Privacy Policy

What is stored on your device

Your progress — focus sessions, coins, what you have bought, your pet's mood, and your settings — is written to your browser's local storage. It never leaves your device unless you switch on cloud sync. Clearing your browser data deletes it permanently; there is no copy for us to restore.

Cloud sync, if you turn it on

Cloud sync is off by default. When you enable it, your browser generates a random 24-character code and uploads your save file under that code. The code is the only credential — we do not ask for an email address, and there is no account to log in to.

• We store an opaque blob of game state. We cannot tell who it belongs to.
• Anyone holding your sync code can read and overwrite that save, so treat it like a password.
• We never email it, never log it, and it only travels over an encrypted connection.
• Lose the code and the save is unreachable — for you and for us.

Accounts, if you choose to make one

An account is entirely optional. The game plays in full without one — an account only lets your save follow you from one device to another instead of relying on a sync code. You can sign up with an email address and a password, or use Continue with Google. Accounts are handled by thebetter-auth library running on our own server.

What we store for an account:

• Your email address and a display name.
• If you sign up with a password, only a securely hashed version of it — never the plaintext, so no one, us included, can read your password back.
• If you use Continue with Google, a Google account identifier and the basic profile Google returns (your email and name). We do not receive your Google password.

While you are signed in, your session lives on the server in a CloudflareKV namespace and is referenced by a single session cookie in your browser. That cookie is essential to keeping you logged in; the cookie notice describes it in full.

You can delete your account at any time. Ask from the contact page using the email address on the account, and we will remove the account, its sessions and any save attached to it.

Weather and your location

The world in the game follows the real weather where you are. Getting that does not use your device's location and never triggers a permission prompt.

Instead, our host (Cloudflare) attaches an approximate location to every web request as it arrives, the same way any website can see roughly where a visitor is connecting from. Before we use it for anything, we round it to one decimal place — an area of roughly 11 km — and that rounded value is all that is ever sent to the weather provider, Open-Meteo.

The rounded coordinates are used as a cache key so that everyone in the same area shares a single lookup. Nothing is written to our database, nothing is logged, and no record is created against you. If you would rather not have this at all, blocking /api/weather is harmless — the game falls back to fair weather.

Comments and community

The forum and the comments under blog posts let you post text publicly. To post, you need an account, so a comment is tied to your display name. The content you write, and any message you send us through thecontact page, is stored in our database (Cloudflare D1) so it can be shown and replied to.

Contributions pass through a moderation queue — we review posts and can edit or remove anything that breaks the rules. Please do not put anything sensitive about yourself into a public comment. You can ask us to delete something you posted from the contact page.

Deals, offers and affiliate links

The Gifts page ("letters from Mochi") shows offers, coupons and sponsorships from real merchants. Some of those outbound links are affiliate links: if you buy something after following one, PetPomo may earn a commission, at no extra cost to you. Those links are marked as sponsored and carryrel="sponsored nofollow noopener".

We do not run any tracking script for this. The links are plain redirects — when you click one, the merchant's own site may set its own cookies, but PetPomo does not, and we are not told what you go on to buy. Whether a given offer is shown at all is decided only from the approximate country your host (Cloudflare) attaches to the request; that country is used in the moment and not stored. The full details are on theaffiliate disclosure page.

How we count visitors

We use Google Analytics to understand how many people visit and which pages are useful. It isoff until you agree to it: on your first visit a small banner asks, and Google Analytics — and the cookies it uses — load only if you press Accept. Press Decline and nothing analytics-related runs or is stored; your choice is remembered so you are not asked again. We useGoogle Consent Mode, which keeps tracking denied by default until that consent is given.

When it is on, Google Analytics collects standard web-analytics data — pages viewed, rough location, device and browser type, and a cookie-based identifier — and processes it on Google's infrastructure undertheir privacy policy. We use it only in aggregate and never to identify you personally. You can withdraw consent any time by clearing this site's data (which resets the choice and deletes the cookies), and browser "Do Not Track"/ad-blocker tools stop it too. The specific cookies are listed in the cookie notice.

What we do not do

• No advertising trackers, and no tracking of any kind until you have opted in to analytics.
• No selling of personal information, and no sharing beyond the processors listed below.
• No profiling and no automated decision-making about you.

Who processes data for us

We keep the list of third parties short and name every one:

• Cloudflare— hosts the site and its database, and handles server-side sessions.
• Google— for Google Analytics once you accept it (above), and if you choose Continue with Google, to sign you in.
• Open-Meteo— receives the rounded coordinates described above to return the weather.

Cookies

PetPomo sets one essential cookie — the session cookie for staying signed in — and Google Analytics cookiesonly if you accept analytics on the consent banner. There are no advertising cookies. Everything else about the game is kept in your browser's local storage. See the cookie notice for the full list.

Server logs

Our host keeps short-lived operational logs (things like request counts and error rates) to keep the service running and to defend against abuse. We do not build user profiles from them.

Children

PetPomo is suitable for all ages and can be played with no account and no personal information at all. Accounts, which do involve an email address, are meant for those old enough to hold one under their local rules.

Your rights

If you have no account and use no cloud sync, we hold nothing personal about you, so there is normally nothing to request, correct or erase. If you have an account, you can ask us to show, correct or delete what it holds fromthe contact page, using the email on the account so we can be sure it is yours. If you use cloud sync without an account, send us the sync code and we will delete that row — since we cannot verify who owns a code, please do not send one that is not yours.

Changes

Material changes will be reflected in the “last updated” date above. Continuing to use the site after a change means you accept it.