This Privacy Policy explains how Mega Rabbit ("we", "us", "our") collects, uses, shares, and protects information when you play Mega Rabbit (the "Game") on any platform we release it for, and when you visit mega-rabbit.com (the "Site").

By downloading, installing, or playing the Game, you agree to this Policy. If you do not agree, please do not use the Game.

The short version

  • What we collect: your device and app details, how you play, crash reports, and an advertising ID. We never see your name, home address, or payment card details.
  • Ads: the mobile versions show ads through Google AdMob. In Europe and the UK we ask your permission first, and you can change that answer any time in the Game's settings. The PC version has no ads.
  • Purchases: the store you bought from — Google Play, the App Store or Steam — handles the money. We only get a receipt so we can hand you the item.
  • Deleting everything: you can wipe your account and data from inside the Game, or by emailing us — see section 9.
  • What we don't do: we don't sell your personal data, and the Game isn't built for children under 14.

This box is a plain-language summary to help you get your bearings. It isn't a substitute for the full policy — the numbered sections below are what actually applies.

1. Who we are

The Game is developed and published by:

DeveloperMega Rabbit
Address803-S31, 24 Gunam-ro 18beon-gil, Haeundae-gu, Busan 48094, Republic of Korea
Privacy contacthello.mega.rabbit@gmail.com
Privacy officerMega Rabbit Privacy Team

We are the data controller for the personal data described in this Policy.

1.1 Which versions this Policy covers

We release the Game on more than one platform, and what we collect differs between them. Where a section below applies to only some versions, it says so.

VersionStoreAdvertisingAdvertising identifier
AndroidGoogle PlayYesGoogle Advertising ID (AAID)
iOS / iPadOSApple App StoreYesApple IDFA — only if you allow tracking
PCSteamNoNone

If we release the Game on a platform not listed here, we will update this Policy before doing so.

2. Information we collect

2.1 Information you give us

2.2 Information collected automatically

2.3 Purchase information

Purchases are processed by the store you bought from — Google Play, the Apple App Store, or Steam — not by us. We receive a purchase or transaction token, an order ID, the product ID, and the purchase status, so we can deliver your item and handle support requests.

We never receive or store your payment card number, bank details, or billing address. Those are handled entirely by the store. See the privacy policies of Google, Apple, and Valve (Steam).

3. How we use information

For players in the European Economic Area, the United Kingdom, and Switzerland, the table below also states our legal basis under the GDPR.

PurposeData usedLegal basis (GDPR)
Operate the Game, save and sync your progressAccount identifier, game and save data, device infoPerformance of a contract
Fix bugs, diagnose crashes, improve stabilityCrash logs, device and app infoLegitimate interests
Understand how the Game is played and improve itUsage data, pseudonymous identifiersLegitimate interests
Deliver in-app purchases and provide supportPurchase token, order ID, account identifierPerformance of a contract
Show advertising (mobile versions only)Advertising ID, device info, IP-derived coarse locationConsent (EEA/UK) / Legitimate interests (elsewhere)
Detect cheating, fraud, and abuse; enforce our TermsDevice info, usage data, account identifierLegitimate interests
Meet legal, tax, and accounting obligationsTransaction recordsLegal obligation

We do not sell your personal data, and we do not use your data to build advertising profiles beyond what the advertising services described below do.

4. Advertising

This section applies to the mobile versions only. The PC (Steam) version displays no advertising, contains no advertising SDK, and uses no advertising identifier. If you play only on PC, this section does not affect you.

The mobile versions display advertising through Google AdMob. To serve ads, AdMob may access your device's advertising identifier, IP address, device information, and information about how you interact with ads.

4.1 If you are in the EEA, the UK, or Switzerland

Before any personalized advertising or non-essential data processing takes place, we show a consent message using Google's User Messaging Platform (UMP). You can choose whether to allow personalized ads, and you can change your choice at any time from the Game's Settings → Privacy options screen.

4.2 If you are in California or another US state with privacy legislation

Sharing your advertising identifier with ad partners for personalized advertising may be treated as a "sale" or "sharing" of personal information under those laws. You can opt out at any time via Settings → Privacy options in the Game, or by enabling the device-level setting described below.

4.3 If you are on iOS

Apple requires your permission before an app may access the IDFA. We ask through Apple's App Tracking Transparency prompt. If you decline, we do not access the IDFA and you will see non-personalized ads. You can change your answer at any time in iOS Settings → Privacy & Security → Tracking.

4.4 Controlling advertising on your device

Opting out of personalized ads does not remove ads from the Game — you will simply see less relevant ones.

5. Analytics and crash reporting

We use Google Analytics for Firebase and Firebase Crashlytics to understand how the Game is used and to find and fix problems. These tools collect pseudonymous identifiers and the device, usage, and crash data described in section 2.2. They do not tell us your name, email address, or any directly identifying information.

