Privacy

Privacy Policy

Effective October 30, 2026

Effective date: October 30, 2026 Operator: MBO LLC, a Washington limited liability company ("MBO", "we", "us")

The fastest way to reach us is email: [email protected]. We answer it. Post and voicemail are slower, and anything about an account needs the player ID from Settings → Account, which is easier to send by email.

Postal address: 522 W Riverside Ave Ste N, Spokane, WA 99201 Telephone: (501) 238-3919

About this policy. It covers BEASTYA's full intended feature set, not only what is live today, so it does not need rewriting every time a feature ships. Anything not yet available is marked (planned). Sign-in options can also differ between devices as platforms change what they allow — the game always shows you exactly which ones are available on yours.

1. The short version

BEASTYA is a creature-collection card game. To play, you sign in with an account you already have — Apple, Google, or Game Center on iPhone and iPad, with Google Play Games planned as the Android equivalent of Game Center. That sign-in creates a private ID for your game so your collection follows you to any device where you can sign in with that same account. (Game Center exists only on iPhone and iPad — see §6.4.)

We ask the sign-in provider for the minimum it will give us: an identifier. We do not request your name, contacts, photos, location, microphone or camera.

One exception we want to be plain about: signing in with Google includes that account's email address in the record our authentication provider keeps. We do not use it, copy it into the game, or add it to any list. §3.1 explains it in full. Apple and Game Center send us no email address at all — and Game Center sends us no nickname either.

We show no advertising of any kind, we do not track you across other apps or websites, and we do not sell or share your information.

MBO LLC is a United States company and BEASTYA is operated from the United States. If you play from elsewhere, §8 explains what that means.

2. Why BEASTYA requires you to sign in

Most games let you play first and sign in later. We want to be direct about why we don't.

Your collection, your creatures and any in-app purchase remain yours. Without an account they would live on one phone and be gone the day it was lost, broken or replaced — and we could not help you, because nothing would connect you to them. Requiring sign-in means your collection survives a new device, in-app purchases stay attached to you, and support can actually find your account.

An Apple or Google account carries your collection between Apple and Android. Game Center stays on Apple devices, and Google Play Games, when we add it, will stay on Android ones.

Today, BEASTYA plays offline. You need a connection to sign in the first time and to save your progress back up, but not to play. Battles, your collection and the shop's in-game purchases all work with no signal, and your progress syncs next time you are online. An in-app purchase needs a connection, because Apple and Google process those payments, not us.

That will not be true of everything we add. Features that put you in front of other players — player-versus-player battles, clans, leaderboards — need a live connection by their nature. The single-player game is designed to work offline and we intend to keep it that way, but we would rather tell you now than have "plays offline" quietly stop being true.

3. What we collect

3.1 Your account identifier — and, with Google, your email address

Signing in returns a pseudonymous identifier unique to you and to BEASTYA alone. From it, Google Firebase generates the player ID that keys everything below. You can see it in Settings → Account, and you will need it if you contact support.

Sign in with Apple. We deliberately do not request Apple's name or email permissions. No name and no email address reach us.

Sign in with Google. Google includes the account's email address when it establishes the account, and it sits in the authentication record Firebase keeps. To be exact about what that does and does not mean: it is never written into your game save, your profile, or anything another player can see; never used to email you or added to any list, because we operate none; never shared; never used for advertising; and deleted with the rest of your account if you delete it.

Google's record may also carry that account's name and profile-picture link. BEASTYA does not read, display or use either. The name other players would see is the one you choose in the game, and the game cannot display a photograph of anyone.

If you would rather we held no email address at all, sign in with Apple, or with Game Center on an iPhone or iPad.

Game Center sends us an identifier and nothing else — no email address, no name and not the nickname you use in Game Center. We do not read your Game Center alias, your friends, or anything else Apple makes available there.

3.2 Your game data

Stored against your player ID, in Google Firebase: creatures collected and their levels, tiers, gear and arrangement; currency balances and purchase entitlements; battle records, statistics and streaks; biomes, goals and daily progress; and your display name and chosen creature avatar.

