Privacy Policy for Cozy Pet Room

Effective date: July 22, 2026

This Privacy Policy explains how Cozy Pet Room (“Cozy Pet Room”, the “App”, “we”, “us”, or “our”) processes personal data when you use the App on iOS or Android.

1. Controller and contact

The controller responsible for processing personal data in connection with Cozy Pet Room is:

Snash GmbH
Ober Schultheiß Schremser Straße 99
68642 Bürstadt

You may contact us at this address regarding privacy questions or to exercise your data protection rights.

2. Data we process

The data processed depends on how you use the App, which sign-in option you choose, whether you allow notifications or tracking, and whether you make a purchase.

2.1 Account and authentication data

Cozy Pet Room uses Firebase Authentication. You can create or access an account using:

  • anonymous or guest sign-in;
  • Sign in with Apple on supported Apple devices; or
  • Facebook Login, where available.

For every account, Firebase generates a unique user ID. Depending on the selected sign-in provider, we may also receive and process:

  • your name or display name;
  • your email address;
  • the identifier assigned by Apple or Facebook;
  • your profile picture or profile-picture URL;
  • information about the authentication provider; and
  • whether the account is an anonymous guest account.

When using Sign in with Apple, you may choose Apple’s “Hide My Email” feature. In that case, we receive Apple’s private relay address instead of your regular email address.

Authentication credentials and provider tokens are processed as necessary to complete and maintain the sign-in session. We do not receive your Apple ID or Facebook password.

2.2 Facebook profile and friend data

If you voluntarily choose Facebook Login and grant the requested permissions, we may receive:

  • your Facebook user ID;
  • your Facebook display name;
  • your Facebook profile-picture URL;
  • your Facebook age range; and
  • the Facebook IDs of friends who have also authorized Cozy Pet Room.

We use this data to authenticate your account, display your profile, and help identify friends who already play Cozy Pet Room.

We do not access your device address book. The friend information described above comes only from the Facebook social graph and is limited to information made available through the permissions you grant.

You can manage or remove Cozy Pet Room’s access through your Facebook settings. Removing the connection in Facebook does not automatically delete data already stored in your Cozy Pet Room account. To delete that data, contact us as described below.

2.3 Player profile and gameplay data

We store data required to provide the game, synchronize progress, and enable social and multiplayer features. This may include:

  • player name and profile picture;
  • friend code and friend relationships;
  • saved game progress and tutorial status;
  • virtual currencies, energy, food and other virtual resources;
  • inventory, rooms, room designs and item placements;
  • pet, village and building progress;
  • rewards, chests, offers and feature unlocks;
  • spins and other gameplay actions;
  • attack, raid and opponent-matching information;
  • notification status and related timestamps; and
  • technical timestamps and schema information necessary to maintain the account.

Other players may see limited profile and gameplay information where required for friend, visit, raid, attack or matchmaking features. This may include your player name, profile image, player ID or friend code, room or village state, and information relevant to the multiplayer interaction.

2.4 Purchase information

In-app purchases are processed through Apple’s App Store or Google Play and managed using RevenueCat.

We and RevenueCat may process:

  • your Cozy Pet Room/Firebase user ID;
  • product identifiers;
  • purchase and entitlement status;
  • transaction identifiers;
  • purchase dates;
  • store and platform information;
  • receipt and validation information; and
  • information necessary to restore purchases and prevent duplicate or fraudulent fulfillment.

We do not receive or store your full payment-card number, bank-account information or other payment credentials. Those details are handled by Apple, Google or their payment providers.

Purchase history is linked to your Cozy Pet Room account so that purchased content can be delivered, restored and protected against fraud. RevenueCat also provides purchase analytics and customer-history functions.

For more information, see the RevenueCat Privacy Policy and the privacy information provided by Apple or Google.

2.5 Push-notification and device data

If you allow push notifications, Firebase Cloud Messaging may process:

  • the Apple Push Notification Service token or corresponding platform token;
  • a Firebase Cloud Messaging registration token;
  • a Firebase Installation ID;
  • device model;
  • operating-system version;
  • language;
  • time zone;
  • App identifier and App version; and
  • notification delivery and token-refresh information.

We associate the Firebase Installation ID and push token with your player account so that notifications can be delivered to the correct device. Notifications may relate to game events, available energy, attacks, raids, friends or other App functionality.

You can disable notifications at any time in your device settings. Disabling notifications prevents future display of notifications but does not by itself delete your Cozy Pet Room account.

