Privacy policy

1. Who we are

Gaki Games is operated by Gaki Games Limited, a company registered in England and Wales. Our contact address is 124–128 City Road, London, EC1V 2NX, United Kingdom.

Gaki Games Limited is responsible for the personal information described in this policy. Contact support@gakigames.com for privacy questions, requests or complaints. You can also write to our contact address, addressed to Gaki Games Privacy.

This policy covers gakigames.com, OVER! and PRESS!, including their browser, iOS and Android versions, and our support, newsletters and playtests. A feature described here applies only where it is available in the version you use. Apple, Google and websites you visit through external links have their own privacy notices for information they handle independently.

2. The short version

• Our games are intended for people aged 13 and over.
• You can play without signing up. PRESS! automatically posts eligible completed-shift results to guest leaderboards with generated nicknames. Its guest identity and posted scores are held online; ordinary gameplay progress stays on your device. OVER! does not use this PRESS! leaderboard service.
• Progress and settings are stored on your device. Optional play statistics and crash reports use Google Firebase in supported app versions and are off until you agree.
• Games may offer optional rewarded ads through Google AdMob. PRESS! also shows ads between shifts, outside active play. Watching a rewarded ad is a separate choice from sharing play statistics.
• Our current ad implementation requests non-personalised ads. Adult-only personalised advertising is a future feature, subject to the safeguards below.
• We use your email for support or the newsletters you request. Playing a game or contacting support does not subscribe you to marketing.
• We do not offer player chat or public content uploads. You may still choose to send us attachments privately when asking for support or giving playtest feedback.

3. Information you give us

Support and feedback. If you email us, we receive your email address, the name displayed by your email service, your message and any attachments or diagnostic information you choose to include. Please avoid sending passwords, payment details or sensitive information. Diagnostic exports are optional; check their contents before sending them.

Newsletters. If you ask to receive news, we keep your email address, any name you supply, and a record of your subscription and preferences. News may include releases, playtests, updates and other Gaki Games projects. We currently manage the mailing list and send messages manually using Google email.

Playtests. We receive the contact details, device information and feedback you choose to provide when applying for or taking part in a playtest. An invitation may explain additional information needed for that particular test. We will ask separately before recording your voice, image or a play session; agreeing to a test does not itself authorise recording.

PRESS! guest leaderboards

PRESS! creates or resumes a Firebase guest identity when it uses the online leaderboard service, including when it automatically submits an eligible completed-shift result. You do not need to enter an email address or password, open the leaderboard or press a separate posting button. Google assigns an account identifier and the service generates a café nickname. Public boards show your generated nickname, score, rank and gameplay totals such as correct orders and burns, not your Firebase account identifier. Automatic score posting does not turn on optional Analytics.

To validate a result, the app sends its current game save to our Cloud Function. The application processes that save in memory and stores only the leaderboard records, including best scores, correct-order and burn counts, update times and the guest account identifier needed to associate records with you. It does not retain the complete submitted save. Firebase Authentication and App Check support access checks and abuse protection. Providers also process technical and security information, including network and device signals; their infrastructure logs have separate retention rules.

Guest credentials are stored on your device. Reinstalling or changing devices can lose access to that identity; there is no account-linking or cloud-save feature. Use Delete scores in PRESS! to remove that guest’s leaderboard entries and Firebase account. A minimal deletion record keyed by the old account identifier remains to stop stale requests recreating deleted entries. After deletion, a later eligible completed shift can create a new guest identity and post a new result. Deleting scores does not delete local progress or a store purchase, and does not promise immediate erasure of provider logs or backups. If you can no longer access the app, contact support; we may need information to identify the relevant records.

PRESS! reminders

Optional café reminders are scheduled locally on your device after you enable them and grant notification permission. You can turn them off in the game or device settings. Remote promotional notifications are prepared for a future release but are not enabled in the current PRESS! configuration. We will explain their data use and ask separately before enabling them.