Held only on your device, and never sent to us: your game settings, your parental control settings, the parental PIN, and the age-setup flags described in §6.4. These live in the device's own local preference store. The cloud record of your account contains your saved game, your currency balances and the time it was last updated — nothing else.

The parental PIN is stored as a salted hash, on the device only. It never reaches our servers and we cannot read or recover it.

Display names are filtered, and here is exactly what that means. Pick any name you like, including your first name. What the game will not keep is a way to contact you: an email address, a phone number and a street address cannot survive in a display name or a deck name. The filter runs where the name is saved, not only on the screen where you type it, so there is no way around it. It is not a perfect net and we would rather say so — but these two boxes are the only places in BEASTYA where anything can be typed, and nothing you type in them is shown to another player today. Display names are limited to 16 characters, deck names to 22.

Profile pictures are creatures, not photographs. If you set one, you pick one of BEASTYA's own creatures. There is no photo upload anywhere in BEASTYA, and the app requests no camera or photo-library permission.

3.3 Purchases

In-app purchases are processed entirely by Apple or Google. We never see your payment card, bank details, billing address or store account identity. We receive confirmation that a purchase completed, and keep the entitlement against your player ID so purchases can be restored. This covers gem packs and (planned) optional subscriptions.

3.4 Technical data, and how crashes reach us

Google Firebase processes device model, operating system version and IP address as part of providing infrastructure, under Google's privacy policy.

We do not operate a crash-reporting service. BEASTYA contains no crash SDK. When the app crashes, the report goes to Apple's App Store Connect or Google Play's Android vitals and we see it there, aggregated, under their terms and retention periods. We cannot connect those reports to your player ID and do not try to.

3.5 Game analytics

Firebase Analytics is live on both platforms, so we can understand how BEASTYA is played in aggregate — which biomes are reached, where players stop, whether a feature is used.

	what we do
Advertising identifier	Refused on both platforms. On Android the advertising-ID permissions are removed and ad-ID collection is disabled; on iOS we link the Firebase Analytics product that contains no advertising-identifier code at all.
Ad personalization	Disabled on both platforms.
App-instance identifier	Kept. On iOS this is the vendor identifier — scoped to MBO's own apps, reset when you delete them, unable to follow you to anyone else's. It is what produces session and retention counts.
Where you are	Analytics estimates your country, region and city from your internet connection. We never ask for your location and the app holds no location permission. The estimate is rough and often wrong — in testing, a session in Washington State was reported as Canada.
Purchases	A completed purchase is recorded with the product and price, against the app-instance identifier. No payment details, no store identity.
Age and gender	Not available to us. Those categories require the advertising identifier, which we refuse. We cannot infer your age bracket or gender.
Use	Our own product decisions only. Never for advertising, never sold, never shared with data brokers, never used to build a profile of you.

3.6 Social features (planned)

BEASTYA has no social features today. We intend to add display names visible to other players; clans or teams; player-versus-player battles, showing your display name, roster and results to your opponent; leaderboards and seasonal events; and share cards — a picture of something you achieved, containing your display name, that you can send using your device's own share sheet. Share cards are made on your device and nothing about them reaches us.

When these launch, what you choose to make public becomes visible to other players. We will never publish your real name, email or location.

We do not plan free-text chat or direct messaging between players.

3.7 Achievements (planned)

Recorded in our own infrastructure, against your player ID. We are not using Apple's Game Center or Google Play Games achievement services, so no achievement data goes to them and no additional company receives anything. We use Game Center to sign you in and for nothing else — BEASTYA has no Game Center leaderboards, achievements, challenges or multiplayer.

3.8 Notifications (planned)

We intend to send notifications — a daily reward waiting, a streak about to lapse, an event starting. This uses Firebase Cloud Messaging, which registers a device token for your installation.

Your device will ask your permission first and you can refuse and still play the whole game. You can turn them off at any time. Notifications will be about your own game; we will not use them to advertise anything and will not sell or share the token. It is deleted with your account.

3.9 Fair play (planned)

To stop cheating we intend to validate results on our servers rather than trusting the device, which means keeping a record of game actions long enough to investigate and a record of any suspension.

