Deinosuchus Lives Privacy Policy
Effective 10 October 2026
Deinosuchus Lives is a single-player survival game for Android, published by ST Projects ("we", "us"), an independent developer based in the United States. This policy explains what information the game collects, why, and what happens to it. It applies to the Android app published under the package name com.stprojects.deinosuchuslives.
In short: the game is played offline, on your own, and there is no account, sign-in, chat or online play. Your progress, settings, Amber and items are saved only on your phone. The game has no ads and no analytics or crash-reporting services, and it cannot access your location, contacts, photos, camera, microphone or files. The only time it sends anything to us is when you buy Amber with real money: it then sends the Google Play purchase details and a random ID for your install to our server so the purchase can be checked with Google.
Information stored on your phone
The game saves the following in the app's own storage on your phone:
- Your progress: the eras you have unlocked and finished, your best size in each era, the size you carry into the next era, the fossils you have found, and totals such as kills, food eaten and time played.
- Settings: graphics quality, look sensitivity and invert look.
- The shop: your Amber balance and the total Amber you have earned, the hides, boosts and upgrades you own, the hide you are wearing, whether you bought the starter pack, your answer to the age question, and this month's real-money spending total.
- A random install ID, created the first time the game starts. It is not linked to your name, email, Google account or phone, and it is used only for purchases (see "Purchases"). The game shows the first 12 characters of it as your player code in Settings, which you can quote when you contact us.
- A one-way hash of each purchase token already credited to you, so the same purchase is never credited twice.
None of this is sent to us, except as described under "Purchases". The app allows Android's Auto Backup, so Android may include this data in your device backup to your Google account, or copy it to a new phone, depending on your phone's settings. That backup is handled by Google, and we cannot see it.
Purchases (Google Play Billing)
Amber, the game's currency, is earned by playing. You can also buy Amber packs and a one-time starter pack through Google Play Billing. These purchases are optional. You pay Google, and Google's payment terms and the Google Privacy Policy apply to the payment. We never see or store your card number, bank details, billing address or Google account email.
When you start a purchase, the game gives Google Play a one-way (MD5) hash of your install ID as the order's account tag (Google's "obfuscated account ID"). After you pay, the game sends our server the app's package name, the product, Google Play's purchase token and your install ID. The server asks Google Play to confirm the purchase is genuine, has not been used before and has not been refunded, and confirms (acknowledges) it with Google. Only then does the game add the Amber, on your phone. We keep a record of each purchase so we can confirm purchases, prevent fraud, handle refunds and meet tax and legal obligations:
- The app's package name, the product, the Google Play order number, the purchase time, when our server checked it and whether it confirmed (acknowledged) it, whether it was a test purchase, and its status (for example refunded, with the date, whether it was a partial refund and, where Google gives one, the reason).
- Your install ID, and the account tag Google Play reports for the order (the hash of your install ID).
The record is filed under a one-way hash (SHA-256) of the purchase token. The token itself is not kept. Google also tells our server when a purchase is made, refunded or cancelled, and our server asks Google for a list of refunded purchases several times a day. Our server keeps a log of those notices, filed under the same hash and the order number.
Age and spending limit. Real-money purchases are for players 18 or older. Before your first real-money purchase the game asks whether you are 18 or older. If you answer that you are under 18, real-money purchases are turned off on that phone (Amber earned by playing still works). Your answer is kept on your phone only. Real-money purchases are also limited to US$200 per calendar month (UTC), counting each purchase at its US list price whatever currency you pay in, which the game checks on your phone before the Google Play purchase screen opens.
The shop has no loot boxes or random paid items.
Permissions
The game never asks you for a permission. Its Android manifest declares only permissions that Android grants without asking:
- Internet access, and viewing network and Wi-Fi state (used to check purchases with our server, by Google Play, and to download the game's data from Google Play).
- Google Play Billing, and Google Play's license check.
- Vibration, keeping the phone awake, and changing audio settings (used by the game engine).
- Foreground service (data sync), and starting after the phone restarts: used by the libraries that download and set up the game's data from Google Play.
- One permission of the app's own, which only the app itself holds, used by Android libraries inside it.
The game does not request location, contacts, camera, microphone, photos or storage permissions, and it cannot access them.
Ads, analytics and crash reports
Deinosuchus Lives shows no ads and contains no advertising SDK, and it does not use the advertising ID. It contains no analytics or crash-reporting services, and it does not track you across other apps or websites.