4. Device storage and website information

Games store progress, settings, earned currency, unlocks and limited diagnostic records locally. Browser versions use browser storage; mobile apps use device storage. The exact save format differs by game. In OVER!, local reporting queues and diagnostic logs are capped in size, and a small local record helps measure first play and return visits if you later agree to reporting. Local crash files can be created by the crash SDK even while automatic upload is disabled; the app requests deletion of unsent reports when reporting is declined.

Clearing browser storage or app data can remove progress and preferences. Device or operating-system backups may contain local saves and are controlled by your device and backup provider. We cannot restore a save we do not hold.

Cloudflare hosts and delivers the website. When you connect, technical information such as your IP address, requested page, request time, browser or device information and security signals is processed to deliver pages, prevent abuse and keep the site working. We do not currently add website advertising trackers or a separate website analytics service. Necessary hosting or security technologies may still be used. Game storage for saves and preferences is separate from optional analytics or advertising technologies.

Where consent is required for optional cookies, SDK storage or similar technologies, we request it before using those technologies. Browser controls can remove stored information, but doing so can reset progress and consent preferences.

5. Optional analytics and crash reports

Supported mobile versions use Google Analytics for Firebase and Firebase Crashlytics when you turn on “Share play stats & crash reports”. You can decline and continue playing, or change your choice in Settings. The current OVER! browser implementation does not upload Firebase analytics or crash reports.

In PRESS!, the optional reporting switch enables Firebase Analytics, not Crashlytics uploads. It reports a limited set of gameplay and menu events; automatic leaderboard posting does not change that choice.

Play reports describe events such as opening the game, completing a tutorial, throws, catches, missed attempts, scores, power choices, continues, unlocks and return visits. They can include event times, a game-run identifier, mode, challenge identifiers, attempt counts, lives, throw and catch measurements, earned coin balances and the method used to continue a run. In-game character identifiers describe fictional characters, not players' names.

Firebase also processes information added by its SDKs: app-instance or installation identifiers, session and engagement information, app and SDK versions, device model, operating system, language, time zone, network context and approximate region derived from IP information. Crash reports can include error messages, stack traces, app state, crash times, device and operating-system details, memory or disk information and crash-installation identifiers. Analytics events can appear as breadcrumbs in crash reports when enabled.

These identifiers can distinguish an installation or session, so we do not describe this information as completely anonymous. Gameplay reporting does not intentionally send your support email, name or message content. Error messages may contain unexpected information; filtering reduces that risk but cannot guarantee that every personal detail is removed.

Turning reporting off stops future optional reports, discards pending gameplay reports and requests the deletion of unsent crash reports. It does not automatically erase reports already received by Google. You can ask us about deletion using the contact details above; we may need information that lets us locate the relevant installation record.

6. Advertising and personalisation

Where rewarded ads are available, you choose whether to watch an ad for the reward shown in the game. We use Google AdMob. Ad processing is separate from Firebase analytics consent. Non-personalised advertising still involves data processing, including ad delivery, frequency controls, measurement and fraud prevention.

AdMob and its partners may process your IP address, approximate location, app and device information, identifiers available to the SDK, ad views, interactions and diagnostic information. The identifiers available depend on the platform, app configuration, permissions and consent choices. Our current OVER! and PRESS! implementations request non-personalised ads and do not request Apple's tracking permission.

We do not enable behavioural ad personalisation for under-18s or users whose adult eligibility has not been established. Personalised ads are not enabled in the current implementation. Before introducing them for eligible adults, we will provide an appropriate age check, a separate consent choice, the required platform permissions and updated information about the identifiers and partners involved. Refusing personalisation will not prevent ordinary gameplay.

Where an ad-consent form or Ad privacy choices control is provided, use it to review the choices available in your region. You can also contact us. Withdrawing consent affects future processing and does not automatically remove previously collected information. If the required consent is unavailable, an ad or its reward may be unavailable. Choosing not to watch a rewarded ad does not by itself withdraw earlier advertising consent.

Read Google's privacy policy and how Google uses information from partner services for Google's own processing. We do not sell mailing lists or support correspondence. Sharing information for personalised advertising, if introduced, may count as a sale or sharing under some privacy laws; the relevant choices must be available before that processing starts.