One consequence has to be stated plainly, because it is the single exception to §9: a suspension record may be kept after an account is deleted. Otherwise deleting and re-creating an account would undo every enforcement action. We would keep the minimum needed to recognize the ban — not your game data, not your collection, nothing usable for any other purpose.

3.10 Remote configuration (planned)

We intend to use Firebase Remote Config to adjust game balance without shipping a new version. It registers an installation identifier, carries no personal information, and is not used to target anything at you individually.

3.11 If you write to us

If you email [email protected], we hold that email and our reply for as long as it takes to resolve the matter. We do not add you to any list.

Messages may also reach us through MBO's own accounts on YouTube, Instagram, X and TikTok, because they are public and players will use them. We treat those the same way: we help if we can, we ask that anything about an account goes to [email protected] instead, and we do not add the sender to any list or copy their details into the game. Those platforms hold that correspondence under their own terms.

We operate no mailing list, newsletter, pre-launch waitlist or marketing database. mbohq.com is pages you read — nothing to sign up for, no account to create, no form that collects anything.

4. What we never do

No advertising. No ad networks, no ad SDKs, no sponsored content. Not now, not later. A design decision, not a launch promotion.
No sale or sharing of personal information with data brokers or anyone else, as those terms are defined under the CCPA/CPRA or comparable law.
No cross-app or cross-site tracking, and no behavioral advertising profiles.
No advertising identifier, refused on both platforms (§3.5).
No collection of your phone number, postal address, contacts, photos, microphone, camera or precise location. There is no photo upload anywhere in BEASTYA and the app requests no camera or photo-library permission. We do not request your name from the sign-in provider. On email addresses, see §3.1.
No biometric data and no government identifiers.
No audio recordings and no microphone access. BEASTYA reads its creature tales aloud (planned); it plays sound, it never listens, and requests no microphone permission at all.
No date of birth and no age. We ask the question in §6.4 and throw the answer away.

5. How we use what we collect

To create and maintain your account and restore your game on any device.
To deliver, restore and verify purchases, and resolve purchase disputes.
To operate game features, including (planned) clans, PvP, leaderboards, events, achievements and notifications.
To provide customer support.
To detect and prevent fraud, cheating and abuse (planned, §3.9).
To fix technical problems, using the crash reports Apple and Google show us.
To understand in aggregate how the game is played (§3.5).
To tune game balance (planned, §3.10).
To comply with legal obligations.

We use your information for no other purpose, and we do not make automated decisions producing legal or similarly significant effects.

6. Children and families

We built BEASTYA to be safe for a wide range of ages, and we want parents to understand exactly how it works.

6.1 Our expectation

BEASTYA is rated 9+ (Apple) / Everyone 10+ (ESRB). A player under 13 has their account set up by a parent or guardian, who reviews this policy and decides whether the game is appropriate.

This is not only our preference — it is what the platforms require. A child under 13 cannot create a BEASTYA account with their own Apple account: Apple refuses one outright. On an iPhone or iPad the account is created through Game Center, which a child's account can hold and which tells us less than any other option; on Android it is created on an adult's own Google account. §6.4 sets out exactly what Apple does when a child tries, and what we built in response.

6.2 What this means in practice

Beyond the account identifier in §3.1, we ask for no personal information from any player, of any age.
There are exactly two fields in the entire game a player can type into — a display name and a deck name — and both are filtered so an email address, a phone number or a street address cannot survive (§3.2). There is nowhere else in BEASTYA to type anything at all.
Nothing about a child's play is ever used for advertising — not because we switch it off for children, but because BEASTYA carries no advertising for anyone (§4).
Parents control purchasing through Apple's Ask to Buy and Screen Time, Google's Family Link and Play controls, and BEASTYA's own parental PIN (§6.4).
All purchases are final, subject to Apple's and Google's refund policies, administered by them and not by us.

6.3 Requests from parents

A parent or guardian may contact [email protected] at any time to review what is stored for their child's account, have it deleted, or refuse further collection. Include the player ID from Settings → Account. We respond within 30 days. MBO's Parental Rights Process, supplied alongside this policy, sets out the procedure in full.

