Privacy Policy — Crawlosseum
Effective date: October 15, 2026
Crawlosseum ("the game", "we", "us") is a dungeon-crawler game published by the developer of Crawlosseum. This policy explains what we collect, why, and your choices. It applies to the Crawlosseum Android app (com.crawlosseum.app) and the Crawlosseum web client.
What we collect
We collect only what the game needs to run and to let us fix problems and understand how it's played.
| Data | When | Why | Where it goes |
|---|---|---|---|
| Google account ID, email, and display name | When you sign in with Google | To create and secure your account and show your name in-game | Stored on our server (MongoDB). Never sold or shared. |
| Game progress (floor reached, gold, inventory, party, achievements, run history) | As you play | To save your game and power leaderboards | Stored on our server |
| Gameplay events (sessions, combat wins, purchases, descents, run-overs) | As you play | Product analytics — to understand and improve the game | Sent to PostHog from our server, keyed only by your in-game commander ID and game stats. No email or name is sent to analytics. |
| Website analytics (pages and tabs viewed, buttons and links tapped, settings changed, bug reports sent, browser and screen size) | When you play on the website, unless you turn off Settings > Account > Analytics | To see how the web game is used and where players get stuck | Sent from your browser to PostHog, tagged only with your commander ID. No email or name. Session recording is off. PostHog keeps a random ID in your browser's storage. |
| Website error reports (error message, stack trace, browser, the floor and tab you were on) | Only if the web game hits an error | To find and fix bugs | Sent from your browser to Sentry, tagged only with your commander ID. Web addresses lose their query strings and sign-in tokens are removed before sending. |
| Crash reports (stack trace, device model, OS version) | Only if the app crashes | To diagnose and fix crashes | Sent to Sentry, tagged only with your commander ID. Personally identifying info is disabled. |
| Push notification token | Only if you allow notifications | To warn you when your dungeon floor is about to collapse | Stored on our server; sent to Expo's push service to deliver the notification |
| A photo of you | Only if you use Face from Photo | To check it (exactly one adult face, nothing explicit) and paint your in-game portrait | Sent from our server to Google's Gemini API, which checks it and generates the portrait. The original photo is never stored; only the painted portrait is stored on our server. |
| Portrait art you upload | Only if you use "Use your own art" | To check it for unsafe content and set it as your portrait | Sent to Google's Gemini API for a content check, then stored on our server as your portrait |
| Crawler name and run events (floor, cause of death, boss fought) | When the live AI narrator is on | To write the System's in-game narration | Sent to an AI language-model provider (Anthropic Claude, with Google Gemini or Groq as fallbacks). No email or Google account details are sent. |
We do not collect your contacts, precise location, microphone, or advertising ID, and we do not access your photos except a photo or image you choose to upload for your portrait. The game contains no third-party ads.
How we use it
- To run your account and save your progress.
- To operate multiplayer features (leaderboards, factions, arena, guilds) using your chosen in-game handle.
- To diagnose crashes and improve the game based on aggregate play patterns.
- To send optional gameplay notifications you've opted into.
We do not sell your personal information, and we do not use it for third-party advertising.
Third-party services
- Google Sign-In — authentication. See Google's Privacy Policy.
- PostHog — product analytics: game events from our server, and page and tap events from the website (commander ID only, no name/email, no session recording; turn the website half off in Settings > Account > Analytics).
- Sentry — crash and website error diagnostics (commander ID only, no other personally identifying info).
- Expo push notifications — delivery of gameplay notifications you opt into.
- Google Gemini API — checks and paints Face from Photo portraits, checks uploaded portrait art, and is a fallback for the live narrator.
- Anthropic (Claude) and Groq — write the live narrator's lines from your crawler name and run events.
Each processes data on our behalf under their own terms. Like any website, PostHog and Sentry see your browser's IP address when it sends them data.
Generative AI
Crawlosseum's art, including creatures, portraits, item and UI icons, frames and scenes, is made with generative AI image tools, then edited and curated by the developer. Some in-game text, including flavour text and the System's narration, is written by or with help from AI language models. Face from Photo sends the photo you upload to Google's Gemini AI to paint your portrait; the original photo is not stored.
Data retention & deletion
We keep your account and game data until you ask us to delete it. To request deletion of your account and all associated data, email the address below with the Google account you signed in with. We'll delete it within 30 days.
Children
Crawlosseum is not directed at children under 13, and we do not knowingly collect personal information from them.
Changes
We may update this policy; the "Effective date" above will change. Material changes will be noted in the app's update notes.
Contact
Questions or deletion requests: goosexgoosecreations@gmail.com