Service and contact
catbeatz is the public-facing brand used for this service ("we"), not a representation that a company is registered. This policy covers CatBeatz, its test builds and catbeatz.com.
Privacy, data-rights and support contact: support@catbeatz.com. Describe your request and game version. Do not send passwords, verification codes, login credentials or full bank details.
Information and purposes
Online features create or use an account. We process account identifiers, player names, selected regions, cat collections and levels, teams, avatars, titles, frames, backgrounds, progress, can balances, rewards, game actions, scores and match results to provide authentication, saving, validation, rewards, rankings, player badges and anti-cheat protections. Guest accounts can be linked to activity and are not fully anonymous.
Sign in with Apple provides an account identifier and the email you authorize, which may be a relay address. We do not receive your Apple password. Email and password submitted for an existing email account are handled by the self-hosted authentication service; the game client does not save the entered password.
Devices store credentials, preferences, local progress and test-ad records. Servers and network services process IP addresses, connection times, requests, versions and error/security records for connectivity, troubleshooting, abuse prevention and duplicate-reward prevention.
We use emails, messages and attachments you send to answer game or data requests. Without data necessary for online functions, sign-in, synchronization or online matches may not work. Watching optional ads is not required.
What other players see
Rankings and multiplayer show relevant player names, scores, ranks, teams or cat avatars, titles, frames, VS backgrounds and selected regions. Do not use real names, emails or sensitive information in player names. Login credentials, passwords and private emails are not public player-profile fields.
Player safety and reports
Builds supporting reporting and blocking retain the reporting and target account identifiers, the observed player name, the selected reason, submission and review times, and status. These account-linked records support review of inappropriate names, abuse prevention and customer support, not advertising or cross-app tracking. Reports have no free-text or attachment fields. The reporter identity is not shown to the reported player.
Block records retain both account identifiers and the time to hide relevant leaderboard entries from your view and prevent future matchmaking between the accounts. Blocking does not change actual scores or other players’ ranks. You can unblock through the blocked-player list. It does not cancel an already-started match.
Administrators review reports and may hide the reported name in favour of the public player number. A single report does not automatically delete cats, progress or cans. Account deletion clears associated online block and report records; existing backups remain subject to this policy’s retention and restoration restrictions. Safety concerns can also be sent to support@catbeatz.com.
Optional ads, purchases and test environments
Supported iPhone builds may offer optional Google rewarded ads, depending on in-game availability, region, consent and ad inventory. An ad is not guaranteed for every request, and viewing ads is not required to play. The SDK may process IP-derived approximate location, device/app identifiers, ad interactions, performance and crash information for advertising operations, diagnostics, analytics and abuse prevention.
The iPhone configuration does not request Apple tracking authorization. It requests non-personalized ads and disables publisher personalization and first-party ID options; it blocks ad loading if an older test build retains tracking authorization. Google consent handling must still permit ad requests. Use Advertising privacy options where applicable to change choices, or do not watch ads. Withdrawal does not undo earlier lawful processing. Non-personalized ads and no tracking prompt do not mean no data collection.
Server-verified ads use a one-time reward identifier and a Google-signed callback. Our backend can link that identifier to an account, so it is not fully anonymous. We retain ad unit, transaction identifier, reward type, verification and delivery status for rewards and duplicate prevention. Separate 12-hour silver/gold cooldowns begin after successful verification and credit and are stored on the server. Production and test rewards are separate; Windows and demonstration ads are not production server rewards.
The production consumable provides 5 Gold Cans per purchase. Apple displays the storefront price and handles payment. After successful server verification, cans are delivered to the corresponding account for Gold Can cat draws; probabilities are available in the game. Checkout is unavailable when the service or product is disabled. This website has no payment/card-entry form, and we do not receive card numbers. We retain necessary transaction/product identifiers, Apple-signed transaction data, account bindings, verification and refund status for verification, delivery, duplicate prevention and refunds.
TestFlight / Apple Sandbox purchases do not charge money. Test Gold Cans do not increase the production home-screen balance and can only be spent in isolated test cat draws. The server retains draw requests, debits, test cats, shards and pity records; the device retains pending requests for resynchronization. Retrying the same request does not debit again. Test collections, shards and pity do not become production assets. An ad marked Test mode does not itself prove server credit; the corresponding reward and server verification result remain authoritative.
Apple decides refunds; submitting a request does not mean approval. After receiving and verifying a refund, only the 5 cans from that purchase are reversed once. If fewer than 5 remain, no partial debit or debt is created; the case is referred for manual handling without deducting other characters or progress. Recovering an already delivered transaction does not grant it again.
Website, providers and international processing
The website has no first-party analytics scripts, ads, sign-in forms or remote fonts. Cloudflare provides DNS, delivery and security; DigitalOcean hosts the site. These services may process IPs, URLs, request times, browser information and security records. The website does not deliberately set analytics/advertising cookies; infrastructure may use necessary security technologies.
We manage game authentication and databases on a Singapore DigitalOcean host using self-hosted Supabase/PostgreSQL software, not Supabase Cloud. Cloudflare forwards support mail to Gmail. Apple provides the platform, sign-in, product queries and purchase processing; Google provides advertising, consent management and Gmail.
Providers may process or back up information outside Singapore, Hong Kong and Taiwan; locations depend on the service. We provide data as needed for these functions and may disclose necessary information to meet legal requirements, protect accounts or resolve disputes. Provider policies are linked below. We do not publish your support messages.
Retention, backups and deletion
Account data and progress are retained while the account is used, until deletion or no longer needed to provide service. Deletion removes the online account, collection, progress, balance and associated rankings. Necessary deletion-status and restoration-suppression records remain. Minimal transaction-deduplication, refund, security or dispute records may be retained with restricted access, not for continued gameplay.
Host Nginx access logs are configured for daily rotation with 14 rotated files. This is not a 14-day guarantee for other system logs, Cloudflare records or backups. Support messages are retained as needed to handle requests and follow-up disputes; you can request deletion of unnecessary messages and attachments.
Account deletion does not instantly remove individual records from existing backups. Automatic expiry is not yet unified across backup types; we cannot promise all copies disappear within 30 days. Backups are limited to recovery/security purposes. Restoration must be checked against deletion records before access is restored, so deleted accounts are not directly reactivated. Contact support about backup handling and reasons for necessary retention.
Where applicable legal retention or disputes prevent immediate deletion, we will explain the scope and reasons. Information no longer needed should be deleted or de-identified.
Your rights and choices
Contact support@catbeatz.com to request access, a copy, correction, cessation of processing, withdrawal of applicable consent or deletion. Requests are handled under applicable requirements. Reasonable account verification may be needed to prevent disclosing or deleting another person’s data; do not send passwords or verification codes.
Open the account page, choose Delete account, read the consequences, then Continue deletion confirmation and Permanently delete current account. Apple-linked accounts require Apple authentication to verify the account and revoke authorization. If the outcome is pending, use Check deletion result instead of clearing app data. Contact support if blocked; sending an email does not mean deletion has succeeded.
Uninstalling, clearing saves or signing out does not delete the server account. An unlinked guest account can become inaccessible if its local credentials are lost. See Account deletion for instructions and limitations.
Security, minors and changes
We use encrypted transport, access controls and restricted administration interfaces, but cannot guarantee absolute security. Do not share credentials; report suspected account abuse to support.
The game targets general casual audiences, not specifically children. Availability and age ratings are shown in your local App Store listing. Minors should use it with appropriate guardian guidance. Guardians can contact us about child-data concerns or deletion.
We update this page and its date as features and practices change, providing additional notice or consent where required. Publishing this policy does not mean test features have publicly launched.