CowGo — Privacy Policy

Privacy Policy

This game is provided by Rao Rongqing. In this document, “we” and “us” refer to that provider.

1. Scope, audience and contact

This policy applies to the single-player bridge-building game CowGo. CowGo is intended for users aged 16 and above and is not offered to users under 16. Send privacy enquiries, access or deletion requests, or concerns about a minor’s data to flowergame@yeah.net. Include the game name and a description of your request; do not send passwords, account credentials or unnecessary identity documents.

The current release requires no sign-in and does not upload gameplay records, local guest identifiers or device identifiers to us, an analytics provider or an advertising service. Local saves, voluntary support emails, historical data from earlier releases and online access to this document are described separately below.

2. Complete play without sign-in

No game account is required for any levels, default characters, gameplay rewards or settings. Themed skins and the supporter pack are optional Google Play purchases. Purchasing and restoring use your Google Play purchasing account, without signing in to a game account. Android creates a random guest identifier inside app-private storage. It identifies local profiles within this installation, not an authenticated online account. It is not Android's system UID, ANDROID_ID, advertising ID or a hardware identifier, is not used across apps and is not sent to a game server.

The device stores levels, stars, medals, gold and Niu Coins, daily-reward dates, paid and settled runs, language, audio, appearance, saved journeys, document versions and acceptance time. Journeys include position, wood, time, items, obstacles, power-ups and random run identifiers. Android excludes these private files from system backup and device transfer. There is no cloud-save service. Uninstalling, clearing app data, changing devices or losing the device loses progress with no sign-in recovery option.

3. Local guest profiles

Google sign-in SDKs have been removed. This release offers no account authentication, account linking or cloud saves and does not request an age range. A fresh installation creates a random local guest identifier. The active profile from an earlier version migrates locally to a guest while retaining progress, without contacting Google or uploading saves. Historical local profiles may remain for recovery until all local data is cleared.

4. Remote analytics, advertising and SDKs

This release provides no remote usage analytics. The Firebase Analytics dependency has been removed; no user sends Firebase gameplay events, device data or app-instance identifiers. Earlier opt-in preferences cannot re-enable collection. Accepting the welcome documents is not permission for analytics or processing children's data. Settings show analytics unavailable and provide no enable control.

This release has no advertising, subscriptions, chat or public profiles. Optional one-time Google Play purchases unlock themed skins or a supporter badge, without increasing gameplay ability, Niu Coins or gold. Google Play Billing handles purchase, query and delivery acknowledgment. The game verifies Google signatures locally and caches product IDs, original purchase evidence and signatures, which may include order IDs, purchase times and purchase tokens, to unlock, restore and avoid duplicate processing. Purchases are not bound to hardware IDs. Evidence is not sent to a game server, and the game does not read card numbers or payment passwords. Entitlements can be queried at an online launch, on returning to the foreground or through Restore purchases. Offline play uses validated caches; refund changes may take effect only after a successful subsequent query.

Guest profiles do not read advertising identifiers, contacts, location, camera, microphone, phone numbers or Android system identifiers. This release does not use Google authentication. Google Play itself handles installation, transaction or diagnostic data under its own rules: https://policies.google.com/privacy.

5. Security

Private app storage protects local profiles subject to device security. This release does not request sign-in tokens or authentication keys. Logs do not contain accounts, names or tokens. No storage or transmission is absolutely secure.

6. Retention and deletion

Local profiles remain until you clear them or uninstall the app. Profile > Local profile and saves > Clear all local data asks for confirmation, removes current and historical local game profiles, progress, balances, names and journeys in this installation, and creates a new guest. Document choices remain; old age choices are removed on upgrade. Clearing Android app data or uninstalling also removes remaining document choices. There is no cloud-save recovery of gameplay progress after deletion, uninstallation, changing devices or loss of the device.

Clearing local data also removes cached purchase evidence and legacy appearance grants. It does not issue a refund or delete Google Play transaction records. Still-valid purchased skins and supporter badges can be restored online using the original Google Play purchasing account. Legacy free appearance grants are not store purchases and cannot be restored from the store after local deletion. Google Play retains its own records under its policies and applicable law.

There is no remote game account or cloud save for us to restore, export or delete. If you cannot operate the app, contact us for assistance. Clearing local game data does not delete an independent Google Account you own.

If you used an earlier version with analytics, updating the game or clearing local data does not automatically erase data already sent to Google Analytics. Historical data may remain under the earlier property’s settings and applicable legal requirements; no particular retention period is asserted here. Contact us about applicable access or deletion requests. We will assess what can be identified and handled and assist as required by law. The current release sends no new analytics data.

7. Choices and rights

You may play offline, manage settings or clear local data without signing in or providing an age range. Applicable law may provide access, correction, deletion, restriction, objection and complaint rights. Use the contact in section 1. Email and independent third-party services follow their actual processing rules.