2.6 Technical, network and diagnostic data

When the App communicates with Firebase and our backend services, technical information may be processed automatically, including:

  • IP address;
  • function or API endpoint called;
  • date and time of a request;
  • App version and bundle identifier;
  • device and operating-system information;
  • Firebase software-development-kit information;
  • error information;
  • authentication and account identifiers included in backend requests; and
  • logs necessary for security, troubleshooting and reliable operation.

Meta’s Facebook SDK may also collect crash information and other technical diagnostic data. This information may be processed in a form that is not directly linked to your Cozy Pet Room profile, depending on the information and provider involved.

We use this data to provide the App, authenticate requests, maintain security, prevent fraud, investigate errors and keep the service operational.

2.7 App interactions, advertising measurement and tracking

Cozy Pet Room integrates the Meta/Facebook SDK. The SDK records App activations and may process information about interactions with the App, user or account identifiers, device identifiers, technical information and diagnostic data.

On iOS, we request permission through Apple’s App Tracking Transparency framework before enabling access to the device advertising identifier or using data for cross-app advertising measurement.

If you grant permission, Meta may use information such as:

  • the device advertising identifier;
  • Facebook or other user identifiers;
  • App activation and product-interaction events;
  • device and App information; and
  • related technical data

to measure the effectiveness of our advertising and for advertising-related purposes. This can involve linking data from Cozy Pet Room with data from other apps, websites or services and therefore constitutes “tracking” under Apple’s definition.

Meta may process this data for analytics, advertising measurement, personalization, App functionality and third-party advertising according to its own terms and policies.

If you deny tracking permission, we do not enable advertiser tracking or access to the iOS advertising identifier through the Meta SDK. Meta may still receive limited technical, diagnostic or App-functionality information that does not rely on the advertising identifier.

You can change the tracking permission in the iOS privacy settings. The setting generally appears under Settings → Privacy & Security → Tracking.

For more information about Meta’s processing, see the Meta Privacy Policy and information about the Meta Business Tools.

2.8 Services not currently integrated

The current version of Cozy Pet Room does not integrate Google AdMob for displaying advertisements.

Google Analytics for Firebase and Unity Analytics are not enabled in the current production configuration. If we enable additional advertising or analytics services in a future version, we will update this Privacy Policy and request consent where required.

3. Why we process your data

We process personal data for the following purposes:

  • creating and authenticating player accounts;
  • saving and synchronizing game progress;
  • providing social, friend and multiplayer functionality;
  • personalizing player profiles and gameplay displays;
  • delivering push notifications requested or permitted by you;
  • processing, validating, fulfilling and restoring purchases;
  • measuring advertising effectiveness where you have consented;
  • securing accounts and backend services;
  • preventing fraud and abuse;
  • diagnosing errors and maintaining service reliability;
  • complying with legal obligations; and
  • establishing, exercising or defending legal claims.

4. Legal bases for processing

Where the General Data Protection Regulation (“GDPR”) or similar law applies, we rely on the following legal bases:

Performance of a contract

We process account, authentication, gameplay, purchase and necessary technical data to provide Cozy Pet Room and the features you request. The legal basis is Article 6(1)(b) GDPR.

Consent

Where required, we rely on your consent for:

  • advertising tracking and advertising measurement;
  • access to the advertising identifier;
  • push notifications; and
  • optional provider permissions.

The legal basis is Article 6(1)(a) GDPR. You may withdraw consent at any time through your device or provider settings. Withdrawal does not affect processing carried out before the withdrawal.

Legitimate interests

We process limited technical, security, fraud-prevention and diagnostic data based on our legitimate interests in operating a secure, reliable and abuse-resistant service. The legal basis is Article 6(1)(f) GDPR.

Legal obligations

We may retain or disclose information where necessary to comply with tax, accounting, consumer-protection or other legal obligations. The legal basis is Article 6(1)(c) GDPR.

5. Service providers and recipients

We disclose data only where necessary for the purposes described in this Privacy Policy. Recipients may include:

Google Firebase and Google Cloud

We use Firebase Authentication, Cloud Firestore, Cloud Functions for Firebase, Firebase Installations and Firebase Cloud Messaging.

Google processes account, gameplay, push, installation, network and technical data to provide these services. Firebase Authentication is operated from data centers in the United States, while other Firebase services may use global Google infrastructure.

More information is available in Google’s Privacy and Security in Firebase documentation and Google Privacy Policy.

Meta Platforms

We use Facebook Login, the Facebook social graph and Meta App Events. Meta may receive profile information, identifiers, device information, App interactions and technical data as described above.

More information is available in the Meta Privacy Policy.

RevenueCat

RevenueCat processes App user identifiers, purchase history, transaction and entitlement information to validate, manage, analyze and restore in-app purchases.

