Privacy Policy

1. Who we are

Eek Monsters is an educational math-runner game. This policy covers the web app at eekmonsters.com and the Eek Monsters Android app distributed via Google Play.

2. Accounts and email

You can play as a guest without an account. If you create an account, we collect your email address and a hashed PIN so you can sign in on other devices and recover progress.

• Email is used only for sign-in, account recovery, and essential service notices.
• Your PIN is stored as a one-way bcrypt hash. We never see or store the plain PIN.
• We do not sell your email or share it with advertisers.

3. Gameplay data

We store your progress (levels completed, coins, upgrades, streaks, mission state) so it syncs across devices when you sign in. Guest progress is kept in your device's local storage only.

4. Advertising (Google AdMob)

The Android app shows rewarded ads via Google AdMob. When you watch an ad, Google may collect and process the following as an independent controller under its own privacy policy:

• Device advertising ID (if you have not opted out at the OS level)
• Approximate location derived from IP address
• Device and app information (model, OS version, app version, crash logs)

Because Eek Monsters may appeal to children, we request that AdMob treat traffic from this app as child-directed (TFCD) and restrict ad content to the family-safe max rating. Google does not use personalized advertising for child-directed requests.

See Google's advertising privacy notice at policies.google.com/technologies/ads.

5. Data storage and security

Account and progress data are stored on Lovable Cloud (Supabase-hosted Postgres) with row-level security so a user can only access their own rows. Transport is encrypted over HTTPS/TLS. PINs are hashed with bcrypt before storage.

6. Children's privacy

Eek Monsters is designed to be family-friendly. We do not knowingly collect personal information from children under 13 beyond what is necessary to operate the game (email + hashed PIN if the parent chooses to create an account). All ad requests are tagged as child-directed.

7. Your rights

You can request deletion of your account and associated data at any time by emailing privacy@eekmonsters.com. We will remove your account within 30 days.

8. Changes to this policy

If we materially change how data is handled, we will update the "Last updated" date above and, for signed-in users, surface a notice inside the app on next launch.

9. Contact

Questions? Email privacy@eekmonsters.com.