Data the App Processes
Game progress and settings are stored only on your device and are not sent to Seori Labs servers. Removing the App also removes this local progress.
To understand service quality and report acquisition-campaign performance in aggregate, Google Analytics for Firebase and Seori Labs analytics services process first opens, screen views, taps, tutorial progress, lizard-care actions, other in-app or gameplay interactions, and an analytics identifier associated with the app instance. We do not link this data to a name, email address, phone number, or advertising ID, and do not use it for personalized advertising or cross-app tracking.
To monitor reliability, release builds process diagnostic data from GDScript errors: the app-relative file path (res://), code line, error type and allowlisted classification, and up to two stack frames containing file, function, and line information. We limit reports from the same file and line to once per session and cap each session at 20 reports. We do not collect the raw error message, local or member variables, saved game data, or absolute user paths from the device.
The iOS version uses Firebase Crashlytics to process native crash stack traces, app version and startup phase, device and OS information, Crashlytics installation UUIDs and Firebase installation IDs, and existing pseudonymous analytics events immediately before a crash. Limited GDScript diagnostics also help monitor reliability. We do not attach account IDs, lizard names, saved game contents, or authentication tokens to diagnostics, or use them for advertising or cross-app tracking. Crashlytics applies only to the iOS version.
On Google Play and the Apple App Store, the App uses a Firebase anonymous installation user ID to check and restore existing purchase entitlements. On AppsInToss, we immediately transform the app-scoped user key received through Toss Login with SHA-256 and use the result as a Platform user identifier. We do not store the original user key or return it to the App.
Toss may provide a name during the AppsInToss login consent flow, but Seori Labs does not use it for App features or store it on our servers. If you choose an in-app purchase, we store market and product IDs, transaction references or tokens, entitlement and refund status, and processing timestamps in our purchase-validation and restoration ledger. Seori Labs does not collect payment card or bank details.
If you use Crystals (a paid currency), we store your paid and free Crystal balances, research shards and tokens, Morph Box open requests and results, guarantee counters, research and expedition state, grant and deduction timestamps, and related order references in our server ledger. Results are determined by the server, and per-request records are used to prevent duplicate processing and to apply refund deductions.
If you link a Google or Apple account to spend paid Crystals, the Seori Labs server verifies the signature, issuer, and audience of the provider’s sign-in token and stores only the provider name and a hash of the account identifier. We do not store the raw account identifier, email address, name, or profile picture. The hash is used only to find the same wallet when you link the same account again.
Game features do not collect location, contacts, photos, videos, microphone recordings, or health data. Processing for rewarded ads in the Google Play and App Store versions is described under “Rewarded Ads on Google Play and the App Store” below. The AppsInToss version has no rewarded ads; AppsInToss interstitials use the Toss integrated ad SDK. Toss and Google AdMob may process advertising identifiers, device and network information, and ad impression and click data according to their policies and your device consent settings. Seori Labs does not link these advertising identifiers to purchase accounts or game analytics identifiers.
Purposes and Basis of Processing
Analytics and diagnostic data are processed to monitor reliability and improve App flows and features.
Market-specific pseudonymous user identifiers and purchase data are processed to check and restore paid entitlements, validate purchases, apply refunds, prevent duplicate or fraudulent transactions, and meet legal obligations.
Optional in-app purchase data is processed only when you use a purchase feature. Starting with iOS version 1.9.6, you can turn gameplay statistics off or on under “Usage statistics” on the first Settings screen. Collection starts on when no choice has been saved, and your choice is kept across app restarts. Turning it off stops collection of new gameplay statistics; processing needed for purchase validation and restoration, accounts and wallets, and crash diagnostics remains separate. Firebase ad storage, ad user data, and ad personalization signals are denied on iOS.
Rewarded Ads on Google Play and the App Store
In the Google Play and App Store versions, the only ads are Google AdMob rewarded ads that you choose by tapping a button. There are no banner or interstitial ads. Core gameplay remains available without watching ads.
To deliver and measure ads and to prevent fraud, the Google Mobile Ads SDK (together with Google User Messaging Platform (UMP) in the Android app) may process your IP address and approximate location inferred from it, app- or developer-scoped device identifiers (such as the Android app set ID), device, OS, and network information, ad interactions such as requests, impressions, clicks, and completed views, and app and SDK performance and diagnostic data. Google processes this data under its own policies.