PRESS!: rewarded videos can unlock a boost for a shift. Between-shift ads do not interrupt active gameplay. The permanent remove-all-ads purchase also permits boost selection without watching an ad. Ads depend on availability and the privacy choices applicable to your region; use the in-game ad privacy control where provided to revisit those choices.

7. Why we use information

Where UK or European data-protection law applies, our purposes and legal grounds are:

• Providing a service you request: providing PRESS! leaderboards as part of the game, restoring purchases, and handling a playtest application or support request where necessary to perform our agreement with you, or take steps you request before an agreement. We otherwise rely on our legitimate interest in answering questions and resolving problems.
• Operating and protecting the website and games: our legitimate interests in delivering reliable services, investigating faults and abuse, and protecting users and our business. We consider the effect on your privacy, including the interests of younger players.
• Optional analytics, crash uploads and marketing emails: your consent. These choices are separate from accepting the Terms.
• Advertising: consent for technologies and personal-data uses that require it, including future personalised advertising. Where legally permitted without consent, we rely on legitimate interests for strictly necessary delivery, security and fraud prevention. This does not override a consent requirement for accessing or storing information on your device.
• Legal duties: complying with obligations that apply to us, including responding to lawful requests. For establishing or defending legal claims, we rely on our legitimate interests unless another legal ground applies.

You do not have to provide an email address to play the launch games. We need an address to reply to an email or send a requested newsletter; without it, we cannot provide that particular service. Refusing optional reporting or marketing does not prevent play. We do not use your information to make solely automated decisions that have legal or similarly significant effects on you.

8. Newsletters and your marketing choices

We send promotional emails only when you have separately opted in. Our messages identify Gaki Games and explain how to stop receiving them. You can use an unsubscribe link where supplied, reply “unsubscribe”, or email support@gakigames.com. We stop marketing to you when you withdraw consent and retain only the limited information needed to honour that choice and document it.

Necessary replies about a support request or an active playtest are separate from marketing. We do not add promotional material to essential service messages as a way around your marketing preferences. We do not use tracking pixels to measure newsletter opens in our current manual email setup.

9. Who receives information

Within Gaki Games, player and customer information is currently handled only by the founder. Our infrastructure providers process information needed to supply their services:

• Cloudflare: website hosting, delivery and security.
• Google email: correspondence, our manually managed mailing list and newsletter delivery.
• Google Firebase Analytics and Crashlytics: optional game statistics and crash reporting in supported versions.
• Google Firebase Authentication, App Check, Firestore and Cloud Functions: PRESS! guest identities, posted scores, ranking and abuse protection. The score database and leaderboard function use the London region; this does not mean every supporting service or log stays in the UK. See Firebase’s privacy information.
• Google AdMob and the ad partners identified in the applicable consent information: advertising in supported versions. Their roles depend on the service and processing involved; some processing is undertaken for their own purposes under their privacy notices.
• Apple and Google Play: app distribution and platform functions, under their own terms and privacy notices. PRESS! offers a permanent remove-all-ads purchase where available. Apple or Google handles payment and transaction records. PRESS! checks purchase ownership and restoration; we do not receive your card details. This is separate from OVER!’s launch features.

We may disclose information where legally required or reasonably necessary to protect rights and investigate unlawful activity. If we need professional advisers for a particular issue, we share only relevant information under appropriate confidentiality requirements.

If the Gaki Games business moves to another company, relevant information may be transferred as part of that change. We will assess the lawful basis and safeguards, and tell affected users about changes to the organisation responsible for their information. This paragraph does not give a future owner unrestricted permission to use information for new purposes.

10. International processing

We are based in the UK. Cloudflare, Google and their service providers operate internationally, so information can be processed outside the UK or European Economic Area, including in the United States.

Where a restricted international transfer takes place, we use an applicable adequacy arrangement, including the UK Extension to the EU–US Data Privacy Framework for eligible certified recipients, or appropriate contractual safeguards. These may include European Commission Standard Contractual Clauses together with the UK Addendum or another valid UK transfer agreement, as applicable. Ask support@gakigames.com for information about the safeguards relevant to your data and how to obtain a copy, with confidential details removed where necessary.

