Skip to content
Neko Cat Jam

Neko Cat Jam: Privacy Policy

Last updated: September 22, 2026

This policy explains what information the mobile game Neko Cat Jam (the "Game") collects, why, and what you can do about it. The Game is published by Tama Studio ("we", "us").

If you have any questions, contact us at nekocat@heytama.com.

The short version

  • You never have to sign up. We never ask for your name, email address, phone number or password.
  • The Game keeps your progress on your device and backs it up to our cloud save, so you don't lose it when you reinstall the Game or change phones. To do this, the Game gives you a random player ID. If you are signed in to Game Center (iOS) or Google Play Games (Android), your player ID is also linked to that game account.
  • The cloud save contains your game progress and a record of your in-game purchases. It does not contain your name, email, contacts, location or payment details.
  • You can delete your cloud save at any time in Settings → Privacy → Delete my cloud data.
  • We use a small number of service providers to store the cloud save, show optional rewarded ads, understand how the Game is played, fix crashes, and process purchases. These are Cloudflare, Google AdMob, Google Analytics for Firebase, Firebase Crashlytics and RevenueCat.
  • Ads are only shown when you choose to watch one in exchange for a reward.
  • You can change your privacy choices and reset your analytics identifier at any time from the Game's Settings.
  • The Game is intended for players aged 13 and over.

1. Information stored on your device

The Game saves your progress (cleared levels, stars, coins, power-ups, lives, story progress, settings and your privacy choices) in a file on your device. A second file holds your player ID and the key your device uses to reach your cloud save. Uninstalling the Game deletes both files from the device. It does not delete your cloud save; see section 2.

2. Cloud save and your player ID

What for: so that your progress, coins, items, lives and purchases come back when you reinstall the Game, get a new phone, or play on a second device, and so that a purchase is never lost or given twice.

How it works: the first time the Game goes online, our server creates a random player ID for you. The ID is not based on your device or on you. After that, the Game uploads your save when a level ends and when you leave the Game. If you are signed in to Game Center or Google Play Games, the Game links your player ID to that account, so a new install signed in to the same account can find your save. The Game keeps working offline and catches up later.

What we store on our server:

What Details
Player ID A random ID our server creates, and when it was created
Device keys A one-way hash of a random key for each device signed in to your player ID. We never store the key itself
Game account link Your Game Center player identifier (the identifier Apple gives our games, not your Apple ID) or your Google Play Games player ID, if you are signed in. We do not store your Game Center or Play Games nickname
Your save Your whole game save: levels, stars, coins, power-ups, lives, story progress, settings, your privacy choices, and the store transaction IDs of purchases already added to your game. We also store the upload time, a version number and a random ID for the device that uploaded it
Purchase record For each purchase: the store (App Store or Google Play), the store's transaction ID, the product, and the purchase date. We receive these from RevenueCat. Prices and payment details are never stored
Transfer code Only if you use Move to another phone: a one-way hash of the code and when it expires (24 hours). To stop people guessing codes, we keep a count of failed attempts for each network address for up to one hour. The address is stored only as a one-way hash

We do not store your name, email address, phone number, IP address (beyond the short-lived count above), device model, advertising identifier, location, or payment details.

Where: on Cloudflare's servers (Cloudflare Workers and Cloudflare D1). The database's main copy is in the Asia-Pacific region. Cloudflare processes it only on our behalf. Cloudflare's own request logs record the address path, time and result of each request, not the contents of your save, and are kept for 3 days.

How long we keep it: until you delete it, or until the Game has not contacted it for 24 months. After that it is deleted automatically, in the same way as Delete my cloud data. Opening the Game while online counts as contact. When you delete it, it is removed from the live database straight away. It stays in the database's point-in-time backup for up to 7 days after that, and is then gone for good.

How to delete it: in the Game, go to Settings → Privacy → Delete my cloud data. This deletes, from our server, your player ID, all device keys (every device signed in to it is signed out of the cloud save), your Game Center / Play Games link, your cloud save, your transfer codes and your purchase record. The game on your phone is kept. If you are offline, the Game deletes it as soon as you are back online. After deleting, the next time you open the Game it starts a new, empty cloud save under a new player ID. If you can't use the Game (for example, you no longer have it installed), email nekocat@heytama.com or see https://nekocat.heytama.com/delete-data.

What deleting does not remove:

  • Purchases you made stay on record with Apple or Google. Restore Purchases still brings back the Supporter Pack.
  • Coin packs and other consumable purchases cannot be restored after you delete your cloud data.

3. Information collected by service providers

The Game uses the following third-party services. Each receives some information from your device when the Game runs.

Cloudflare (cloud save)

What for: to host our cloud-save server and database (section 2).

What it receives: the requests the Game sends to the cloud save, which include your player ID and your save, plus your IP address as part of the connection. Cloudflare processes this data as our service provider.

Cloudflare's privacy policy: https://www.cloudflare.com/privacypolicy/

Google AdMob (rewarded advertising)

What for: to show a video ad when you tap a "Watch ad" button to earn an in-game reward (for example, extra moves or a life). The Game has no banner ads or ads that play without your choice.