8. Age eligibility and minors

CowGo is intended for users aged 16 and above, including users aged 16–17 and adults. Users under 16 should not use the game. This intended audience is separate from an app-store content rating and does not mean that technical age verification is implemented. The current app does not request a date of birth or age range and has no age gate or verified guardian process.

Users aged 16–17, and other users who are minors under applicable local law, should read these documents with a guardian and obtain permission where legally required. A minimum age of 16 does not mean every eligible user is an adult or remove applicable protections for minors. A minor must obtain a guardian’s permission for an optional purchase where required by applicable law. Google Play family and purchase-approval settings may provide additional controls; this app does not operate its own verified guardian-consent process. The current release offers no sign-in or remote analytics for any user. Accepting these documents does not authorize future data collection or replace any legally required separate permission.

A guardian concerned about a minor’s data, including data from a user under 16, may contact flowergame@yeah.net for investigation and applicable access or deletion assistance. We will request only necessary information, stop unlawful processing, and delete or restrict relevant data as required by law. We cannot directly access files stored only on your device, but can explain local deletion steps. Neither guardian guidance nor these Terms waives statutory rights.

9. Updates

We update this policy and date when processing changes, and give notice and obtain renewed agreement where required before material changes apply. Settings > Privacy Policy provides the current text offline. The game also provides Chinese text for convenience. This website version is in English; language choice does not reduce mandatory rights. Public pages and store declarations must match the actual release before publication.

10. Email enquiries and rights requests

When you voluntarily email flowergame@yeah.net, we process the email address, message, attachments and communication information you provide to answer support enquiries and handle privacy requests or complaints. Mail providers process information necessary to deliver and store communications. Do not send passwords, account credentials, identity documents or unrelated sensitive information. If identity verification is necessary, we will explain why and request only what is needed.

Communications are kept only as needed to handle the request. If a legal duty or specific dispute requires further retention, we keep only necessary records, restrict purposes and access, and delete or lawfully anonymize them when that reason ends. We respond within applicable legal time limits and explain any lawful refusal and available complaint channels. We cannot directly access your local saves, but will help with relevant steps without requiring a game account or unnecessary information.

11. Data protection, security incidents and statutory rights

The current release integrates neither Google sign-in nor Firebase Analytics and provides us with no remote game accounts, cloud saves or new gameplay analytics. Local game files, emails you choose to send, historical data already uploaded by earlier versions and independent third-party services are addressed separately in this policy. No current game-data upload does not mean that support emails or historical data do not exist. We do not sell personal information or use support correspondence for targeted advertising.

Third-party privacy rules do not transfer our legal data-protection, processor-oversight or rights-request duties. The absence of an absolute-security guarantee is not a blanket release from responsibility for a breach, alteration or loss. If a security incident concerns data we process, we investigate, remedy and reduce harm, and notify affected users and authorities as required by law. Liability limits in the Terms do not reduce statutory privacy rights.

If sign-in, remote analytics, advertising or other data services are introduced in the future, we will update the notice before affected processing and provide choices and permissions required by law. Accepting the current Terms or continuing to play does not give advance permission for new data processing.

12. Reading this document online

This HTML file itself contains no analytics, ads, cookie scripts, external fonts, input forms or login. Online access still sends an IP address, request path and browser-supplied technical information to the web server. Hosting services may retain access records to deliver and protect the page. This is website processing, not in-game analytics. Actual hosting-log practices and retention depend on deployment configuration; use the email above to enquire or exercise applicable rights. Independently provided services on linked third-party sites follow their own notices.

13. Local replays, exported videos and sharing

During play, CowGo records local replay data to let you replay and export a run. This includes a random replay identifier, creation time, game version, level, character appearance, virtual balance, gameplay state and checkpoints, input direction and timing, and game music and sound events. These records remain in app-private storage and are not sent to us or an analytics service. Replay and video export render the game itself; they do not record your camera, microphone or other apps.

Older replay records are pruned when the configured storage limits are exceeded, currently 20 records or 50 MiB. Clearing all local profiles also removes their replay records. On Android, exported MP4 files are first stored privately in the app. Starting a later export cleans up unfinished export files and app-private MP4 exports older than 24 hours; this is cleanup triggered by a later export, not guaranteed deletion exactly at 24 hours. Clearing local profiles does not necessarily remove these private video exports. Clearing Android app storage or uninstalling removes remaining app-private files.

Saving a video creates a separate copy in the device media library or a location you choose through the system file picker. Sharing passes the selected clip to an app you choose through Android’s sharing interface. CowGo may check locally whether a supported sharing app is available; it does not send an installed-app list to us. Exporting a video does not automatically upload or publish it. The receiving app may process, upload or retain the clip under its own policies and the actions you authorize there. Our use of platform services does not waive our own legal responsibilities.

Copies saved to the media library, another file location or a recipient service are separate from the game’s private storage. Clearing game data or uninstalling does not delete those copies or an already published post. Manage or delete them in the relevant gallery, file manager or recipient service. Review the content and destination before sharing, especially if you are a minor using a third-party service.