ReptyCo · Privacy · Terms · Rules · Delete account

Reptycoon privacy policy

Last changed 15 November 2026.

Reptycoon is a reptile-breeding game. You can play it as a guest without giving anything about yourself. This page says what the game keeps on its server, why, and how to have it deleted.

What is kept

Your saved game: your animals, ReptyCoin, Scale Shards, progress and settings in the game, so it can be restored and played on another phone. Up to seven earlier copies are kept so a mistake can be undone.
If you make an account: your email address, the region you chose, the player name you chose, your Keeper ID (the account's number), and your app password stored only as a salted one-way hash (it cannot be read back).
As a guest: a random guest number made by your phone, and a hash of a random secret your phone keeps.
Sessions: which devices are signed in (the device's system and model name, such as "Android SM-A546E") and when they were last used.
Security records: when accounts sign in, are sold or are changed, and a shortened one-way hash of the internet address a request came from, to stop password guessing and cheating.
Google Play's check of the game: on a phone, the game asks Google Play (the Play Integrity API) whether it is the copy Google Play installed, unchanged, on a phone that passes Google's integrity check. Google's answer, the game's version number and when it was given are kept with the session, to stop cheating. Nothing else about the phone is asked for.
The Founding Tester trophy: whether your account has played the Beta from a copy Google Play installed, as the game says when it calls, so the trophy goes only to the Beta's Google Play players.
Between players: other keepers see your player name (or your Keeper ID until you choose one) on what you list in the online shop, lend, or bred first (the World's First register), and the animals themselves.
Reports: if a player reports another (for a rude name, say), the report keeps who sent it, who it is about, the name they saw, and anything they wrote, so it can be looked at. The player reported is not told who sent it.
Blocks: the players you have blocked, the name they had when you blocked them, and when, until you unblock them or either account is deleted.
Leaderboards: your scores (worked out from your saved game), the trophies you win, and the two-letter code of the country your phone connects from (such as ZA), as the internet connection shows it. Nothing finer than the country is kept, and the game never asks your phone for its location. Other keepers see your player name, level, scores, trophies and country flag on the boards; you can hide your flag (Leaderboards > Me), which also leaves you off your country's board. Guests and players with no name are not shown. Sales between keepers are kept for 400 days, for the boards.
Purchases: what you buy in the store, with Google Play's order number and purchase token and when it was bought, so that each purchase is given once and only to you, and refunds can be matched to it. Google Play takes the payment: Reptycoon never sees your card or bank details.
Critter Clubs: the clubs you are in and your place in them, what you write in a club's chat (each club keeps its last 400 lines), what you ask for and give there, and your friends and friend requests. Other members of a club see what you write in it, your player name, and who is playing now.
Your room: other keepers can visit your Breeding Rooms and trophy cabinet as your last saved game has them, with the animals living there. Names you typed for your animals or stacks, your ReptyCoin and Scale Shards, and your trades are not shown to them. Players with no name cannot be visited.

Reptycoon does not ask for your name, contacts or location, and does not sell anything about you.

Some rewards can be earned by watching an ad. Ads only play when you tap to watch one; there are no ads you did not ask for. They are shown by Google AdMob, whose software in the game collects, for showing ads, counting them and stopping fraud: your phone's advertising ID, its approximate location (from its internet address), how the ads are used, and crash and diagnostic information. Reptycoon's server does not receive any of this. In Europe and the United Kingdom the game asks for your consent first, and you can change your choice in Settings > Privacy choices. You can reset or delete your advertising ID in your phone's settings (Google > Ads). See how Google uses information from apps that use its services.

Why

To save and restore your game, sign you in, send a password-reset code when you ask for one, check that saved games are fair, stop abuse, deal with reports, give what you buy in the store, and make the online shop, World's First, loans between keepers, Critter Clubs, room visits and the leaderboards work.

Who handles it

The server runs on Cloudflare (Workers and D1, stored in Western Europe). Password-reset emails, when switched on, are sent through Resend. Both act only on Reptycoon's instructions. Ads are shown by Google AdMob. Payments in the store are taken by Google Play, which tells the server whether a purchase is real. Google Play also gives and reads its check of the game.

How long

Account data is kept until you delete the account. A guest that has not been used for 180 days is deleted with its saved game. Security records, and reports once they have been dealt with, are deleted after 400 days.

Deleting your data

In the game: Settings > Account > Delete account. Without the game: the delete page, with your email and app password. Either way your account, saved game, earlier copies, sessions and records are deleted at once. A World's First you hold stays in the register without your name.

Your rights

You may ask what is kept about you, have it corrected, or have it deleted. Write to admin@reptyco.co.za. In South Africa you may also complain to the Information Regulator.