6. Who we share information with

We share personal data only with the service providers listed below, and only as needed to run the Game.

RecipientPurposeTheir privacy policy
Google AdMob (mobile only)Serving advertisingpolicies.google.com/technologies/ads
Google Firebase (Analytics, Crashlytics)Analytics, crash reporting, cloud savefirebase.google.com/support/privacy
Google Play (Android)Sign-in and purchasespolicies.google.com/privacy
Apple (iOS)Game Center sign-in and App Store purchasesapple.com/legal/privacy
Valve — Steam (PC)Sign-in and purchasesstore.steampowered.com/privacy_agreement

We may also disclose information where we are legally required to do so, to enforce our Terms of Service, to protect the rights or safety of players or the public, or in connection with a merger, acquisition, or sale of assets (in which case we will notify you before your data becomes subject to a different privacy policy).

7. International data transfers

We are based in the Republic of Korea, and our service providers operate globally. Your data may therefore be processed outside your country of residence, including in the United States.

Where data is transferred out of the EEA, the UK, or Switzerland, the transfer is protected by the European Commission's Standard Contractual Clauses or another lawful transfer mechanism relied on by the relevant provider. The Republic of Korea has received an adequacy decision from the European Commission.

8. How long we keep data

DataRetention period
Account and save dataUntil you delete your account, or after 24 months of inactivity
Analytics and usage dataUp to 14 months (Firebase default retention)
Crash logsUp to 90 days
Support emails2 years from the last message
Purchase and transaction records5 years, as required by Korean commercial and tax law

9. Account and data deletion

You can delete your account and associated data at any time:

We will confirm your request and complete the deletion within 30 days.

What is deleted: your account identifier, display name, save data, game progress, purchase history linked to your account, and support correspondence.

What we may keep: transaction records that we are legally required to retain for tax and commerce purposes (5 years), and aggregated or anonymized statistics that can no longer be linked to you.

What we cannot delete: your Google, Apple, or Steam account itself belongs to that platform, not to us. Deleting your data with us removes what we hold; to close the platform account you would need to contact Google, Apple, or Valve directly. If you play on more than one platform, each version has its own save data — tell us which ones you want removed, or say "all platforms".

Deleting your account does not automatically refund unused in-app purchases, and progress cannot be restored afterwards. Please make sure this is what you want.

10. Your privacy rights

10.1 Everyone

You may ask us to access, correct, or delete your personal data, or to stop processing it, by contacting us at hello.mega.rabbit@gmail.com. We respond within 30 days and will not charge you or treat you differently for exercising these rights.

10.2 EEA, UK, and Switzerland (GDPR)

You have the right to: access your data; have inaccurate data corrected; have your data erased; restrict or object to processing (including profiling for advertising); receive your data in a portable format; and withdraw consent at any time without affecting processing carried out before withdrawal.

You also have the right to lodge a complaint with your local supervisory authority. A list is available at edpb.europa.eu.

10.3 California (CCPA/CPRA)

You have the right to know what personal information we collect and how it is used and shared; to request deletion or correction; to opt out of the "sale" or "sharing" of personal information for cross-context behavioral advertising; and to non-discrimination for exercising these rights.

In the preceding 12 months we collected the categories described in section 2 (identifiers, commercial information, internet/app activity, and coarse geolocation) and shared identifiers and app activity with advertising partners as described in section 4 (mobile versions only). We do not sell personal information for money, and we do not knowingly sell or share the personal information of minors under 16.

10.4 Republic of Korea (PIPA)

Under the Personal Information Protection Act you may request access to, correction of, suspension of processing of, or deletion of your personal information. You may also file a dispute with the Personal Information Dispute Mediation Committee (kopico.go.kr, 1833-6972) or report to the Personal Information Protection Commission (privacy.go.kr, 182).

11. Children

The Game is intended for players aged 14 and over and is not directed to children. We do not knowingly collect personal data from children under 14 (or under the minimum age required for consent in your country, where that age is higher).

If we learn that we have collected personal data from a child below the applicable age without verified parental consent, we will delete it promptly. If you believe a child has provided us with personal data, please contact us at hello.mega.rabbit@gmail.com.

12. Security

We use industry-standard measures to protect your data, including encryption in transit (TLS), access controls limiting who on our side can reach player data, and reliance on Google Cloud infrastructure for storage. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a breach affects your personal data, we will notify you and the relevant authorities as required by law.

13. Changes to this Policy

We may update this Policy from time to time. When we make material changes, we will update the "Last updated" date above and notify you in the Game before the changes take effect. Continuing to play after the changes take effect means you accept the updated Policy.

14. Contact us

Questions, requests, or complaints about this Policy or your personal data:

Emailhello.mega.rabbit@gmail.com
Privacy officerMega Rabbit Privacy Team
Postal addressMega Rabbit
803-S31, 24 Gunam-ro 18beon-gil
Haeundae-gu, Busan 48094
Republic of Korea