Rat vs ChefPrivacy Policy
This policy explains what information the Rat vs Chef game ("the game", "we", "us") uses, why, and the choices you have. You do not need to enter a real name, email address or other contact details to play. The game and its service providers process the technical data described below. On Android, iPhone and iPad the game shows child-appropriate, non-personalised ads from Google AdMob, which you can remove with the Ad-free Pass. We do not sell data, and the game contains no analytics or tracking of its own.
Information kept on your device
Your campaign progress, stars, coins, outfits, settings and rat name are saved on your device. Before ads start, a neutral screen asks you to choose an age group or "Prefer not to say". Only that broad choice is saved locally; we do not ask for a birth date or send the choice to our room or wallet servers. The game also keeps on your device whether you accepted the name rules, whether typed names are on, the names you blocked, and whether you deleted your wallet (so it does not make a new one by itself). Uninstalling the game or clearing its data deletes these local settings.
Online play (optional)
If you choose to play online, the game connects to our room service at rooms.ratvschef.com and sends:
- your rat name: one you type, or a random name from the game's reviewed list (shown to the other players in your room);
- the outfit, hat, accessory and home door your rat is wearing;
- the game version, so players are matched with a compatible build.
We create a random guest identifier and a temporary session that expires after two hours. Room membership and session data are held in memory only while you play. Your rat name is shown to the other players in your room. The game and the room service check every name before it is stored or shown: names with profanity, slurs, sexual or drug words, contact details or links, or that pose as staff are refused or replaced with a reviewed name. Before typing a name, players agree to the name rules, which remind them never to use their real name or contact details. There is no player chat, voice, photo sharing or player-written room title.
Players can report or block another rat's name in the online lobby. A report sends that rat's temporary guest identifier to the room service. A name reported by two players, or by the only other player in a room, is replaced with a reviewed name for the rest of that session; the replaced name is written to our server logs so we can review it, and it is refused at sign-in until the room service next restarts. Blocking stays on your device: a blocked name is shown to you as a random reviewed name.
Diamonds and purchases
The game creates an anonymous wallet account so diamonds and premium outfits you buy are kept safe. The account holds a random account number, your diamond balance, the premium items you own and a record of diamond purchases and spends. It contains no name, email address or password. You receive a private recovery code; our server stores only a one-way hash of it and of your sign-in sessions.
Payments are handled by Google Play on Android and by Apple on iPhone and iPad. We never see your card or payment details. Google gives us a purchase token and product identifier so we can verify the purchase and add the diamonds; we keep that token encrypted only to complete or refund the purchase. Apple gives the game a record of the purchase signed by Apple (transaction number, product, date and a random token that ties it to your wallet number), which our server checks before adding the diamonds; we keep the transaction number encrypted only to stop it being used twice and to reverse a refunded purchase, and Apple tells our server when a purchase is refunded. Google's handling of your payment is described in the Google Privacy Policy, and Apple's in the Apple Privacy Policy.
We use Unity In-App Purchasing to connect the game to Google Play and the App Store. Unity processes purchase-event information, including purchase attempts and outcomes, products and prices, transaction identifiers and store purchase records, together with device and app information. On iPhone and iPad this includes the device's vendor identifier; Apple purchase records may include a random token associated with your anonymous wallet. This information supports purchase reporting and service operation. We do not receive your payment-card details. Unity explains its handling of this information in its Game Player and App User Privacy Policy.
Ads
On Android, iPhone and iPad the game shows ads served by Google AdMob, a Google service:
- reward videos that you choose to watch, for free coins, a free chest or a doubled daily treat;
- an occasional full-screen ad between runs, after a finished level, never during a level, in online play or when the game starts.
Every ad request is marked for child-directed, age-restricted treatment and limited to content rated for general audiences, regardless of the chosen age group. Ads are not personalised and are not based on your interests or other apps. The game does not use the Android advertising ID (its permission is removed from the app), and on iPhone and iPad it never asks for permission to track you, so the iOS advertising identifier (IDFA) is not available to it.
To deliver ads, measure them and prevent fraud, Google's ads software in the game collects and receives your IP address (from which a general location can be estimated), your interactions with ads (such as views and taps), diagnostic information (such as app launch time and performance) and device identifiers such as the app set ID on Android and the identifier for vendors on iPhone and iPad. This data is encrypted in transit. Google handles it under the Google Privacy Policy and explains its use in How Google uses information from sites or apps that use our services.
