Privacy Policy

This policy explains what personal data we process when you visit paw-paw.pet, use the Paw-Paw app, sign in to a Paw-Paw account, or buy a collection, why we process it, and the rights you have. It is written to meet the requirements of the EU General Data Protection Regulation (GDPR).

1. Who we are

Paw-Paw is operated by Daystrom OÜ, a private limited company registered in Estonia (registry code 17537299), at Tornimäe tn 5, Kesklinna linnaosa, Tallinn 10145, Harju maakond, Estonia. Daystrom OÜ is the "data controller" for the personal data described in this policy.

Full provider details are in our legal notice. For any privacy question or request, email privacy@paw-paw.pet.

2. What we collect & why

We try to collect as little as possible. In practice, these are the situations:

• When you browse the site — our hosting provider and our cookieless analytics process basic technical data (such as the pages you view, your approximate region, browser type, and your IP address as part of serving the page). This is used in aggregate to understand traffic and keep the site secure. We do not build a profile of you.
• When you click a download link — we record an anonymous "Download" event with the arrival channel and the public page where you clicked. We do not include query strings or URL fragments in that page label. No personal identifiers are attached.
• When you use the contact form or the app's feedback form — we receive the name, email address, category, and message you submit, so we can read and reply.
• When you use the app — only if you opt in, the app sends pseudonymous usage analytics and/or technical crash and error reports. Both choices are explained in section 6, start off, and can be changed later.
• When you sign in to an account — we process your email address, the identifier your sign-in provider gives us, and sign-in records, and we store your game progress so it syncs across your Macs. See section 7.
• When you buy a collection — Stripe processes your payment, and we keep a record of the order. See section 8.

Our legal bases under the GDPR, by purpose, are:

• Accounts, cloud saves, and delivering and restoring purchases — performance of a contract with you (Art. 6(1)(b)): providing the account and purchases you asked for.
• Payment, accounting, and tax records — compliance with legal obligations (Art. 6(1)(c)).
• Account security and preventing fraud and payment abuse — legitimate interests (Art. 6(1)(f)): protecting you, other players, and the Service.
• Optional news and new pack announcement emails — your consent (Art. 6(1)(a)), which you can withdraw at any time.
• Website analytics & download attribution — legitimate interests (Art. 6(1)(f)): measuring aggregate traffic and which content leads to downloads.
• Contact-form and in-app feedback messages — legitimate interests (Art. 6(1)(f)): reading and responding to enquiries you send us.
• Anti-spam rate-limiting (IP address) — legitimate interests (Art. 6(1)(f)): protecting the forms from abuse and keeping the site secure.
• App usage analytics — your consent (Art. 6(1)(a)), which you give in the app and can withdraw at any time.
• App crash & error reports — your consent (Art. 6(1)(a)); Sentry starts only after you explicitly enable it and can be switched off later.
• Aggregate install & activity counting — legitimate interests (Art. 6(1)(f)): estimating how many people use Paw-Paw from anonymous, aggregate download and update-check counts (no identifier, no stored IP).

Where we rely on legitimate interests, we keep the impact on you minimal — no advertising cookies, no cross-site tracking, no profiling.

3. Cookies & tracking technologies

The Paw-Paw website sets no cookies and stores nothing on your device for analytics or advertising. That's why there is no cookie banner.

Our download-attribution script looks at the page that sent you here (the referrer) and any utm_source label in the link you followed, only while the page is open. It stores nothing on your device. When you click a download link, it records the arrival channel (for example "reddit" or "direct") and the public page you clicked on, and adds the channel to the download link as utm_source, so it is also sent to cdn.paw-paw.pet. Query strings, URL fragments and arbitrary paths are never recorded.

If you use the matching controls, the site remembers up to three small preferences in your browser's local storage: that you paused animations, that you closed the announcement bar, and the language you chose (including staying in English when we suggest a translation). Showing a suggestion stores nothing. They contain no identifier, are used only to honour your choice, and need no consent under the ePrivacy rules because you asked for them. Stripe's checkout page, which is Stripe's own website, uses cookies it needs to process payments and prevent fraud, under Stripe's own policies.

Our fonts are served from our own server, so loading a page does not share your IP address with any third-party font provider. The providers we do rely on to host and deliver the site are listed in section 9.

No third party collects information about your activity across websites through our pages. Because there is no tracking to switch off, the site works the same whether or not your browser sends a Do Not Track or Global Privacy Control signal.

4. Analytics & attribution

We use Vercel Web Analytics, a privacy-friendly analytics tool provided by our hosting platform. It is cookieless and is designed not to identify individual visitors or track you across other websites. It gives us aggregate figures such as page views, referrers, and rough geography. Vercel processes your IP address transiently to derive this aggregate data and does not store it in a way that identifies you to us.