The App requests non-personalized ads only and limits ad content to a maximum rating of G. On iPhone the App does not request App Tracking Transparency permission, and on Android it does not use the advertising ID permission. Seori Labs does not receive or store advertising identifiers.
In the Android app, users in the European Economic Area, the United Kingdom, and Switzerland see Google’s consent form (UMP) the first time they choose a reward. If you do not consent, only Google’s limited ads may be served or reward buttons may not appear. Android users in those regions can review or withdraw their choice at any time under “Privacy choices” in the App’s Settings.
The iPhone app does not show a consent form in any region and has no “Privacy choices” item in Settings. Ad requests from the iPhone app in the European Economic Area, the United Kingdom, and Switzerland are served as Google limited ads, which turn off features that rely on device identifiers, such as ad personalization and frequency capping, and use cookies or local storage only to detect invalid traffic.
A reward is granted only after you watch the whole ad and the Seori Labs server confirms the view through AdMob server-side verification (SSV). For this we store the reward request ID, ad placement, reward type and amount, processing status and timestamps, and a pseudonymous user identifier on our server, and we include the reward request ID and the pseudonymous user identifier in the ad request so that AdMob returns them with its verification result. Reward verification records are deleted automatically 90 days after creation, and request records that prevent duplicate rewards are deleted when you request data deletion.
The number of ads watched today, the last ad time, pending requests, and completed rewards are kept in the game save on your device. Ad request, impression, failure, and reward verification events are processed as pseudonymous analytics data.
You can report an inappropriate ad with “Report an ad” in the App’s Settings.
For how Google uses this data, see the Google Privacy Policy (policies.google.com/privacy) and How Google uses information from sites or apps that use our services (policies.google.com/technologies/partner-sites).
AppsInToss Ads
Ad counts, the last ad close time, session activity times, and completion identifiers are stored on your device separately from game saves to enforce frequency limits and prevent duplicates. We analyze ad opportunities, skip reasons, loads, requests, shows, impressions, closes, errors, and display duration by market, OS, bundle, and policy version. Toss Login is not required to view ads.
Processors and Transfers
Seori Labs does not sell personal data. Google AdMob may process data to provide rewarded ads in the Google Play and App Store versions, and Toss and Google ad SDKs may process data to provide AppsInToss ads. The Google privacy policy (policies.google.com/privacy) and the Toss privacy policy (toss.im/privacy-policy) also apply.
Google Firebase, Google Analytics, and Google Cloud process data as service providers for analytics and diagnostics, anonymous authentication, the purchase ledger, the Crystal wallet ledger, and server operations. Google Play, the Apple App Store, and AppsInToss or Toss process login, payment, and refund data for the market you choose. Account linking uses the Google or Apple sign-in system you choose, and each provider handles sign-in data under its own privacy policy.
Data sent to servers is encrypted in transit with HTTPS/TLS. It may be processed outside your country depending on service-provider infrastructure.
Retention and Deletion
Local game data is removed when you delete the App. Analytics data is retained for the period configured in Google Analytics, then deleted or retained only in aggregated or de-identified form.
Firebase Crashlytics retains crash traces and associated installation identifiers for 90 days before starting removal from live and backup systems.
Purchase-ledger and Crystal-wallet records are retained as needed to provide and restore paid entitlements, apply refund deductions, support accounting and audits, prevent abuse, and meet legal obligations, then deleted or de-identified. The account-link hash is deleted together with your data when you request account deletion.
If you linked a Google or Apple account, you can restore your Crystal wallet and purchase records after reinstalling the App or changing devices by linking the same account again.
Send access or deletion requests to cs@seorilabs.com. We may request the minimum information needed to identify the App installation or transaction. Records required by law or for accounting, disputes, or fraud prevention may be retained on a restricted basis until that purpose ends.
Children and Purchases
The App is not directed to children under 13, and we do not knowingly collect personal data from children.
Minors should use in-app purchases and Crystal top-ups only with a guardian’s consent and the payment protections configured on the device and store account.
Changes and Contact
If data handling changes, we will update this page and the App’s store privacy disclosures together.
Privacy and App support: cs@seorilabs.com
