Privacy

Draft, 26 Oct 2026, written for the first build that keeps your progress on your phone and backs it up to CaveDino's server, and which reports how the game is played; updated 29 Oct 2026 for feedback sent from the game.

What CaveDino keeps about you

The first time you open the game, it asks our server for a player number and keeps it on your phone. The number is made up by the server; it says nothing about you: not your email, phone number, Google account or anything about your device. There is no sign-in and no account to create.

Every level you win counts on your phone at once; no connection is needed to play. A few times while you play (when the game opens, when you put it away, and every few minutes if something changed) the game sends the server your progress: your stars and best score for each level you have finished, and the furthest level you have unlocked. The server keeps the higher of each number, so a second phone on the same Google account gets everything, and checks only that the numbers could come from real climbs (a score fits its stars and its level, an unlock follows a finish). The server keeps, under your player number:

• your stars and best score for each level you have finished, and the furthest level you have unlocked;
• the climbs you sent as proof for the leaderboard (below), with what each came to when the server played it back;
• a note when your progress could not have come from real climbs, or a climb did not play back as claimed, for a person to look at. Nothing is decided by a machine alone;
• where the game was installed from (the Play Store or elsewhere) and whether it is a test build, to keep our own testing out of the numbers. It names no person;
• the country your phone last connected from (for example "FI" for Finland), which Cloudflare, who runs our server, works out from the internet connection. Only the country is kept: never your IP address, your town or anything closer. We use it to see in which countries people play;
• the days you play (the date only, not the time), to count how many players come back. Each day is kept 90 days.

How the game is played

To see which levels are too hard and which phones struggle, the game also tells the server, under the same player number, when you start a level, win it (how long it took, stars and score) or lose it (how far you got and what caught you), and once each time you open the game: the phone's model name (for example "RMX3771"), the game's version, the language, the screen size, the graphics and speed settings, and how smoothly the home screen runs. Nothing in it names you or your phone: there is no advertising id, no device id and no location (the country above is kept with your progress, not with these). We keep it for 90 days, only as numbers we look at together (how many players finished level 3, how fast the game runs on a given phone model), and it is never used for ads.

What stays on your phone

Which dino you picked, how long you have played, and your settings (sound, vibration, language, how the game looks) stay on your phone and are never sent. Uninstalling the game deletes them. Your climber name is the exception (below).

The leaderboard

The leaderboard ranks players only by climbs the server has played back for itself. The game keeps on your phone your best climb on each level: the level, the size of your screen in game units, and every tap and release with the moment it happened. If your stars and scores would place you in the public top 50, the server asks for the climbs behind the levels it has not seen, plays each back, and ranks you by what they come to. Players outside the top 50 never send a climb.

Your climber name and player code

Every player gets a player code, eight random letters and digits such as "A1B2-C3D4", shown in Profile. It says nothing about you; it is how a friend will be able to find you, and how we tell players apart.

With the birth-year question (below) the game asks what to call your climber. If you are 13 or older you type a name; it is sent to our server, kept with your player code and shown on the leaderboard, so that we and other players can see who is climbing. Please don't use your full real name, an email, a phone number or a link: the game refuses links, phone numbers and rude words, and we may reset a name that breaks these rules. Players under 13 never type a name: they pick a made-up one ("Bouncy Gum"). Anyone without a name is shown by the made-up name their player code gives them. Profile lets you change your name or switch "Show my name on the leaderboard" off, which removes it from the server at once.

Feedback you send us

If you said you are 13 or older, the game lets you write to us. What you type is sent only when you press Send, with the game's version and language. It is kept with your player code until you delete your account, and only the CaveDino team reads it; it is never shown to other players. Please don't put your name, email, phone number or anything else about yourself in it. Players under 13 are not offered it.

If you choose to sign in with Google

After level 2, and in Settings, the game offers Google sign-in, so your progress follows you to a new phone. It is optional and the whole game works without it. Before offering it, the game asks for your birth year once, with your climber name; it keeps only whether you are 13 or older, never the year. Players under 13 are not offered it.

If you sign in, we receive from Google a token that we check and then keep only your Google account number (an id Google gives our app for you; it is not your email, your name or your phone number), attached to your player number. We never read or store your email, name or photo, even though Google's sign-in screen shows them to you.

Where it is kept, and deleting it

Everything above is stored on Cloudflare's servers (Cloudflare Workers, D1, Durable Objects and Workers Analytics Engine), which run our service, and travels over an encrypted connection (HTTPS). It is not shared with anyone, not sold, and not used for ads or analytics. It is kept until you delete it. To delete it, open Settings > Account > Delete my account; this removes your player number and player code, your Google account number if you attached one, your progress and climbs, your climber name, your country, the days you played and the feedback you sent from our servers at once, and the game starts you over as a new player. The play reports cannot be picked out and removed one player at a time; with the player number gone they no longer lead back to anything, and they delete themselves 90 days after they were sent. You can also write to us and we will delete it for you. The steps are on one page.

Everything else

The game does not show ads, does not sell anything, does not ask for your location, camera, microphone or contacts, and does not use any third-party analytics or advertising software; the play reports above go only to our own server. It asks for two permissions: vibration, for a small buzz when you bite a cube, and internet, for the server described above.

Google Play may collect its own statistics about installs and crashes, as it does for every app; that is covered by Google's privacy policy, not ours, and we only ever see it as totals.

On this website and the web game

Added for the website: to be checked by Adi and Inca with the rest.

cavedino.com sets no cookies, shows no ads and uses no analytics. The game at cavedino.com/play has no sign-in and no player number: your progress stays in your browser, and clearing the browser's data for this site deletes it.

If the game breaks in your browser, it sends us a short error report so we can fix it: what went wrong and where in our code, which level you were on, your browser's name and version, and, in Chrome on Android, your phone's model name. It holds no name, no email, no player number and no internet address, and it is stored on Cloudflare's servers like everything above.

CaveDino is made by Kalevala.dev. If you have a question, or want your data deleted, write to contact@kalevala.dev.