Alongside this, a small first-party script of ours records anonymous "Download" events together with the arrival channel and the public page the click happened on (see section 3). This helps us understand which content leads people to try Paw-Paw. A Download event records a website click, not a confirmed installation. None of it is linked to an identifiable person.

5. The contact form & in-app feedback

When you submit the contact form, we process the name, email address, category, and message you provide. Our server also briefly records the request's IP address and a timestamp to prevent spam and abuse (rate-limiting).

The app's Feedback & bugs form sends the same kind of message through the same server: your email address, category, and message, and your name if you give one (otherwise the message is signed "Paw-Paw app user"). If you choose, a bug report also includes the app and macOS versions. If you are signed in, the app may fill in your account's email address, which you can change before sending.

Your message may be forwarded to us by email via Resend so that we can see it and reply. We do not write your name, email address, or message contents to our function logs; those logs contain only the selected category and submission timestamp. We use the information solely to respond to you and to improve Paw-Paw based on your feedback. We do not add you to a mailing list or use your email for marketing.

Emailing yourself a download link

On a phone, you can ask us to send a one-time download link to the email address you provide. We use Resend to send this requested email. This does not create an account or subscribe you to a newsletter. The same server-side spam limits apply, and identical email requests are deduplicated by Resend for 24 hours. We do not save your address in our database or include it in function logs or analytics. Resend keeps the address and email contents for 30 days.

We count anonymous requests, sending outcomes, and share or copy actions to understand whether this helps visitors return on a Mac. Links carry a common campaign label, without an email address or individual identifier. A sending outcome confirms that the email provider accepted the request; a download click does not confirm installation.

6. The Paw-Paw app on your Mac

The Paw-Paw macOS app runs locally on your computer. Without an account, your chosen pet, collected items, settings, and progress are stored only on your own device. If you sign in, your progress is also stored in your account; see section 7.

Paw-Paw needs macOS Accessibility access to notice when you type and click. It counts keystrokes and clicks on your Mac to earn XP. It never records which keys you press or what you type, and it does not send these counts to us.

The app collects two kinds of diagnostic data, and you control both:

• Usage analytics — off by default (opt-in). If you turn it on, the app sends pseudonymous usage signals through TelemetryDeck, an EU-hosted, cookieless analytics service that stores no IP address. The signals are: app launch (with your selected pet and equipped item), changing your pet, equipping or unequipping an item (item and rarity), and collecting loot. TelemetryDeck also attaches standard technical details (operating-system version, app version, device model, language) and a salted, hashed anonymous identifier. It is not linked to your Paw-Paw account. We ask for your choice the first time you run the app, and you can change it anytime in Settings → Privacy. Legal basis: your consent.
• Crash & error reports — off by default (opt-in). If you enable them, the app sends technical diagnostics through Sentry (EU data region). Reports can include a crash stack trace, app and macOS versions, device characteristics, and technical error details. The client disables automatic and network breadcrumbs and strips user and request objects before sending. As with any network request, Sentry receives the source IP address in transit, but our Sentry organisation is set not to store IP addresses. The first-run choice is unchecked until you enable it, and you can turn it off later in Settings → Privacy. Legal basis: your consent.

Two further network activities are simply part of distributing the app:

• Downloads & updates. Downloading the app, and the app's automatic check for new versions, contact our content-delivery network at cdn.paw-paw.pet. As with any download, this necessarily reveals your IP address and the app version to the CDN so the file can be served. We also count these requests in aggregate, by day, to estimate how many people are actively using Paw-Paw — this counting uses no identifier and we do not store your IP address for it. The app also periodically downloads new item art and content from cdn.paw-paw.pet; these requests reveal the same information (your IP address, the app version and the requested file).
• Attribution parameter. A download link may carry a non-personal utm_source label (e.g. "reddit") so we can count download activity per channel in aggregate.

7. Accounts & cloud saves

Accounts are optional; you can keep playing without one. You can create an account with Google, Sign in with Apple, or a one-time code sent to your email address.

What we process

• Account details — your email address (Apple may give us a private relay address instead), the identifier your sign-in provider gives us, basic profile details the provider shares with us (such as your name), which sign-in methods you use, and sign-in and session records (such as times, IP address, and device or browser details) used to keep your account secure. We never receive your Google or Apple password.
• Your cloud save — your game progress and rewards (levels and XP in each season and collection, unopened and saved gifts, unlocked and discovered Paw-Paws and items, favourites, and achievements), your chosen Paw-Paw and item and where you placed your items, a few app preferences that make sense on every Mac, and the information needed to sync (revision numbers and change identifiers).
• Your email preference — whether you chose to receive Paw-Paw news and updates by email, and when you changed it.