6.4 The age question, and setting up an account for a child

This section describes what the game does today. It is built, tested and shipping — not a plan.

One thing happens before that question, and we would rather say so. When the app starts, it asks Firebase for an anonymous account so your game has somewhere to save to. That is a random identifier and nothing else — no email, no name, nothing you have typed — and it is replaced by your real player ID the moment you sign in. We say this plainly rather than claim nothing at all happens first.

The first time BEASTYA is opened — before you sign in — the game asks for the month and year you were born, entered freely. Nothing is pre-filled, no option is missing, and the game does not tell you which answer gets you in faster. We ask because 13 is the line children's privacy law draws, and we cannot protect a player under 13 without knowing there is one.

the answer	what happens
under 13	A parent or guardian sets the account up. On iPhone and iPad the child can sign in with their own Game Center account, which sends us no email address and no nickname. On Android the adult signs in with their own Google account. Either way the adult is asked immediately afterwards to set a parental PIN. Social features (§3.6) stay off. Purchases ask for the PIN.
13 to 17	The player signs in with their own account. An adult is asked, immediately after sign-in, to set a parental PIN. If one is set, purchases ask for it.
18 or over	Setup continues normally. No PIN is requested and none is needed.

We do not store your date of birth, your month and year of birth, or your age. The game uses the answer once to decide which row applies, then keeps only the result — social features off, purchases require a parent, and a note that the question has been answered so it is not asked again and cannot be answered differently on a second try. Those notes are kept on the device, not sent to us (§3.2).

You can skip the question. The game then sets up as it would for the youngest player — an adult completes setup, purchases require a PIN. A parent can change that afterwards using the PIN. We would rather default to protecting a child than default to convenience.

What Apple refuses, and what we built because of it. Apple will not issue a Sign in with Apple credential to a child's Apple ID. Tested by MBO on 18 October 2026 on a child's iPad with a Family Sharing child account, Apple returned:

Cannot Create Account — Your Apple Account cannot be used to create accounts for other apps.

Sign in with Apple also offers no account picker; it uses whichever Apple ID is signed in to the device. So on a child's own iPhone or iPad, neither the child's Apple ID nor a parent's can be used at all.

So we use Game Center instead. Game Center is a separate Apple service, a child's account can hold one, and it gives us an identifier and nothing else — no email address, no name, and not the nickname the child uses in Game Center. We tested this on a child's iPad on 20 October 2026: the account linked, our authentication record shows no email address and no name, and signing out and signing back in returned the same account with the collection intact.

So on an iPhone or iPad, an under-13 account is the child's own, and we hold no email address for it. We think that is better for the child and better for the parent, who no longer has to attach their own Apple or Google identity to a child's game permanently.

On Android it is still a parent's own Google account, carrying that parent's email address, because Android has no Game Center and we have not yet built the Google Play Games equivalent. We would rather state that plainly than imply a parity we do not yet have.

A note for parents who also want to play. This matters much less on an iPhone or iPad now, where a child uses their own Game Center account. But where a parent does sign a child's game in with their own Apple or Google account — on Android, or by choice — that account creates exactly one BEASTYA account, permanently. The parent cannot later have a separate BEASTYA account of their own on that same identity; the only way to free it is to delete the child's account, which erases the child's collection. A parent in that position should use a second Google account for the child's setup and keep their main one for themselves. We would rather say this plainly up front than have a parent discover it after their child has built a collection.

One thing to know about Game Center. There is no Game Center on Android. A child whose collection is linked to Game Center can move between an iPhone and an iPad freely, but cannot reach that collection on an Android device at all. Building the Google Play Games equivalent will not change that: Play Games is a different account, and a different account is a different BEASTYA profile (Terms §2.4). A parent whose child may move to Android should set the game up with a Google account instead. The sign-in screen says Game Center is iPhone and iPad only, before the choice is made.