What it may collect:

  • your device's advertising identifier (IDFA on iOS, only if you allow tracking; Advertising ID on Android)
  • IP address and approximate location derived from it
  • device and app information (model, operating system, language, app version)
  • ad interaction data (which ads were shown and whether they were completed)

Personalised ads:

  • On iOS, we ask for permission through Apple's App Tracking Transparency prompt. If you choose "Ask App Not to Track", ads are not personalised using your IDFA.
  • In the European Economic Area, the UK and Switzerland (and other regions where required), we ask for your consent through Google's consent message before any personalised ads are shown.
  • You can change your choice at any time in Settings → Privacy choices.

Google's privacy policy: https://policies.google.com/privacy. How Google uses information from apps that use its services: https://policies.google.com/technologies/partner-sites

Google Analytics for Firebase (analytics)

What for: to understand how the Game is played so we can improve it. For example, which levels are too hard, where players stop playing, and how the in-game coin economy is used.

What it may collect:

  • an app-instance identifier generated by Firebase
  • gameplay events (such as level started, completed or failed, coins earned or spent, ads watched, purchases made)
  • device and app information
  • approximate location (country/region derived from IP address)
  • the advertising identifier where you have allowed it

We do not send your cloud-save player ID to Firebase.

Retention: analytics data is kept for 14 months. Where consent is required, analytics runs according to the choices you make in the consent message.

Firebase privacy information: https://firebase.google.com/support/privacy

Firebase Crashlytics (crash reports)

What for: to find and fix crashes and technical problems.

What it may collect: crash traces, device state at the time of the crash (model, operating system, memory, orientation), a Crashlytics installation identifier, and app version.

Retention: crash reports are kept for 90 days.

RevenueCat (purchases)

What for: to process and validate in-app purchases (for example, the Supporter Pack or coin packs), to restore purchases on a new device, and to tell our cloud save which purchases belong to your player ID.

What it may collect:

  • your player ID from our cloud save (before you have one, an anonymous identifier generated by RevenueCat)
  • purchase and transaction details (product, price, currency, date, store receipt)
  • device and app information

Payment details: all payments are handled by Apple (App Store) or Google (Google Play). We and RevenueCat never see your card or payment details.

When you delete your cloud data, we also ask RevenueCat to delete its records for your player ID. Apple and Google keep their own records of your purchases, so Restore Purchases still brings back the Supporter Pack.

RevenueCat's privacy policy: https://www.revenuecat.com/privacy

4. What we do not do

  • We do not ask you to create an account or log in. Your player ID is created automatically, and linking it to Game Center or Google Play Games uses the game account you are already signed in to.
  • We do not collect your name, email address, phone number, contacts, photos, precise location or any other content from your device.
  • We do not sell your personal information for money.
  • We do not use your player ID or cloud save for advertising, and we do not share them with advertisers.
  • We do not show ads you did not ask to see.

5. Your choices and rights

  • Delete your cloud data: Settings → Privacy → Delete my cloud data (section 2).
  • Privacy choices: Settings → Privacy choices reopens the consent message so you can change your advertising and analytics choices.
  • Reset analytics identifier: Settings → Reset analytics ID deletes the analytics data linked to your current Firebase app-instance identifier and starts a new one.
  • Tracking (iOS): you can allow or deny tracking for the Game at any time in iOS Settings → Privacy & Security → Tracking.
  • Advertising ID (Android): you can reset or delete your Advertising ID in Android Settings → Privacy → Ads (the wording varies by device).
  • Delete everything on your device: uninstalling the Game deletes your local progress. It does not delete your cloud save; use Delete my cloud data first.
  • Access, correction, deletion and objection: depending on where you live (for example under the GDPR in the EU/UK, or the CCPA/CPRA in California), you may have the right to access, correct, delete or receive a copy of personal information about you, or to object to or restrict its processing. The fastest routes are the in-game options above. You can also email nekocat@heytama.com; we will respond within 30 days. To find your cloud save we may ask for the player ID shown in Settings → Privacy. You may also complain to your local data-protection authority.
  • California residents: using an advertising identifier to show personalised ads may count as "sharing" personal information for cross-context behavioural advertising under California law. You can opt out of this by using the Privacy choices setting, by denying tracking on iOS, or by deleting your Advertising ID on Android. Your cloud save is never sold or shared for advertising.

6. Legal bases (EEA / UK users)

  • Consent: personalised advertising, and analytics where consent is required. You can withdraw consent at any time in Settings → Privacy choices.
  • Performance of a contract: processing and restoring purchases, and keeping the record of your purchases in the cloud save so they are never lost or given twice.
  • Legitimate interests: the cloud save of your game progress, so you don't lose it (you can delete it at any time); keeping the Game working and secure (crash reports, limiting transfer-code guessing); and serving non-personalised ads that fund the free Game.

7. Children

The Game is intended for players aged 13 and over and is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided personal information through the Game, contact nekocat@heytama.com and we will delete any data we are able to identify.

8. International transfers

Our service providers, including Cloudflare, may process information in the United States and other countries. Where required, they rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

9. Security

Everything the Game sends to our cloud save and to our service providers is encrypted in transit (HTTPS). Our server stores only one-way hashes of device keys and transfer codes, never the keys or codes themselves. Access to the database is limited to us. No method of transmission or storage is completely secure, but we only work with providers that maintain industry-standard protections.

10. Changes to this policy

If this policy changes, we will update the "Last updated" date above. If the change is significant, we will also tell you in the Game or in the store listing.

11. Contact

Tama Studio
Email: nekocat@heytama.com