Privacy policy

Last updated 2026-10-02. This page describes the game as it is today; when something changes (ads, crash reports, notifications), this page changes before the update ships.

Who we are

Raccoon Heist is made and run by Golden Wo, an individual in the United States, who is the controller of the data described here. Questions, requests and complaints: blindlyaiteam@gmail.com.

The short version

• No name, email, phone number, contacts, photos or precise location. You play as a guest; the app makes up a random id for your phone.
• We keep your game progress, and a record of what happens in the game (sessions, tutorial steps, crate openings, upgrades), so the game works and we can see whether it is any good.
• We look up your country from your internet address when you sign in, because some countries need different rules. We do not keep the address.
• No ads, no data sales, no crash reporting and no notifications in this version.
• You can delete your account in the game: MORE > DELETE ACCOUNT.

What we collect

Identifiers

A random device id the app creates on first launch (it is not your phone's advertising id or hardware id), and the player id our server gives your account. Settings shows the start of your player id (PLAYER ID) so you can quote it to us.

Your game

Your progress: crates, gear, gold, levels, upgrades, tutorial progress, and your answers to the privacy question.

What happens in the game

Events: when a session starts and ends, each tutorial step, a summary of each batch of crates you open (how many of each rarity), each stage you attempt and whether you cleared it, upgrades, every change to your in-game currency, and changes to your privacy choices. Each event carries the time, the app version, the platform (for example Android), your approximate country and your privacy choices.

Country

When you sign in, the server looks up the country of your internet address in a country table (DB-IP). It uses the country to apply regional rules (the game is not offered in some countries, and players in the EEA, the UK and Switzerland are asked for consent) and stamps it on events. The address itself is used for that lookup only and is not stored by the game.

Age

The game is for adults (18+). On first launch it asks the year you were born. If you are 18 or over, the phone remembers that you passed; the year is not stored. If you are under 18, nothing is stored and the game does not start.

Why we use it, and on what basis

• To run the game (your account, progress and rewards): needed to provide the game you asked for (contract).
• To keep it fair and working (spotting bugs, cheating and abuse; checking that the published odds hold): our legitimate interest in a working, honest game.
• To learn what works (retention, where the tutorial loses people, which upgrades get used): in the EEA, the UK and Switzerland, only with your consent, which you can change at any time in MORE > PRIVACY CHOICES; elsewhere, our legitimate interest, with the notice shown at first launch.
• To follow the law (age and regional rules): legal obligation.

We do not sell your data, use it to build an advertising profile, or make decisions about you that have legal or similarly significant effects.

Who else sees it

• Oracle Cloud Infrastructure hosts the game server and its database (US East, Ashburn, Virginia).
• Amplitude (its EU data centre) receives a subset of events (sessions, tutorial steps, upgrades and privacy choices) with your player id, country, app version and platform, to show us charts of retention and the tutorial. In the EEA, the UK and Switzerland it receives them only if you consented to analytics.
• Cloudflare R2 stores encrypted copies of the database for recovery.
• Google Play delivers the app and, under its own privacy policy, knows that you installed it.

These providers process the data for us under their data processing terms. Some of them are outside your country; where the law requires it, transfers rely on their standard contractual clauses.

How long we keep it

• Your account and progress: until you delete it.
• Events on our server: about three months, then the oldest month is dropped. Amplitude keeps what it received under its own retention settings, and we ask it to delete your events when you delete your account.
• Backups: 30 days.
• After you delete your account: it is removed 30 days after you ask (so you can change your mind). The events we keep for counts lose your player id at that point: they are given a random new one, so nothing links them to you. Backups made before the deletion age out within the following 30 days.

Your choices and rights

• Delete your account: in the game, MORE > DELETE ACCOUNT, or by email (how).
• Change your privacy choices (EEA, UK, Switzerland): MORE > PRIVACY CHOICES.
• Ask for a copy of your data, correct it, or object to how we use it: email blindlyaiteam@gmail.com with your player id. We answer within one month.
• You can also complain to your data protection authority.

Security

The game talks to the server over HTTPS. The admin console is not reachable from the internet. Backups are encrypted before they leave the server. No system is perfectly secure; if something goes wrong that affects you, we will tell you and the authorities as the law requires.

Changes

When this policy changes, this page changes and its date moves. If a change needs your consent (for example ads in the EEA, the UK or Switzerland), the game asks again before it applies.