payment details.
Two things in the shop are random: the Mystery Box and One Crank. Their odds are published before you buy (terms, section 7). Buying one sends nothing more about you than any other purchase.
10. Ads
One ad a day before your first play, and one before your first free play. Nothing else starts on its own.
Everything else is a reward video you choose: you tap a button that says what you get, you watch, you get it. Never while Humlets are falling (only from a pause or between runs), never before your first Big Bang, and at most three rewards a day. There are no banners. No Ads removes the daily one, and the reward videos stay.
Ads come from Google AdMob. Every request asks for non-personalized ads, is marked for child treatment, and asks for content suitable for everyone. We never send an advertising id and never show Apple's tracking prompt, because we do not track anyone.
Google still processes the request to serve the ad: the request itself, a rough area from the internet address, and how you interacted with the ad.
11. Notifications
If you allow them, the game can remind you about the Daily Drop, your streak or your crew. At most one a day.
They are local notifications: your device schedules and shows them. There is no push server, and we never learn whether you saw one. Turn them off in your device settings at any time.
We ask once, after you have played a couple of runs.
12. How long we keep things
| What | How long |
|---|---|
| Daily and weekly leaderboards | 45 days, then deleted |
| All-time leaderboard | While the game runs, one best score per player id |
| Your player record: made-up name, Humlet, crew, league tier, invite reward, last played | While the game runs |
| Crews | Your place, until you leave. Each week's goal progress is kept |
| Leagues | Each week's places and results are kept |
| Duels | Closed to new results after 14 days. The record is kept |
| Inbox items | Kept after you claim them, so a reward is paid once |
| The note that a player id has unlocked an award | About 13 months, then deleted |
| Purchases at RevenueCat | While you own them, so they can be restored |
| Daily counting totals | 60 days. They contain nobody |
| Your save | On your device, until you delete the app |
13. Deleting your data
On your device. Delete the app. The save goes with it. If your phone backs up apps (iCloud, or Google backup), the backup can hold a copy until you remove it there.
On our servers. Email privacy@modernerabrands.com with your player id. It is at the bottom of Settings. We delete every row with it: your player record, leaderboard entries, crew and league places, duels, inbox items and award notes. We tell you when it is done. We ask for nothing else, because there is nothing else to ask for. Daily counting totals contain nobody, so they are not affected.
Lost the id? Tell us anyway. Without it we can find very little, because the rows carry nothing else.
14. Children
Planet Plink is made for everyone, and we expect children to play it.
For every player, of any age: no accounts, no personal information, no typing, no chat, no photos, no location, no personalized ads, no advertising id, no tracking prompt, and only ad software Google certifies for family apps. We do this for everyone, so we never have to ask anyone's age.
Purchases and children. Every purchase goes through Apple's or Google's own payment sheet, where family controls live: Ask to Buy, purchase approval, spending limits, and turning purchases off. The game has no purchases switch of its own, so use those. Two shop items are random (section 9).
For parents. You can ask what we hold about your child, get a copy, and have it deleted, with no account needed. Write to privacy@modernerabrands.com. What we hold is a random id, a made-up name, some scores and a chosen Humlet.
United States. Where COPPA applies, our position is that the only persistent identifier is made on the device, is used only to run the game (one leaderboard row per player, the features the player asked for, security and rate limits), and is never used or shared for behavioural advertising.
Europe and the United Kingdom. We do not rely on a child's consent for anything (section 16). The UK Children's Code asks for high privacy by default and no profiling by default. We meet it by not collecting the data.
15. Where your data goes
Cloudflare answers each request from its nearest location, so data may be processed in the United States and other countries.
Our processors (Cloudflare, RevenueCat, Google) are United States companies. For data leaving the UK or the EEA we rely on the European Commission's Standard Contractual Clauses and the UK Addendum, which are part of our agreements with each of them.
16. Your rights, and the legal bases
If the UK or EU GDPR applies to you, you can ask for a copy of your data, have it corrected or deleted, restrict or object to how we use it, and complain to your regulator (in the UK, the Information Commissioner's Office).
| What we do | Basis |
|---|---|
| Run the game you asked for: leaderboards, crews, duels, leagues, the save | Contract (Article 6(1)(b)) |
| Stop cheating and abuse, keep the service up | Legitimate interests (Article 6(1)(f)) |
| Count gameplay totals to improve the game | Legitimate interests (Article 6(1)(f)), on data with nobody in it |
| Serve a reward video you asked for | Contract for the reward, and Google's own basis for the ad request |
| Check a purchase receipt | Contract, and legal obligation (tax and records) |
| Show a local reminder | Consent, which is the device permission |
We rely on consent only for notifications, and we make no automated decisions with legal effects.
If you are in California, you can ask what we collect and why, get a copy, have it deleted or corrected, and not be treated worse for asking. Write to privacy@modernerabrands.com.
We do not sell your personal information and do not share it for cross-context behavioural advertising. That is why there is no "Do Not Sell or Share" link. We do not knowingly sell or share the information of anyone under 16, and running every ad request non-personalized is what makes that true.
17. Security
Everything that leaves your device travels over HTTPS, to our servers, to Apple or Google, to RevenueCat, and to Google's ad network.
There is no database of people to breach. The worst case is a list of random ids, made-up names and scores.
18. Changes
If we change this policy we change the date at the top. If the change is material (a new vendor, a new kind of data, a new purpose) we say so in the game before it takes effect.
19. Contact
privacy@modernerabrands.com
[Company Legal Name], [Address]
Help with the game: planetplink@modernerabrands.com, or the Support link in Settings.
Review statusNothing hidden
What is still open.
This policy has not yet been through legal review. These are the questions for a lawyer, listed here instead of in the policy. The operating entity and its address are still placeholders.
- Section 1, who we areWhether an EU or UK representative (GDPR Article 27) is required, and who. Whether a Data Protection Officer is required (we believe not: no large-scale profiling, no special category data, no systematic monitoring).
- Section 7, countingIf a measurement partner or a crash reporter is ever added, this policy, the store disclosures and the data map all change in the same release.
- Section 12, retentionThe amended COPPA Rule requires a published retention policy that keeps children's information no longer than necessary. This table is that policy, and it describes what the servers do today. Six rows keep data while the game runs. The planned fix is a fixed window (for example 24 months since last played), and this table will change to match.
- Section 13, deletionThere is no delete button in the app. The device route is deleting the app and the server route is an email. An in-app control that deletes server rows would be better, and this section changes the day it ships.
- Section 14, children (United States)The most important question here: whether a public leaderboard row keyed to a device-made id sits inside COPPA's internal operations exception. If not, the fix is a design change: leaderboard posting becomes opt in, or off for players the platform says are under 13.
- Section 15, transfersThe transfer basis for each vendor, whether a transfer impact assessment is needed, and whether any vendor's EU-US Data Privacy Framework certification can be relied on instead.
- Section 16, CaliforniaWhether "share" under the CCPA as amended reaches a non-personalized ad request to Google. Our reading is that it does not.
Related pages: how to delete your data, whether it is safe for a child, and the terms of use.