Contact
Dinosgacha is published by Roaproductions. For privacy questions or requests, email support@dinosgacha.com. We use information to run and improve the game, provide accounts and saves, and handle support.
We process account and save information to provide the service you request. Our legitimate interests cover security, game improvements and support.
Cookies and browser storage
We store guest progress and language and audio preferences in your browser. Sign-in providers use essential cookies and session storage to authenticate you and keep you signed in. A signed security cookie remembers verification for up to six hours.
Android uses browser sign-in for the same account and saved progress. The app stores recovery copies locally and an encrypted sign-in secret. Server-side session references expire after 30 days.
On iPhone and iPad, optional accounts use Apple or Google sign-in. We store an encrypted Apple authorization token to revoke Dinosgacha’s Apple access when fulfilling a verified account-deletion request.
Account information
We use your email address, account identifier, nickname, avatar and game progress to provide your account. Sign-in services may provide your name or profile photo. For beta administration, support and security, we privately record your confirmed sign-in email where available, sign-in provider, first and latest observed activity and latest approximate connection country supplied by our hosting provider. Country estimates may be inaccurate. This record excludes your IP address and is accessible only to authorised administration. Your nickname is public; your email is not displayed to other players.
Optional session sharing
Session sharing sends a random identifier for your browser tab, screen or game mode, device category, language, event counts and an estimate of active play time. It does not send your nickname, account details or saved game. 30-day session records expire; identifier-free historical aggregates remain.
Only with your permission, we store a separate random browser identifier for up to 30 days to measure return visits and broad traffic sources, such as YouTube or Instagram. We also estimate connection country; hosting headers and VPNs can make this inaccurate. These statistics are not linked to accounts. We do not collect full referrer URLs, search terms or campaign names. Return visits measure browsers, not people.
You can turn sharing off in Profile to withdraw permission and remove the local browser identifier. The game also respects Do Not Track and Global Privacy Control browser signals.
Optional account play time
Account play time is a separate Profile choice, off until you explicitly enable it. Only authorised game administrators can see your nickname, estimated active play time by day and game mode, and recent playing status. No email, save or anonymous browser identifier is included; anonymous statistics stay separate. We do not reconstruct earlier play time. Account activity records expire after 30 days. Switching this choice off deletes its records; account deletion also removes them. Privacy signals, disabled statistics and testing exclusion stop collection. If deletion cannot connect, sharing stops locally and Profile offers a retry.
Feedback and support
Feedback includes your message, category, optional player name, language, game version and submission time. A key derived from your IP address helps limit abusive submissions. Cloudflare Turnstile checks browser and connection information for bots. Emailing support shares your email address and message.
Providers, payments and retention
We use Supabase, Apple, Google, OpenAI and Cloudflare for accounts, hosting and support. Providers may process technical information, such as IP addresses, outside your country. Stripe handles payments; we do not store full card details. We keep purchase references, amounts, status, purchased items, confirmations and delivery consents for delivery, refunds and accounting. Withdrawal requests include your name and declaration.
We keep account records, saved-game, feedback and purchase information for as long as needed to provide the service, handle support and meet security or legal obligations. Account deletion requests are handled through support, as described below.
Your rights
Contact support@dinosgacha.com to request access, a copy, correction or deletion, or to restrict or object to processing. You may complain to the Dutch Autoriteit Persoonsgegevens or your local data-protection authority.
Request account deletion
In Profile, choose Request account deletion and confirm. Keep the request reference for contacting support after sign-out.
You can also email support@dinosgacha.com with “Dinosgacha account deletion”, your player nickname and the Apple, Google or ChatGPT method you use. We need to verify account ownership; never send passwords or sign-in codes. You do not need to reinstall the app to request deletion.
This starts a manual support request, not instant deletion. We handle requests within 30 days after account ownership has been verified; support explains any exceptional extension. Fulfillment removes your Dinosgacha profile, cloud progress, inventory, app access and applicable Dinosgacha authentication record. It does not delete your Apple, Google or ChatGPT account.
Support explains records retained for security or legal obligations. Necessary purchase evidence follows the applicable seven- or ten-year accounting period, checked against the transaction. Minimal closure and redacted audit records prevent restoration and are reviewed after 90 days and periodically thereafter, not automatically erased. Deleted app records may remain in Cloudflare database recovery history for up to 30 days; restoration must respect account closures. Retained accounting facts exclude your game save, player name and sign-in credentials. Pending payments or refunds require reconciliation. Guest saves and recovery copies on your own devices are local; clear the app or browser data to remove those copies.