Players who choose an age below 18, or do not disclose an age, are marked as under the age of consent in Google's consent tool. Google suppresses consent requests for those players. For players who choose 18 or older, Google's tool asks for consent where required. When Google requires privacy controls, the Ad privacy button appears in Settings so those choices can be changed.
The Ad-free Pass is a one-time purchase from Google Play or the App Store. It removes the full-screen ads and gives every reward bonus without a video. The game unlocks it from the store's own record of your purchase (Restore Purchases brings it back); we do not store it on our servers.
Technical data and security
When your device talks to our servers, they necessarily receive your IP address and basic request details. We use these only to connect you, to protect the service against abuse (for example rate limits) and to fix problems. Server logs are rotated automatically and kept only for a short time. We do not use them to identify or profile you.
All connections to our servers are encrypted.
What we do not do
- No personalised or interest-based ads, no remarketing, no use of the Android advertising ID and no tracking request on iPhone or iPad.
- No analytics, crash-reporting or tracking software of our own. Third-party software processes the advertising and purchase-event information described above: Google AdMob, Unity In-App Purchasing and the stores' billing services.
- No selling of your information, and no sharing with advertisers or data brokers beyond the Google ad service described above.
- No device location access or precise-location collection. The game does not request your location, contacts, photos, microphone or camera. Google's ads software estimates a general location (such as your country) from the IP address it receives, as described above. Online service providers, including Unity, also receive IP addresses when the game connects to their services and handle them under their linked privacy policies.
Who receives information
Our servers are hosted by DigitalOcean, and our website by Cloudflare, who process data only to run those services for us. Google serves and measures ads as described above, Google (on Android) or Apple (on iPhone and iPad) processes payments, and Unity processes the purchase events described above. We share information otherwise only if the law requires it.
Children
The game is made for players of all ages, including children. Players who choose "Under 13" or "Prefer not to say" use random rat names from reviewed words. A grown-up can turn on typed names by entering their birth year, which is checked on the device and never saved or sent, and can turn them off again in Settings. Typed names are filtered and can be reported as described above, and the game asks players never to use their real name. Apart from that name, players cannot exchange written messages, voice or photos. Technical identifiers, connection information and purchase records are processed as described in this policy. Ads are always requested as child-directed and non-personalised. Contact us if you have questions about a child's data.
Your choices and rights
- You can play entirely offline; online play is optional.
- You can delete local data by uninstalling the game.
- To ask for a copy of your wallet data, contact support. You can delete your wallet in the game at any time, as described below. Never send your recovery code or sign-in token to support. Deleting a wallet permanently removes its diamonds and premium outfits.
Depending on where you live, you may have further rights under laws such as the GDPR; contact us to use them.
Delete your Rat vs Chef wallet account
The only account Rat vs Chef creates is the anonymous diamond wallet. To delete it and its data, open Settings in the game, then Wallet & Recovery, tap DELETE WALLET and tap again to confirm. Our server deletes it at once: its sign-in sessions end, its recovery code stops working, and its diamonds and premium outfits are removed. Coins and level progress stay on your device. If you no longer have the device, recover the wallet on another device with your recovery code and delete it there.
Older versions of the game have a REQUEST WALLET DELETION button instead. It copies an account identifier and a deletion-specific proof, which cannot sign in to your wallet, then opens this page. Email that code to support@predvix.com with the subject "Delete my wallet". Do not include your recovery code, password or sign-in token.
We verify an emailed request and process it within 30 days, removing wallet access, its balance, premium ownership and sign-in sessions. For any deletion, purchase and refund records may be retained only while needed to settle outstanding transactions, prevent receipt reuse or meet legal obligations; we explain any such retention when confirming the request. Support tracks a separate deadline to remove encrypted backup copies containing the deleted data within 35 days after deletion. Because automatic backup pruning depends on successful backup jobs and the backup computer being available, support checks expiry and removes affected copies manually when needed. Backups are not used to restore a deleted account. Deleted diamonds and premium items cannot be restored. Google Play and Apple keep their own records of your payments under their privacy policies. Local progress is not on our servers; uninstalling the game deletes it.
Deleting your wallet ends wallet access and removes its balance, premium ownership and sign-in sessions as described above; it does not automatically erase records held separately by Google, Apple or Unity. Their handling of those records and related privacy requests is described in their linked privacy policies. You can contact support for help with a privacy request without sending your recovery code or sign-in token.
Changes
If we change this policy we will update it on this page and change the effective date above.
Contact
Questions or requests: support@predvix.com