More information is available in the RevenueCat Privacy Policy.

Apple and Google

Apple and Google operate the respective app stores, authentication systems, push-notification infrastructure and payment systems. Their processing is governed by their own privacy policies and account settings.

We may also disclose information:

  • to professional advisers or infrastructure providers where necessary;
  • if required by law, court order or governmental request;
  • to protect users, our rights or the security of the service; or
  • in connection with a merger, acquisition, financing or transfer of all or part of the business, subject to applicable law.

We do not sell personal data for money.

To the extent Meta advertising measurement qualifies as “sharing” for cross-context behavioral advertising under applicable US state privacy laws, it occurs only subject to the relevant platform permission and can be disabled through the tracking settings described above.

6. International transfers

Some providers process data outside your country or the European Economic Area, including in the United States.

Where required, transfers are protected through an adequacy decision, participation in a recognized data-transfer framework, Standard Contractual Clauses approved by the European Commission, or another legally recognized transfer mechanism.

Availability and location of provider infrastructure may change. Please consult the linked provider policies for current information.

7. Retention

We retain account and gameplay data while your Cozy Pet Room account remains active and for as long as necessary to provide the service.

After an account-deletion request, we delete or anonymize associated data unless retention remains necessary to:

  • comply with legal, tax or accounting obligations;
  • resolve disputes;
  • prevent fraud or duplicate purchase fulfillment;
  • enforce agreements; or
  • protect the security and integrity of the service.

Purchase and transaction records may be retained for longer where required by law or necessary to demonstrate purchase fulfillment. Technical logs and diagnostic information are retained according to operational needs and the retention practices of the relevant service provider.

Backups may continue to contain data for a limited period until they are overwritten in the ordinary backup cycle.

8. Account deletion

You may request deletion of your Cozy Pet Room account and associated personal data by contacting:

hello@snash.io

Please send the request from an email address associated with your account where possible and provide enough information for us to identify the correct account. We may request reasonable verification before completing the deletion.

Account deletion includes deletion or anonymization of the Firebase account and associated gameplay, profile, friend and push-token data, except for information we are legally required or otherwise permitted to retain.

Deleting your Cozy Pet Room account does not automatically cancel an App Store or Google Play subscription, reverse a purchase or delete your Apple, Google or Facebook account. You must manage subscriptions and provider connections through the relevant platform settings.

Where Sign in with Apple has been used, you may also manage the connection through your Apple ID settings. Where Facebook Login has been used, you may remove the App through Facebook’s “Apps and Websites” settings.

9. Your rights

Depending on where you live, you may have the right to:

  • request access to personal data we hold about you;
  • request correction of inaccurate data;
  • request deletion of personal data;
  • request restriction of processing;
  • object to processing based on legitimate interests;
  • withdraw consent;
  • receive certain data in a portable format;
  • opt out of sale, sharing or targeted advertising where applicable; and
  • lodge a complaint with a competent data-protection authority.

To exercise these rights, contact hello@snash.io.

These rights may be subject to legal exceptions. We will not discriminate against you for exercising applicable privacy rights.

10. Security

We use reasonable technical and organizational measures intended to protect personal data, including authenticated backend access, access controls and encrypted network communication.

No method of transmission or storage is completely secure. We therefore cannot guarantee absolute security.

You are responsible for protecting access to your device, Apple account, Facebook account and any other account used to sign in.

11. Children’s privacy

Cozy Pet Room is not directed to children under the age of 13.

Where local law requires parental consent at a higher age, children below that age may use the App only with valid consent or authorization from a parent or legal guardian.

We do not knowingly collect personal data from children in violation of applicable law. If you believe a child has provided personal data without the required authorization, contact hello@snash.io so that we can investigate and take appropriate action.

12. Do Not Track and platform privacy controls

Because there is no universally accepted standard for browser “Do Not Track” signals in mobile applications, Cozy Pet Room does not respond to browser DNT headers.

We do respect applicable platform privacy controls, including:

  • Apple App Tracking Transparency;
  • iOS advertising and privacy settings;
  • notification permissions;
  • Facebook App and Website permissions; and
  • relevant Android advertising and privacy settings.

13. Changes to this Privacy Policy

We may update this Privacy Policy when the App, our providers or applicable legal requirements change.

We will publish the updated version at the same location and update the effective date. Where required, we will provide additional notice or request renewed consent before materially changing consent-based processing.

14. Contact

For privacy questions, account-deletion requests or requests to exercise your rights, contact:

Snash GmbH
Ober Schultheiß Schremser Straße 99
68642 Bürstadt
Email: hello@snash.io

‍