Information shared with third parties
Google Play handles payments and receives the hashed account tag on your orders. Our server contacts Google Play to verify purchases. Google Privacy Policy.
Google Cloud hosts our server and database. Google processes this data on our behalf. Google Cloud Privacy Notice.
We do not sell your information, and we do not share it with anyone else, except where the law requires it.
Where your information is stored
Our server and database run on Google Cloud in us-central1 (United States). The game is offered through Google Play in many countries. Wherever you use it, the purchase information described under "Purchases" is sent to our server in the United States, where data protection laws may differ from those where you are.
How your information is protected
All communication between the app and our server is encrypted in transit (HTTPS). Our server only accepts purchase checks for this app's package name that carry its app key, and it limits how many requests it accepts, to prevent abuse.
Our server's logs record the time, the type of request and its result, how long it took, and the IP address it came from. Google Cloud's request logs also record the full request address and your device's user agent (which can include the app and Android version). Purchase log lines include the product, the Google Play order number and the first 12 characters of the purchase token's hash. The logs never contain purchase tokens or your install ID. We use them for security, to limit abuse and to fix problems. Google Cloud keeps them for about 30 days by default.
How long we keep it
- On your phone: until you clear the app's data or uninstall the app.
- Purchase and order records: kept for 7 years after the purchase, for tax, refunds and fraud prevention. A daily clean-up job then deletes each record, with its order record and its refund or cancellation notices.
- Server logs: about 30 days by default, then deleted automatically by Google Cloud.
Deleting your data
On your phone: everything the game keeps on your phone is deleted when you clear the app's storage (Settings > Apps > Deinosuchus Lives > Storage > Clear storage) or uninstall the app. Deleted progress, Amber and items cannot be restored. Reset all progress in the game's Settings clears your progress only: it keeps your Amber, items, install ID, age answer and this month's spending total, which only clearing the app's storage or uninstalling removes.
On our server: there is no account. Apart from the short-lived server logs described above, the only information we hold is the purchase records described under "Purchases", filed with your install ID. To have your install ID and Google Play's account tag removed from them, email battlearenaunlimited@gmail.com, say it is about Deinosuchus Lives, and include your player code (Settings) or the order number (it starts with GPA.) from the Google Play receipt of a purchase. We will reply within 30 days, and we will confirm when your data has been deleted. The purchase records are then kept without them for tax, refunds and fraud prevention (see "How long we keep it"). If you have never bought anything, we hold no data about you.
Google Play keeps its own copy of the hashed account tag on each order, and we cannot remove it. The full steps are on the data deletion page.
Your rights
If you are in the EEA, the UK or Switzerland, data protection law (GDPR or UK GDPR) gives you the right to access the personal data we hold about you, correct it, have it deleted, restrict or object to how we use it, and receive a copy of it. You can also complain to your local data protection authority. We use your information to provide the purchases you make, for our legitimate interests in preventing fraud and keeping the service secure, and to meet legal obligations such as keeping tax records.
If you are in California or another US state with a privacy law, you have the right to know what personal information we collect, to have it deleted or corrected, and to opt out of its sale or sharing. We do not sell personal information, and we do not share it for cross-context behavioural advertising. We will not treat you differently for using these rights.
To use any of these rights, email us at the address below with your player code (Settings) or your Google Play order number. We will reply within 30 days.
Children
Deinosuchus Lives is a predator survival game that is not directed at children under 13, and we do not knowingly collect personal information from them. Real-money purchases are for players 18 or older. If you believe a child under 13 has made a purchase in the game, contact us at the address below and we will delete the data we can find.
Changes to this policy
If this policy changes, the updated version will be published at this address with a new effective date. If the change is significant, we will also mention it in the app or its store listing.
Contact
battlearenaunlimited@gmail.com
Data safety summary
This table summarises the data the app handles, in the terms used by Google Play's Data safety section. "Collected" includes data processed for us by Google Cloud as our service provider. Data kept only on your phone is not collected.
| Data type | Collected / shared | Required or optional | Purposes |
|---|---|---|---|
| Purchase history (product, order number, time, status) | Collected. Not shared. | Optional: only if you make a purchase | App functionality, Fraud prevention, security and compliance |
| Device or other IDs (the random install ID sent with a purchase) | Collected. Not shared. | Optional: only if you make a purchase | App functionality, Fraud prevention, security and compliance |
All of this data is encrypted in transit. You can ask us to delete it by email, as described under "Deleting your data". Purchase records are then kept until 7 years after each purchase, without your install ID.