A cloud save does not contain what you type, which keys you press, mouse activity, your Mac's input counters, your Accessibility permission, window positions, or your analytics and crash-report choices. Payment details and sign-in credentials are never part of it.

How it works

The first time you sign in, the progress already on your Mac is copied into your new account, and the original stays on that Mac. If this Mac and your account have different progress, the app combines them automatically and keeps the copies it replaced as backups on this Mac. The app keeps working offline and syncs when a connection is available.

Cloud saves are encrypted in transit and stored in our account database at Supabase. They are not end-to-end encrypted: our server checks their contents, and authorized people at Daystrom can access them only for support and security.

Legal bases: performance of a contract for your account and cloud saves; legitimate interests for sign-in security records.

Emails we send

Sign-in codes are sent to your email address through Resend. Signing in never subscribes you to marketing. We send news and updates, such as new features and new collections, only if you tick "Email me Paw-Paw news and updates" after signing in during setup or turn it on in Settings → Account. It is off unless you choose it. You can turn it off there at any time, and every such email will include a link to unsubscribe. Legal basis: your consent. Link, Stripe's checkout service, emails you the receipt for a purchase.

Export & deletion

Settings → Account → Export Account Data… downloads a copy of your account data (account details, email preference, cloud save, orders, and the collections you own), together with this Mac's copies of that account's progress. If your data is too large to download there, contact us and we'll arrange an export.

Delete Account… removes your sign-in, your email preference, your cloud save, and your access to the collections you bought. Any unfinished checkout is cancelled first; if a payment is still being processed, deletion waits until it settles. The progress that was on your Mac before you signed in stays there. Another Mac can keep its offline copy until it reconnects or you remove its local data; deleting an account can't reach a Mac that is offline. If you signed in with Apple, deletion also revokes Paw-Paw's Sign in with Apple access, or tells you how to revoke it yourself. We keep the payment records the law requires (section 8).

8. Purchases

When you buy a collection, you pay on Stripe's checkout page. Collections are sold through Link: Sold through Link, LLC, a Stripe company, is the merchant of record. Stripe and Link collect your payment details, email address, and billing details there to take the payment, calculate tax, send your receipt and handle refunds, disputes and support. We never receive your full card number. They use this data as controllers in their own right, as described in Stripe's privacy policy.

We keep an order record: your account, the collection, the price and currency, the order and payment status, Stripe's payment reference, and timestamps. Stripe tells us whether a payment succeeded, failed, or was refunded. In Stripe's dashboard we can also see the email address and billing details you gave Stripe and limited card details (such as the card brand, country, and last four digits). We use this to unlock and restore your purchases, handle withdrawals, refunds, and disputes, prevent fraud, and keep the accounting records the law requires.

The app remembers in your Mac's keychain which collections your account owns, so they keep working offline.

Legal bases: performance of a contract to deliver and restore purchases; legal obligation for accounting and tax records; legitimate interests for preventing fraud and handling disputes.

9. Hosting & service providers

We rely on a small number of trusted providers to run Paw-Paw. Most only process data on our behalf ("processors"). Stripe and Link, Google, and Apple also act as independent controllers for their own services, under their own privacy policies.

Provider	Purpose	Data involved
Vercel Inc. (USA)	Website hosting, cookieless analytics, and the server endpoints for the contact and feedback forms, checkout, payment notifications, and account deletion	Technical request data, IP address, contact-form and feedback submissions, account identifier and order data passing through those endpoints
Supabase, Inc. (USA; database hosted in the EU, Frankfurt)	Accounts, sign-in, cloud saves, and purchase records	Account details, sign-in and security records, cloud saves, email preference, order records, and collections owned
Stripe Payments Europe, Ltd. (Ireland) and Sold through Link, LLC (USA)	Checkout, payments, tax, receipts and refunds	Card and billing details, email address, payment amount and status, device and fraud-prevention data collected on Stripe's checkout page
Google and Apple	Sign in with Google and Sign in with Apple, if you choose them	Your Google or Apple account identifier and the profile details you let them share (email address, and possibly your name)
Cloudflare, Inc. (USA)	App download & update delivery, and new item art and content (cdn.paw-paw.pet)	IP address, app version, requested file
Resend (USA)	Sending sign-in codes and requested download links, and delivering contact-form and feedback messages to us by email	Your email address, the email contents, and the contents of your message
TelemetryDeck GmbH (Germany, EU)	App usage analytics (only if you opt in)	App/OS version, device model, language, salted hashed anonymous ID, in-app event signals
Functional Software, Inc. / Sentry (EU data region; US parent)	Optional app crash & error reporting	Crash stack traces, device characteristics, OS/app version, technical error details, and source IP in transit (not stored)

We may add or change providers as the project grows and will keep this list up to date.