If no PIN is set. Setting the PIN is offered, not forced — an adult who was shown the step and declined it has made a decision, and we respect it. On an account set up as a minor's with no PIN behind it, every real-money purchase shows a warning first, naming that no PIN is set and that purchases are final, and requires an explicit confirmation before it proceeds. Apple's and Google's own purchase authentication still applies underneath.

Nobody is turned away. A player under 13 plays the whole game once an adult has set it up. There is no cut-down version of BEASTYA.

7. Who else touches your data

provider	what they handle	status
Apple	sign-in identifier; purchase processing; aggregated crash reports	live
Apple Game Center	signs you in on iPhone and iPad and issues an identifier. No email address, no name, no nickname (§6.4)	live, iOS only
Google	sign-in identifier and account email (§3.1); purchase processing; aggregated crash reports	live
Google Play Games	the Android equivalent of Game Center	planned
Google Firebase / Google Cloud	player ID, game save, authentication record, technical data, analytics	live
Firebase Cloud Messaging	device notification token (§3.8)	planned
Firebase Remote Config	app installation identifier (§3.10)	planned

Each processes data under its own privacy policy. We have no other third-party recipients, no advertising partners and no data brokers. We do not permit any provider to use your information for their own advertising or to train advertising models.

Every company in this table is Apple or Google. We have not added a third.

8. Where your data is stored, how it crosses borders, and how long we keep it

8.1 Where

Google Firebase infrastructure in the United States. MBO LLC is a United States company and BEASTYA is operated from the United States.

8.2 If you play from outside the United States

BEASTYA is available worldwide. Wherever you play from — including the European Economic Area, the United Kingdom or Switzerland — the data in §3 is stored on servers in the United States and handled under this policy.

We store your data in one place because it is the only place we store anything. We operate no regional servers and do not move your data between providers. Google is our sole storage provider and maintains its own transfer safeguards, including Standard Contractual Clauses approved by the European Commission.

Your rights in §9 apply wherever you live, not only where the law compels us.

8.3 How long we keep it

Set out in full in MBO's Data Retention and Deletion Policy, published alongside this one. In short:

Deletion is immediate. Delete your account in Settings → Account and the data is gone while you wait — not queued for a 30-day cycle.
We do not delete accounts for inactivity. Come back in three years and your collection is still there.
We hold no purchase records of our own beyond the entitlement attached to your player ID, the aggregate payment reports the stores give us, and the analytics purchase record in §3.5. Apple and Google hold the transactions.
Crash reports are held by Apple and Google under their periods (§3.4).
Analytics is held 2 months at event level and 14 months from your last activity at user level.
The one planned exception is a suspension record (§3.9).

We protect data in transit and at rest using Google Cloud's controls, and access to production data is limited to MBO LLC's founders. MBO's Information Security Program, supplied alongside this policy, sets out the safeguards in full.

9. Your rights and choices

Whoever and wherever you are, you may:

See your player ID — Settings → Account, any time.
Delete your account and everything in it — Settings → Account, in the game, without asking us. It happens immediately.
Request a copy of the data associated with your account.
Sign out, and sign in with a different account, at any time.

For a copy of your data, email [email protected] with your player ID. We respond within 30 days.

Deleting your account deletes your collection and any unused in-game currency permanently, and this cannot be undone. Purchases already consumed are not refundable.

Residents of the EEA and UK (GDPR), California (CCPA/CPRA) and other jurisdictions with comparable laws have additional statutory rights including access, correction, deletion, portability and objection. We honor valid requests regardless of where you live. We do not "sell" or "share" personal information as those terms are defined under the CCPA/CPRA.

10. Changes to this policy

We will post any updated policy here with a new effective date. If a change materially affects what we collect or how we use it, we will tell you in the game before it takes effect, and where the law requires it we will ask for your consent again.

11. Contact

Email us. It is the way that reaches us.

[email protected]

If your question is about an account, include the player ID from Settings → Account. We respond within 30 days and usually much sooner.

MBO LLC · 522 W Riverside Ave Ste N, Spokane, WA 99201 · (501) 238-3919

The postal address and telephone number are published because children's privacy law requires an operator to list them. Post and voicemail are slower; email is answered.