Brainrot Cards

Brainrot Cards

Privacy Policy

Last Updated: September 3, 2026
Your Privacy Matters: Brainrot Cards is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and how we protect it.

1. Information We Collect

1.1 Sign-In (Platform Accounts Only)

Brainrot Cards does not have its own account system and never sees or stores your Google or Apple password. If you choose to sign in, it is handled entirely by the platform:

  • Android: Google Play Games Services
  • iOS: Game Center (iCloud)

Signing in is optional and is used only to enable cloud save (see 1.3). If you don't sign in, the game still works fully using local storage only.

1.2 Game Data (Local Storage)

Your game progress is stored locally on your device, including:

  • Owned cards and collection progress
  • Daily streak
  • Pack opening cooldowns
  • Notification and sound preferences

We do not operate our own game servers — this data is never transmitted to us.

1.3 Cloud Save (Google Play Games Services / iCloud)

If you sign in, your card collection can be backed up and synced across devices using the platform's own cloud save service — Google Play Games Services on Android, or iCloud on iOS. This sync is handled entirely by Google or Apple under their respective privacy policies; we do not run our own backend and cannot access this data ourselves.

1.4 Local Peer-to-Peer Trading (Bluetooth)

Brainrot Cards requests Bluetooth permission to let you trade cards directly with a nearby player over a local, device-to-device connection. Bluetooth is used only to discover and connect to nearby devices for trading, and no trade data is sent to us or to any server — it stays between the two trading devices.

On Android versions older than 12, the OS requires a location permission to be granted for Bluetooth scanning; the app does not access, use, or store your location. On Android 12 and later, no location permission is requested for this feature at all.

1.5 Device and Advertising Information

  • Push notification token (APNs on iOS, FCM on Android) — used only to deliver local daily pack reminders.
  • Advertising identifier — collected by Google AdMob to deliver and measure rewarded video ads, subject to your consent choices (see Section 8).

1.6 Purchase Information

Brainrot Cards offers one-time in-app purchases (Rare Bundle, Epic Vault, Legendary Mega) processed via Google Play Billing on Android and Apple StoreKit on iOS. Purchases are handled entirely by the Apple App Store or Google Play Store — we do not access or store your payment card details. There are no subscriptions.

2. How We Use Your Information

  • Gameplay: Track your card collection, streaks, and progress locally on your device
  • Cloud Save: Back up and sync your card collection across your devices via Google Play Games Services or iCloud, if you sign in
  • Trading: Enable direct, local card trades with nearby players over Bluetooth
  • Reminders: Send local notifications about daily pack availability
  • Advertising: Show rewarded video ads via Google AdMob to earn in-game bonuses
  • Purchases: Unlock card bundles you have purchased

We do not use your data for profiling beyond standard AdMob ad delivery, and we never sell your information.

3. Data Sharing and Disclosure

3.1 Third-Party Services

  • Google Play Games Services / Apple Game Center & iCloud: Handle optional sign-in and cloud save of your card collection
  • Google AdMob: Serves rewarded video ads and collects advertising identifiers per Google's Privacy Policy
  • Google User Messaging Platform (UMP): Manages your ad consent choices under GDPR and CCPA
  • Apple App Store / Google Play Store: Process in-app purchases via StoreKit / Play Billing

3.2 No Sale of Data

We do not sell, rent, or trade your personal information to any third parties. We have no backend server of our own and no analytics SDK collecting your gameplay data.

3.3 Legal Requirements

We may disclose information if required by law or a valid legal request from public authorities.

4. Data Retention and Deletion

Game data not backed up to the cloud lives solely on your device — uninstalling the app permanently deletes it, including your card collection, streak, and preferences. This action is irreversible.

If you signed in and enabled cloud save, your synced collection is retained by Google Play Games Services or iCloud under their own retention policies until you delete it — via your Google Play Games Services / iCloud account settings, or by contacting us to request deletion. Bluetooth trading does not retain any data since no trade information passes through us or any server.

5. Your Rights and Control

  • Sign-in: Signing in and cloud save are optional — you can play entirely offline using local storage only
  • Bluetooth: Grant or revoke the Bluetooth permission at any time in your device Settings; trading simply won't be available if denied
  • Notifications: Enable or disable reminder notifications at any time in your device Settings
  • Ad tracking: Manage your ad consent choices via the in-app consent dialog, or your device's system-level tracking and advertising settings
  • Data deletion: Uninstall the app to remove all locally stored data, and use your Google/Apple account settings (or contact us) to delete any cloud-saved collection

6. Children's Privacy

Brainrot Cards is intended for a general audience aged 13 and older. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, contact us and we will promptly address it.

7. Data Security

  • Local game data is stored on your device — there is no server-side database of ours to breach
  • Cloud save and sign-in data are protected by Google's and Apple's own security infrastructure, not ours
  • Bluetooth trading uses a direct device-to-device connection — no trade data passes through any server
  • We do not collect or transmit passwords, payment details, or account credentials
  • Purchases are handled entirely by Apple and Google's secure payment infrastructure

8. Advertising Consent (GDPR / CCPA)

Brainrot Cards uses Google's User Messaging Platform (UMP) to present a consent dialog to users in the EEA, UK, and other applicable regions before showing personalised ads, in compliance with GDPR. California residents may opt out of the sale/sharing of personal information for advertising purposes via the same consent flow, in compliance with CCPA. You can change your choice at any time from the app's settings.

9. GDPR (European Users)

If you are in the EEA, your rights include: access, rectification, erasure, restriction, and the right to object. Because Brainrot Cards stores no personal data on our own servers, most of these rights are already satisfied by uninstalling the app, disabling cloud save, or adjusting your ad consent choice. Our legal basis for advertising is your consent, collected via the UMP consent flow.

10. CCPA (California Users)

You have the right to know what we collect and to opt out of the sale/sharing of personal information. We do not sell personal information; advertising identifiers are shared with Google AdMob only per your consent choice. Contact us to exercise your rights.

11. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes by updating the date above and, where appropriate, sending an in-app notification.

Contact Us

Questions about this Privacy Policy? We'll respond within 30 days.

merligamedev@gmail.com

© 2026 Brainrot Cards by Pling Studio. All rights reserved.