10. International transfers

Our account database (Supabase), app analytics (TelemetryDeck), and crash reporting (Sentry) are hosted on servers inside the European Union.

Some providers are based in the United States, so some data may be processed outside the European Economic Area. Transfers are handled under each provider's applicable data-transfer mechanism, which may include the EU–U.S. Data Privacy Framework and/or Standard Contractual Clauses. We will verify the applicable safeguards before adding or materially changing a provider; you can request current information by emailing privacy@paw-paw.pet.

11. How long we keep data

• Account details, cloud saves, and your email preference are kept while you have an account and removed when you delete it. Copies in our database provider's backups expire on their normal cycle.
• Order and payment records are kept for as long as accounting law requires, up to ten years from the end of the transaction year, even after you delete your account. After deletion they are kept apart from your account, with only the evidence needed for accounting, tax, refunds, and disputes.
• Sign-in and security logs at our database provider are deleted automatically after at most 7 days. The record of each signed-in device (its IP address and browser or app details) is kept until you sign out on that device or delete your account.
• Data on your Mac (your progress, backups of saves the app replaced, and the remembered purchases) stays there until you remove it.
• Website analytics is aggregated and cookieless; it is retained in aggregate form and does not identify you.
• Server & function logs (which can include IP addresses) are kept by Vercel for one day and then deleted automatically.
• Contact-form and feedback messages are kept only for as long as needed to handle your request, reasonable follow-up, and any applicable legal obligations. Resend keeps the delivered email for 30 days; message contents are never stored in Vercel function logs. You can ask us to delete your message sooner where the law allows.
• Requested download-link emails are not saved in our database, function logs, or analytics. Resend keeps the address and email contents for 30 days. Sign-in code emails are kept there for the same 30 days.
• App usage analytics (TelemetryDeck) is retained in aggregate and is not tied to an identifiable person.
• Crash reports (Sentry) are kept for at most 90 days and then deleted automatically.

12. Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased;
• restrict or object to our processing;
• receive your data in a portable format;
• withdraw consent at any time (without affecting prior processing).

If you have an account, you can export your data and delete your account yourself in Settings → Account. For anything else, email privacy@paw-paw.pet. You also have the right to lodge a complaint with a supervisory authority — in our case the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), or the authority in your own country.

13. Children

Paw-Paw is a general-audience app and is not directed at children under 16. You need to be at least 16, or have permission from a parent or guardian, to create an account or buy a collection. We do not knowingly collect personal data from children under 16 without that permission. If you believe a child has given us personal data, contact us and we will delete it.

14. Changes to this policy

We may update this policy as Paw-Paw evolves or as our providers change. When we do, we'll revise the "last updated" date at the top. Significant changes will be highlighted on this page and, if you have an account, we may also tell you in the app or by email.

15. If you live outside the EU

We apply this policy, and the rights in section 12, to everyone, wherever you live. Some countries ask for a few more details:

• United Kingdom. The UK GDPR gives you the same rights, and you can also complain to the Information Commissioner's Office (ICO).
• United States. We do not sell personal information or share it for cross-context behavioural advertising. Wherever you live in the US, you can use the rights in section 12 by emailing privacy@paw-paw.pet.
• Japan. We use personal information only for the purposes in section 2. It is handled in the EU, which Japan's Personal Information Protection Commission recognises as having equivalent protection, and by the US providers in section 9, under data processing agreements that require GDPR-level protection. Our security measures include encrypted connections, access limited to the people who need it, and providers that follow recognised security standards. Ask us if you would like more detail about these measures or our providers.
• South Korea. To provide the features you use, your information is transferred over encrypted connections, at the time you use each feature, to Daystrom OÜ in Estonia and to the providers in section 9, in the countries shown there, for the purposes and periods in sections 2 and 11. You can refuse by not using the feature concerned, such as an account or the contact form; the app still works without them. When a retention period ends, we delete the data so that it cannot be restored. Our privacy officer is Daystrom OÜ's management board, reachable at privacy@paw-paw.pet.
• Everywhere else, for example Brazil, Canada, Switzerland, China or Taiwan: email privacy@paw-paw.pet to use the rights your local law gives you, and we will answer.

16. How to reach us

Questions, requests, or concerns about privacy? Email privacy@paw-paw.pet and we'll get back to you.