Privacy Policy
WaveBeasts is a scan-to-creature game. This policy explains what we collect, why, and your choices. The short version: we collect only what the game needs to work, we don't run ads or third-party trackers, and we never sell your data.
What we collect
- Account info - the username you choose and a securely hashed password. We don't require an email or real name.
- Game data - the beasts you catch, your currency and items, your buddy, your battle/trade activity, and the devices ("nodes") you register (each with a random token). Signing in from the Android app registers that phone as a device node on your account.
- Subscription data - if you buy Premium we store your subscription status and a customer or purchase reference from the payment processor (Stripe on the website, Google Play in the Android app, including the Google Play purchase token). We never see or store your card number.
- Scan snapshots - when a device you've linked submits a scan, it sends a bundle of real-world signal readings (e.g. nearby Wi-Fi/Bluetooth identifiers, sensor values). We use these to generate a beast on the server. We store a small record of the outcome (what was generated) rather than a long-term log of your raw environment.
- Basic technical data - standard server request logs (IP address, timestamp) kept briefly for security and reliability.
On your device
The app and the standalone engine can run and generate beasts locally, offline, with no account. The phone app reads device sensors (camera, location, etc.) only with your permission and only to build a scan. That data stays on your device unless you link an account and choose to submit a snapshot or upload your local collection.
How we use it
- To run the game: generate beasts, keep your collection, power battles, trades and your buddy.
- To keep the service secure and working (anti-cheat, rate limits, abuse prevention).
We do not sell or rent your data, we do not show ads, and we don't share your data with third parties except infrastructure providers that host the service on our behalf (e.g. our hosting and database provider) and our payment processors (Stripe, and Google for Google Play purchases), under their own safeguards.
Cookies
We use only essential cookies - a session cookie to keep you signed in and a security (CSRF) cookie. We don't use advertising or analytics cookies. The site works with just these.
Retention & your choices
- We keep your data while your account is active.
- You can release beasts, delete nodes, and delete your account yourself from the website (Delete account) or from the app's Account tab - which removes your account and associated game data.
Children
WaveBeasts isn't directed at children under 13, and we don't knowingly collect their data.
Changes & contact
We may update this policy as the game evolves; we'll change the date above. Questions, data access, or a deletion request? Email jwest@jameswest.space.