11. How long information is kept

We use the following schedule for information under our control:

• Support correspondence: normally up to 24 months after the request is closed.
• Playtest applications and feedback: normally up to 12 months after the relevant test ends, unless you separately opt into continuing contact. Useful feedback may be retained longer after identifying information has been removed.
• Newsletter details: until you unsubscribe, or 24 months after your last subscription confirmation or affirmative response, whichever comes first. Continuing to receive emails does not by itself extend this period.
• Consent and unsubscribe records: a minimal record for as long as necessary to demonstrate and respect your choices and address related claims. An unsubscribe record is not used for further marketing.
• Privacy-request correspondence: normally three years after the request is closed, limited to what is needed to demonstrate our response.
• Google Analytics user and event data: our retention setting is 14 months, without extending retention simply because of new activity. This setting does not control standard aggregated reports; genuinely anonymous statistics may be kept longer.
• Crashlytics: Google's published schedule retains crash traces and associated identifiers for 90 days before starting removal from live and backup systems; removal is not necessarily completed on day 90.
• PRESS! guest identities and posted scores: until you delete them through the app or request deletion, or we retire the relevant service or board. We do not currently apply automatic inactivity deletion. The minimal deleted-account marker is retained while needed to prevent stale requests restoring scores. Provider security logs and store transaction records follow their applicable retention schedules.
• Local saves, settings and capped diagnostic records: until cleared, overwritten or removed by you or the app. Their lifetime also depends on device and backup settings; they are not all subject to a fixed calendar deletion period.

Website security records and advertising records have retention determined by their operational purpose, fraud-prevention needs, legal requirements and the relevant provider's settings and policies. We do not keep a separate indefinite archive of identifiable website or advertising activity. See Cloudflare's privacy policy and Google's retention information for processing they control independently.

Information may need to be kept longer for a specific legal obligation, unresolved complaint or legal claim. We limit that retention to what is necessary. Deletion from backups follows the applicable backup lifecycle; withdrawn or deleted records must not be brought back into active marketing use when a backup is restored.

12. Security and your rights

We use access controls and reasonable technical and organisational measures to protect information. No system is perfectly secure. Do not send passwords or unnecessary sensitive information to support.

Depending on the law that applies and the processing involved, you may ask to access, correct or delete personal information; restrict its use; receive a portable copy where applicable; or object to processing based on legitimate interests. You can object to direct marketing at any time. You can also withdraw consent without affecting the lawfulness of processing before withdrawal. Rights can have legal exceptions.

Email support@gakigames.com to make a request. We may ask for proportionate information to verify your identity or identify a record, but do not ask for unnecessary identification. We will respond within the applicable legal time limit and explain any lawful extension or reason we cannot fulfil a request. Some local or pseudonymous records cannot be linked to an email address; we will explain the available options rather than promise that we can identify every record.

You can complain to the UK Information Commissioner's Office at ico.org.uk/make-a-complaint, by telephone on 0303 123 1113, or by post to Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, United Kingdom. You may also complain to the relevant authority where you live or work. We welcome the opportunity to resolve a concern first, but you do not have to contact us before approaching an authority.

13. Younger players and future features

Our games are intended for ages 13 and over, but players aged 13–17 still need appropriate privacy protections. We do not treat a 13+ label as permission to profile children for advertising. If we learn that we hold personal information from a child under 13 through our own sign-up or correspondence services, we will investigate and delete it where appropriate. A parent or guardian can contact support@gakigames.com with a concern.

PRESS!’s guest leaderboards and remove-all-ads purchase are described above. Cross-device account linking, cloud saves, paid virtual currency and subscriptions are not current PRESS! features. Before launching a feature that introduces new personal-data use, we will update this notice and give the relevant information at the point of collection, including any new providers and choices. A change to our email delivery service will also require a review of this notice and the relevant provider arrangements.

14. Changes and contact

We update the date above when this policy changes and provide a more prominent notice of material changes where appropriate. We obtain new consent when the law requires it; publishing a revised policy does not itself create consent.

Privacy and support: support@gakigames.com. Our Terms are at gakigames.com/terms.